CVE-2024-44946

향상된 PoC 사용법: PoC 코드 컴파일: bash Copy code gcc -o kcmuafpocadvanced kcmuafpocadvanced.c -pthread PoC 실행: bash Copy code sudo ./kcmuafpocadvanced 향상된 PoC는 매우 복잡한 경쟁 조건을 시뮬레이션하여 Linux 커널에서 UAF 취약점을 트리거할 수 있습니다. dmesg 또는 유사한 도구를 사용하여 커널 로그를 확인할 수 있습니다. 커널 로그 분석: UAF 또는 관련 커널 메모리 손상 징후가 있는지 로그를 검사합니다. 미...

CVE-2023-32233

CVE-2023-32233 5.x 커널 적응 기존 EXP 1. https://github.com/Liuk3r/CVE-2023-32233/tree/main 2. https://github.com/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-32233mitigation 이유 낮은 버전listdelrcu에서 직접 크래시됩니다. 방법 본 exp는 v5.15.110 버전에서 테스트 완료 두 exp를 결합하여 nftrule 구조체를 스프레이하고, listhead를...

CVE-2021-30862

CVE-2021-30862 2021년, CodeColorist는 Mistuned 취약점에 대한 글을 공개했습니다. 이는 iTunes Store에 영향을 미쳐 한 번의 클릭으로 원격 코드 실행이 가능한 일련의 취약점입니다. 특히 그는 메모리 손상 없이 오직 논리 버그만으로 계산기를 실행하는 방법을 시연했습니다. 그 무렵, 저는 다양한 앱의 URL 스킴을 조사하고 있었습니다. 2년 전에 App Store의 itms-services:// URL 스킴 관련 보안 문제를 보고했기 때문입니다. 발견한 URL 스킴 중 iTunes U의...

CVE-2017-0541

CVE-2017-0541의 PoC 및 취약점 분석...

2022-LPE-UAF

2022-LPE-UAF 보안 연구원들이 Linux 커널에서 3개의 취약점을 발견했습니다. 이는 로컬 공격자가 권한을 상승시키고 잠재적으로 악성 코드를 실행할 수 있게 합니다. 개념 증명 코드가 공개되어 있어 실제 환경에서 악용될 가능성이 높아졌습니다. https://zplin.me/papers/DirtyCred-Zhenpeng.pdf...

CVE-2026-2766-but-with-wasm

CVE-2026-2766, but with wasm Status: validated crash PoC with demonstrated control-flow hijack crashpc = freed-cell poison 0xcdcdcdcdcdcdcdcd under the debug shell — the engine jumps to a pointer read out of the freed ICScript. Remaining work: control the reclaimed bytes. See research/README.md. ...

llama-cpp-security-patches

llama.cpp Security Patches Security patches for unpatched vulnerabilities in llama.cpp, discovered by Cyera Research. Background Between July 2025 and June 2026, we reported 10 vulnerabilities to the llama.cpp project through GitHub Security Advisories and MITRE. All advisories were closed by the...

ghostlock

GhostLock — Linux kernel rtmutex/futex stack-UAF tracking site Source for the GhostLock patch-status tracker: a single-page site recording which distributions have shipped a fix for the rtmutex/futex stack use-after-free in the Linux kernel. Tracking concluded 2026-08-06 : every tracked kernel...

ghostlock-oneplus

GhostLock — OnePlus Locked Bootloader Jailbreak Kernel exploit for OnePlus/OPPO/realme devices with locked bootloader. Achieves root + KernelSU installation without unlocking bootloader or modifying boot image. Runtime auto-detection of kernel version with multi-device offset table. Vulnerability...

CVE-2026-43499_OPPO-MT6835

CyberMeowfia — GhostLock CVE-2026-43499 Research GhostLock : Linux Kernel futex PI Use-After-Free vulnerability, CVE-2026-43499. Attackers exploit PI-futex dependency loops to trigger a race condition, achieving local privilege escalation on kernels with CONFIGFUTEXPI=y. Target : OPPO PLS120 OP5E...

MiracleLinux 9 : firefox-140.13.0-1.el9_8.ML.1 (AXSA:2026-1698:20)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1698:20 advisory. libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode CVE-2026-56208 firefox: thunderbird: Site isolation issue i...

MiracleLinux 9 : httpd-2.4.62-13.el9_8.6 (AXSA:2026-1691:09)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1691:09 advisory. httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in modldap per-directory configuration CVE-2026-29167 Tenable has...

MiracleLinux 9 : mod_http2-2.0.26-6.el9_8.2 (AXSA:2026-1693:03)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1693:03 advisory. httpd: modhttp2: Apache HTTP Server modhttp2: Use After Free vulnerability allows arbitrary code execution or denial of service. CVE-2026-48913 http...

CVE-2017-2751

creationtimestamp| type| source ---|---|--- 2026-08-29 23:00:18+00:00| seen| Telegram/mygM17KSjyX1ytBX-vC2bUSC6Quyw0MIzjWP6u1Kpz11D0 2026-08-30 00:00:27+00:00| seen| Telegram/mygM17KSjyX1ytBX-vC2bUSC6Quyw0MIzjWP6u1Kpz11D0 2026-08-31 00:00:42+00:00| published-proof-of-concept|...

CVE-2026-43499-ZFOLD4

CVE-2026-43499-ZFOLD4 Porting di ricerca specifico per dispositivo di CVE-2026-43499 IonStack PI write-what-where per il Galaxy Z Fold4 canadese SM-F936W sul firmware F936WVLU1AVGA. Questo repository è la controparte Fold4 di CVE-2026-43499-S24U e CVE-2026-43499-A36. Documenta lo stato attuale e...

Windows-WinSock-UAF-Mitigation

CVE-2026-68820: Windows WinSock afd.sys UAF-Mitigation Dieses Repository enthält einen konzeptionellen Patch, der die Mitigation für CVE-2026-68820 demonstriert – eine kritische Use-After-Free-Schwachstelle UAF im Windows Ancillary Function Driver für WinSock afd.sys. Die aktive Ausnutzung dieses...

PS-2018-002---CVE-2018-14442

Foxit Reader - CPDFParser::mpCryptoHandler - Uso dopo liberazione - RCE Vulnerabilità Fare riferimento a memoria dopo che è stata liberata può causare il crash di un programma, l'uso di valori imprevisti o l'esecuzione di codice Descrizione della vulnerabilità Questa vulnerabilità consente a un...

cve-2017-11176

cve-2017-11176 Informazioni Pubbliche La funzione mqnotify nel kernel Linux fino alla versione 4.11.9 non imposta il puntatore sock a NULL prima di entrare nella logica di ripetizione. Durante la chiusura da spazio utente di un socket Netlink, consente ad attaccanti di causare un denial of servic...

CVE-2026-45447

🚨 CVE-2026-45447 - Vulnerabilità Use-After-Free Critica di OpenSSL Use-After-Free nell'heap in PKCS7verify che causa corruzione della memoria, crash e potenziale esecuzione remota di codice. 📖 Riepilogo Esecutivo CVE-2026-45447 è una vulnerabilità critica nella funzionalità di verifica PKCS7 di...

libevent: Libevent: Memory corruption due to use-after-free

A flaw was found in Libevent, an event notification library. A use-after-free vulnerability exists in the evbufferaddbufferreference function when it processes an output buffer with a zero length. This can lead to a dangling pointer, which an attacker could exploit to cause memory corruption or...