CVE-2026-42530

CVE-2026-42530 CVE-2026-42530 扫描器，针对 nginx 的 HTTP/3 模块中的释放后使用（use-after-free）漏洞。 受影响版本：nginx 1.31.0、1.31.1 已修复版本：nginx 1.31.2 使用方法 root@kitploit: pip install aioquic python3 scannerCVE-2026-42530.py port python3 scannerCVE-2026-42530.py --file hosts.txt 工作原理 在同一连接上打开两个 QPACK 编码器流。已修复版本会以 0x103...

CVE-2025-40271

CVE-2025-40271 — LPE por UAF del árbol rb en procreaddirde Prueba de concepto para una vulnerabilidad de escalada local de privilegios en el sistema de archivos proc del kernel de Linux. El fallo es un use-after-free en procreaddirde provocado por rberase sin RBCLEARNODE, que deja enlaces obsolet...

CVE-2023-1281

CVE-2023-1281 Vulnerabilidad de Use After Free en el filtro de índice de control de tráfico del kernel de Linux tcindex...

CVE-2026-90852

A flaw was found in luben zstd-jni. This flaw involves a use-after-free vulnerability in the ZstdCompressCtx.loadDict function, which handles dictionary sharing. A remote attacker could exploit this by manipulating dictionary sharing operations, potentially leading to denial of service, informati...

CVE-2018-4878

POC de CVE-2018-4878 CVE-2018-4878 se demostró por primera vez siendo explotado en la naturaleza por TEMP.Reaper. Este repositorio contiene el POC que creamos a partir del malware analizado, que se sabe que funciona contra versiones de 32 bits de Flash 27 explotando una vulnerabilidad de...

CVE-2026-90852

A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. Such manipulation leads to use after free. The attack can be executed remotely. The exploit has...

CVE-2026-90852 luben zstd-jni Dictionary Sharing ZstdCompressCtx.java ZstdCompressCtx.loadDict use after free

A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. Such manipulation leads to use after free. The attack can be executed remotely. The exploit has...

EUVD-2026-78255

A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. Such manipulation leads to use after free. The attack can be executed remotely. The exploit has...

CVE-2026-90852 luben zstd-jni Dictionary Sharing ZstdCompressCtx.java ZstdCompressCtx.loadDict use after free

A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. Such manipulation leads to use after free. The attack can be executed remotely. The exploit has...

CVE-2026-90852

luben zstd-jni (a Java binding for the Zstandard compression library) is affected by a use-after-free vulnerability in the Dictionary Sharing component, specifically in the function ZstdCompressCtx.loadDict within ZstdCompressCtx.java. Affected versions are up to 1.5.7-13 . The vulnerability can ...

kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush()

A flaw was found in the Linux kernel's block input/output control group blk-cgroup component. This vulnerability, a Use-After-Free UAF, occurs when multiple block control groups are released at the same time. A race condition allows one group to remove another's entries while it is still in use,...

kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove

A flaw was found in the Linux kernel's qrtr network subsystem. A race condition exists in the qrtrportremove function where the socket reference count is decremented prematurely. This allows a concurrent reader to access a socket whose reference count has dropped to zero, potentially leading to a...

kernel: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. This use-after-free vulnerability arises from incorrect handling of fast-RX rate data during mesh processing. This can lead to memory corruption, which an attacker could potentially exploit to cause a system crash denial of service...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash

A flaw was found in the ath9k Wi-Fi driver in the Linux kernel. A race condition exists during the asynchronous firmware loading process and device disconnection. A local attacker, by repeatedly connecting and disconnecting a malicious USB Wi-Fi device that fails firmware download, could trigger ...

CVE-2025-14174-Chrome-Zero-Day

Software afectado: Google Chrome anterior a la versión 121.0.6167.85. Tipo de vulnerabilidad: Use-after-free en el motor de JavaScript V8. Descripción: Un error de use-after-free en la recolección de basura de V8 permite que JavaScript manipulado corrompa la memoria, lo que conduce a la ejecución...

CVE-2026-42530

🛡️ CVE-2026-42530 - NGINX HTTP/3 QUIC 释放后使用漏洞 NGINX HTTP/3 QUIC 中的高危释放后使用漏洞 ⚠️ QPACK 编码器流漏洞 🔍 概述 CVE-2026-42530 是 NGINX 的 ngxhttpv3module 模块中的一个 释放后使用 漏洞。 远程未认证攻击者可以通过在 HTTP/3 上重新打开已关闭的 QPACK 编码器流 来触发此漏洞，导致工作进程崩溃（拒绝服务），并在某些配置下可能导致 远程代码执行 。 🚨 严重性 指标| 评级| 颜色 ---|---|--- CVSS v3.1 影响 ：拒绝服务 +...

kernel: net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove

A flaw was found in the Linux kernel's qrtr network subsystem. A race condition exists in the qrtrportremove function where the socket reference count is decremented prematurely. This allows a concurrent reader to access a socket whose reference count has dropped to zero, potentially leading to a...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash

A flaw was found in the ath9k Wi-Fi driver in the Linux kernel. A race condition exists during the asynchronous firmware loading process and device disconnection. A local attacker, by repeatedly connecting and disconnecting a malicious USB Wi-Fi device that fails firmware download, could trigger ...