CVE-2026-74936-gc-potato

CVE-2026-74936 Eine nicht ausgefeilte Reproduktion. Die Grundlage erforderte hier etwas Feinarbeit. Mozilla beschreibt dieses Problem als WebAssembly-Use-after-Free. Der öffentliche Fix 9823b5c86ffa hält das exakt abfangende wasm::Code in JitActivation am Leben. Der Test führt einen...

CVE-2026-42007

An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory contents beyond the intended buffer into the delivered mail. This causes memory leak and opportunity to do memory corruption during...

CVE-2026-2441

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8 Hoch | Aktiv in freier Wildbahn ausgenutzt | Renderer-RCE Sandboxed Eine Use-After-Free-Sicherheitslücke in Google Chromes Blink-CSS-Engine, die es einem entfernten Angreifer ermöglicht, über eine präparierte HTML-Seite...

CVE-2023-21608

CVE-2023-21608 Adobe Acrobat Reader – CVE-2023-21608 – Remote-Code-Execution-Exploit Blog https://medium.com/@Kushagra007/adobe-acrobat-reader-resetform-cagg-uaf-rce-exploit-cve-2023-21608-652624346c8f DEMO...

CVE-2025-40271

CVE-2025-40271 — procreaddirde rb-tree UAF LPE Proof-of-Concept für eine lokale Privilegieneskalations-Schwachstelle im Linux-Kernel-Dateisystem proc. Der Fehler ist ein Use-After-Free in procreaddirde, verursacht durch rberase ohne RBCLEARNODE, wodurch veraltete Rot-Schwarz-Baum-Verknüpfungen...

POC_CVE-2026-45185

Laboratorio di validazione del template Nuclei per CVE-2026-45185 Questo repository non è un repository PoC proof-of-concept di exploit generici. È un laboratorio di validazione locale per riprodurre e verificare il comportamento di un template CVE-2026-45185 pensato per essere contribuito a...

HyperOS-Directory-Traversal-Analysis

🔬 CVE-2025-21082: HyperOS AVCodec Use-After-Free Analisi completa della vulnerabilità Use-After-Free nel Media Framework AVCodec di Xiaomi HyperOS e simulazione in Rust...

CVE-2020-0674

CVE-2020-0674 CVE-2020-0674 è una vulnerabilità use-after-free nel motore jscript legacy. Può essere attivata in Internet Explorer. L'exploit qui è scritto da maxpl0it ma la vulnerabilità stessa è stata scoperta da Qihoo 360 mentre veniva sfruttata in natura. Questo exploit apre semplicemente cal...

STIG-Edge-RCE-CVE2025-9478

STIG – Microsoft Edge Chromium 139.0.3405.125 Esecuzione di codice remoto CVE-2025-9478, Plugin ID: 258091 Prima Riscontro: Microsoft Edge versione 139.0.3405.86 era obsoleto e vulnerabile a una grave falla di esecuzione di codice remoto RCE CVE-2025-9478. Rischio: Gli attaccanti potevano sfrutta...

EUVD-2026-67672

An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory contents beyond the intended buffer into the delivered mail. This causes memory leak and opportunity to do memory corruption during...

CVE-2026-42007

CVE-2026-42007 affects Dovecot mail server. An attacker with valid credentials can trigger a use-after-free in the mail editing code by submitting a Sieve script using the editheader extension . This leads to memory leak and potential memory corruption during mail delivery, which can crash the de...

CVE-2026-42007

An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory contents beyond the intended buffer into the delivered mail. This causes memory leak and opportunity to do memory corruption during...

CVE-2026-42007

An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory contents beyond the intended buffer into the delivered mail. This causes memory leak and opportunity to do memory corruption during...

CVE-2019-0211-exploit

CVE-2019-0211 — Escalata dei Privilegi Locali di Apache HTTP Server CARPE DIEM Descrizione CVE-2019-0211 è una vulnerabilità di escalation dei privilegi locale che colpisce Apache HTTP Server tra le versioni 2.4.17 e 2.4.38 con modprefork e modphp o PHP-FPM. La vulnerabilità consente a un...

CVE-2026-80714

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80721

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in isoconn After isoconndel, ISO sockets should not dereference the hcon any more. Currently, clearing isoconn::hcon relies on isoconndel releasing the last reference to the...

CVE-2026-80716

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain waiters on unlink sndpcmdrain on a linked stream parks an on-stack wait entry on the drained peer's runtime-sleep, and after scheduletimeout removes it only if that peer is still found in the caller's...

CVE-2026-80692

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: hold conn in hciconnectacl/lesync callbacks There is theoretical UAF if the conn is freed while the hcisync task is running. Hold refcount to avoid that...

CVE-2026-80688

In the Linux kernel, the following vulnerability has been resolved: riscv: drop init from veccheckunalignedaccessspeedallcpus This function runs within a kthread and need not necessarily finish before system finishes boot and freeinitmem unmaps the .init.text section. This function makes calls to...

CVE-2026-80680

In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amdmp2registercb stores the platform I2C context in the MP2 PCI driver's callback table before the adapter is registered. If i2caddadapter fails, probe returns and devres...