125362 matches found
CVE-2021-31166
CVE-2021-31166 0x00. 描述 这是 CVE-2021-31166（“HTTP 协议栈远程代码执行漏洞”）的概念验证代码，该漏洞是 http.sys 中一个释放后使用（use-after-free）解引用漏洞，微软已于 2021 年 5 月发布补丁。 据我所知，它只能触发程序崩溃，请谨慎使用。 0x01. 影响范围 Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64-based Systems Windows 10 Version 20H2 for...
copy-fail-CVE-2026-31431-universal
CVE-2026-31431 - PoC de UAF por Splice en AFALG AEAD Implementación en múltiples lenguajes y compatibilidad con versiones antiguas de Python. C exploit.c root@kitploit: gcc -o exploit exploit.c -O2 gcc -o exploit exploit.c -static -O2 ./exploit Probado en Ubuntu 20.04: Python...
CVE-2026-51302-PoC
CVE-2026-51302：技术不一致性 抱歉使用了标题党式的仓库名称，但这个 CVE 完全是 LLM 幻觉生成的垃圾内容，看到 CNA 竟然接受了如此不一致的声明，实在令人遗憾 💔 结论 CVE-2026-51302 并不存在 😱 公开的 SQL 无法在 AddressSanitizer 下于任何 SQLite 3.41 版本中复现释放后使用（use-after-free）。更重要的是，所声称的根本原因与受影响源码完全不符： exprComputeOperands 在 SQLite 3.41.0、3.41.1 和 3.41.2 中不存在； 该函数于 2025 年 6 月 30 日引入...
kernel: net: bridge: stop fast-leave after deleting a port group
A flaw was found in the Linux kernel's network bridge module. When handling multicast fast-leave, a vulnerability exists where the system may attempt to access a port group after it has been deleted. This can occur if multicast-to-unicast was previously enabled and then disabled, leading to a sta...
CVE-2022-1011
CVE-2022-1011 修复链接：https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0c4bcfdecb1ac0967619ee7ff44871d93c08c909 该漏洞主要是由于漏洞的主要只由于splice的异步的特性，导致可以在用户文件系统进程中（服务端）保留服务请求的进程（客户端）的一段内存。文件系统进程在write关闭后仍然保持着对write源内存页的引用（文件系统进程只有读的权限，个人感觉危害不大:）。...
ghostlock-cve-2026-43499
CVE-2026-43499 GhostLock — ARM32 Kernel Privilege Escalation Research Linux kernel futex PI rtmutex Use-After-Free vulnerability research and exploit development targeting Huawei Watch 4 Pro MDS-AL00 , Snapdragon SW5100, armv7l, kernel 5.4.210. Vulnerability removewaiter in kernel/locking/rtmutex...
CVE-2019-0708
CVE-2019-0708 CVE-2019-0708 的初始利用程序，BlueKeep CVE-2019-0708 BlueKeep RDP 远程 Windows 内核释放后使用 RDP 的 termdd.sys 驱动程序不当处理对内部专用通道 MST120 的绑定，导致格式错误的 Disconnect Provider Indication 消息可能引发释放后使用。通过可控数据/大小的远程非分页池喷射，利用释放通道的间接调用 gadget 实现任意代码执行。 受影响的应用 该利用程序应能针对以下 Windows 系统中存在漏洞的 RDP 服务工作： Windows 2000 x86（...
CVE-2018-8353-POC
CVE-2018-8353 POC CVE-2018-8353 微软脚本引擎释放后使用的简单概念验证（POC） 来源 : https://bugs.chromium.org/p/project-zero/issues/detail?id=1506...
CVE-2025-49844
CVE-2025-49844 – Uso después de liberar en el analizador Lua de Redis La condición de carrera de GC con el nombre del chunk en Lua provoca un uso después de liberar use-after-free en Redis 8.2.1 y ejecución remota de código. Descripción general Redis incorpora Lua 5.1 para scripting. En versiones...
kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()
A flaw was found in the Linux kernel's IPv4 networking component. The ipv4sysctlexitnet function prematurely frees the net-ipv4.sysctllocalreservedports memory. This can lead to a use-after-free vulnerability, where other threads might attempt to access deallocated memory. Such an issue can resul...
kernel: net: bridge: stop fast-leave after deleting a port group
A flaw was found in the Linux kernel's network bridge module. When handling multicast fast-leave, a vulnerability exists where the system may attempt to access a port group after it has been deleted. This can occur if multicast-to-unicast was previously enabled and then disabled, leading to a sta...
kernel: net: bridge: stop fast-leave after deleting a port group
A flaw was found in the Linux kernel's network bridge module. When handling multicast fast-leave, a vulnerability exists where the system may attempt to access a port group after it has been deleted. This can occur if multicast-to-unicast was previously enabled and then disabled, leading to a sta...
SMB-LINUX-CVE-2025-37899
Linux内核ksmbd中的释放后使用漏洞 CVE-2025-37899 描述 已在Linux内核的ksmbd模块中发现一个 释放后使用 漏洞，该模块负责实现用于网络文件交换的SMB（服务器消息块）协议。此漏洞标识为CVE-2025-37899，可能允许以高权限远程执行代码。 介绍 该发现由研究员Sean Heelan使用OpenAI的o3模型完成，展示了人工智能在识别复杂漏洞方面的潜力。该漏洞存在于对SMB2/3的logoff命令的处理中，可在特定竞争条件下被利用。 技术细节 漏洞描述 释放后使用...
CVE-2018-1000030
CVE-2018-1000030 Python 2.7.14 存在堆缓冲区溢出以及释放后使用漏洞。早于 2.7.14 的 Python 版本也可能受影响，并且 Python 2.7.17 及更早版本似乎也存在此漏洞，但尚未确认。 ERRASANTHREADC18...
SUSE CVE-2026-84118
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
SUSE CVE-2026-84119
Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
SUSE CVE-2026-84120
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
SUSE CVE-2026-84121
Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
SUSE CVE-2026-84122
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...