kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

A flaw was found in the Linux kernel, specifically within the RDMA Remote Direct Memory Access vmwpvrdma module. This vulnerability is a double free, which means the system attempts to release the same memory resource twice. This can occur in an error handling path within the pvrdmaallocucontext...

Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.44 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...

SUSE-SU-2026:4415-1 Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.44 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. - CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...

cve-2025-62215-exploit-poc

CVE-2025-62215 Proof-of-Concept ⚠️ WARNING - LEGAL AND ETHICAL NOTICE THIS CODE IS FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY. DO NOT use this code on systems you do not own or have explicit written permission to test DO NOT use this code for malicious purposes Unauthorized access to...

CVE-2026-23918

CVE-2026-23918 Apache modhttp2 Double-Free Detector https://github.com/user-attachments/assets/d6c30e58-548c-4b6d-9ba3-baa667238a58 python3 h2ghost.py -h usage: h2ghost.py -h --host HOST --port PORT --tls --no-tls --iterations ITERATIONS --burst-n BURSTN --timeout TIMEOUT --crash-threshold...

CVE-2026-25243

CVE-2026-25243 — Redis RESTORE double-free → remote code execution Verified against Rocky Linux 8.10, aarch64, Redis 8.6.2, jemalloc 5.3.0. Reference: https://www.zeroday.cloud/blog/redis-cve-2026-25243-deep-dive TLDR; Stable exploit, works against variety of OS distro and architecture. Executive...

dvenom

🐍 Double Venom DVenom Double Venom DVenom is a tool that helps red teamers bypass AVs by providing an encryption wrapper and loader for your shellcode. 🚀 Features 🛡️ Capable of bypassing some well-known antivirus AVs. 🔒 Offers multiple encryption methods including RC4, AES256, XOR, and ROT. 🏗️...

CVE-2021-42013

CVE-2021-42013 Vulnerable service Installation Several options: 1. Docker container docker run -d -p 8080:80 12345qwert123456/apache2450cve-2021-42013 2. Dockerfile git clone https://github.com/12345qwert123456/CVE-2021-42013.git cd CVE-2021-42013-Vulnerable-service/2.4.50 docker build -t...

CVE-2026-47558

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a double-free of imported memory state. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...

UBUNTU-CVE-2026-47558

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a double-free of imported memory state. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...

UBUNTU-CVE-2026-103679

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format TNEF file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition,...

AlmaLinux 9.2 [TuxCare] Security Update: cyrus-imapd / cyrus-imapd-devel / cyrus-imapd-doc-extra / etc (ALMALINUX9.2:CLSA-2026:1790963865)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1790963865 advisory. - An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a...

Linux Distros Unpatched Vulnerability : CVE-2026-103679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format TNEF file...

CVE-2023-20860

For studying CVE-2023-20860: Security Bypass With Un-Prefixed Double Wildcard Pattern Spring Framework 6.0.7 and 5.3.26 fix cve-2023-20860 and cve-2023-20861...

Detections-CVE-2026-23918

MOVING TO: https://github.com/insomnisec/publiccvedetections FOR BETTER LONG TERM MANAGEMENT OF DETECTION PUBLICATIONS THIS REPO WILL BE REMOVED IN JUNE 2026 PLEASE USE THE OTHER REPO GOING FORWARD CVE-2026-23918 "Apache HTTP/2 Double-Free" — Detection & Response Package Published: 2026-05-04...

CVE-2026-23918-Apache-H2-PoC

CVE-2026-23918-Apache-H2-PoC Это proof-of-concept эксплойт для уязвимости double-free в modhttp2 от Apache CVE-2026-23918. Это неприятный баг, затрагивающий путь очистки потока в h2mplx.c. Если вкратце, при правильном расчёте времени можно заставить сервер попытаться очистить один и тот же поток...

Apache-CVE-2026-23918-fix

Apache HTTP Server: http2: двойное освобождение памяти и возможное удалённое выполнение кода при раннем сбросе CVE-2026-23918. Уязвимость двойного освобождения памяти и возможного удалённого выполнения кода в Apache HTTP Server с протоколом HTTP/2. Эта проблема затрагивает Apache HTTP Server:...

CVE-2026-23918-Elite-Auditor

☣️ CVE-2026-23918-Elite-Auditor ☣️ Профессиональный инструмент разведки и рекогносцировки для уязвимости двойного освобождения памяти в Apache HTTP/2. 📌 Обзор CVE-2026-23918 CVSS 8.8 — это критическая ошибка повреждения памяти в Apache HTTP Server 2.4.66. Данный аудитор предназначен для безопасного...

CVE-2026-23918

CVE-2026-23918 Сканер Apache HTTP/2 Этот репозиторий содержит простой, безопасный для запуска Python-сканер, предназначенный для выявления серверов, уязвимых к CVE-2026-23918 — критической уязвимости двойного освобождения памяти double-free в Apache HTTP/2. 🔍 Ключевые возможности Определение...

CVE-2026-23918-test

CVE-2026-23918-test Этот репозиторий содержит Proof of Concept PoC, демонстрирующий уязвимость Double Free CVE-2026-23918 в Apache HTTP Server 2.4.66 modhttp2. Уязвимость возникает из-за состояния гонки при ранней обработке кадров RSTSTREAM. Я сосредоточился на временном окне, в котором обработчи...