CVE-2026-64560-Analysis

CVE-2026-64560 — Linux Kernel posix-cpu-timers non-leader exec race UAF Reproducer / PoC trigger verification : Linux & Android NDK This repository is intended solely for verifying patch status and for research/learning on your own test devices. It does not contain any privilege...

simplewall

simplewall Definitely for advanced users. Description: Simple tool to configure Windows Filtering Platform WFP which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can...

CVE-2026-46215-exploit-linux-7.0-uaf-stable

CVE-2026-46215 Exploit for Linux 7.0 - More Stable & Reliable c0d3 by : Antonius w1sdom / ev1lut10n / sw0rdm4n - bluedragonsec.com https://github.com/bluedragonsecurity This exploit works in a limited environment, check some requirements below !!! WHAT THE HELL IS THIS ? This is and exploit for...

CVE-2024-50968

CVE-2024-50968 Descripción Existe una vulnerabilidad de lógica de negocio en la función Añadir al Carrito de itsourcecode Agri-Trading Online Shopping System 1.0, que permite a atacantes remotos manipular el parámetro quant al agregar un producto al carrito. Al establecer el valor de cantidad en...

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free Remote Code Execution via Use-After-Free in JScript.dll CVE-2025-30397 🧠 Description This repository contains a proof-of-concept PoC exploit for a Use-After-Free vulnerability in the JScript engine jscript.dll affecting Windows Serve...

CVE-2026-64564

Debian 13 6.12.95 SCTP ASCONF DEL-IP UAF proof of concept. root@kitploit: gcc -O2 -static -o lpe lpedebian.6.12.95.c ./lpe...

TimeAfterFree

TimeAfterFree PHP 8 sandbox escape PoC demonstrating a disablefunctions bypass on Unix-like systems. This exploit leverages a use-after-free bug to bypass disablefunctions and execute system commands. The exploitation techniques used for leaking heap pointers and obtaining read/write primitives...

teamspeak3-vulnerabilities

TeamSpeak 3 Server - Proof of Concept Exploits This repository contains proof of concept code for three vulnerabilities CVE-2026-4390, CVE-2026-4391 and CVE-2026-4392 discovered in the TeamSpeak 3 server 3.13.7. All findings were responsibly disclosed to TeamSpeak and published in our advisory. F...

CVE-2026-20637-AppleSEPKeyStore-UAF

CVE-2026-20637: AppleSEPKeyStore Use-After-Free CVE-2026-20637 | Author: Johnny Franks @zeroxjf Component: AppleKeyStore Impact: An app may be able to cause unexpected system termination Description: A use after free issue was addressed with improved memory management. —Apple Security Content, iO...

CVE-2018-14442

Foxit Reader CPDFParser::mpCryptoHandler Use After Free 1. PDF Format Background 2. Encryption Dictionaries 3. Vulnerability Details 4. ASLR and DEP Bypass 5. Environment Details 6. Trigger 7. Author PDF Format Background PDF is a file format used to represent documents. A pdf is made of multiple...

gsscred-move-uaf

GSSCred-move-uaf The com.apple.GSSCred XPC service, which runs as root on macOS and iOS, does not properly implement the "move" command, leading to a use-after-free condition in the doMove function. The GSSCred service can be reached from within the default application sandbox on iOS. This progra...

CVE-2025-62215-POC

CVE-2025-62215 — Windows Token UAF SepTokenSidSharingEnabled Race Condition This repository is for educational and research purposes only. Overview A Use-After-Free vulnerability PoC that occurs in the SepTokenSidSharingEnabled optimization path of the Windows kernel. When NtDuplicateToken...

libnfc

root@kitploit: - Free/Libre Near Field Communication NFC library Libnfc historical contributors: Copyright C 2009 Roel Verdult Copyright C 2009-2015 Romuald Conty Copyright C 2010-2012 Romain Tartière Copyright C 2010-2013 Philippe Teuwen Copyright C 2012-2013 Ludovic Rousseau Additional...

CVE-2020-11932

CVE-2020-11932 Double-Free bug in WhatsApp exploit poc. Note: Make sure to set the listner ip in exploit.c inorder to get shell nc -lvp 1337 or whatever port. and then compile. make or gcc -o exploit egiflib.c exploit.c then run ./exploit and save the content to .gif and send to victim. Source...

CVE-2023-25136

OpenSSH CVE-2023-25136 Pre-Auth Double Free – Writeup and POC What is OpenSSH? OpenSSH is a popular tool used for secure communication and remote access. It was developed as a free, open-source implementation of the Secure Shell SSH communications protocol and is widely used for various...

CVE-2017-11176

CVE-2017-11176 Prueba de concepto para CVE-2017-11176 para ejecución de código. Vulnerabilidad La función mqnotify en el kernel de Linux hasta la versión 4.11.9 no establece el puntero sock a NULL al entrar en la lógica de reintento. Durante el cierre desde el espacio de usuario de un socket...

apache_audit_cve-2026-23918

cve-2026-23918 Defensive audit tools for CVE-2026-23918 Apache HTTPD HTTP/2 double-free RCE and four related CVEs disclosed in the May 4, 2026 Apache Software Foundation security advisory. CVE| Severity| Component| Impact| Affected ---|---|---|---|--- CVE-2026-23918| High CVSS 8.8| HTTP/2| Double...

sectemplates

Sectemplates I'd like to announce the creation of SecTemplates.com, a website where infosec professionals, and startup engineering teams lacking a security team, can find templates to help bootstrap their programs. The primary focus of this site will be to provide starting points for Preparation...

OSINT-Framework

OSINT Framework http://osintframework.com Notes OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get...

CVE-2026-43499-Redmi-Turbo5

CVE-2026-43499 Exploit for Redmi Turbo 5 This preload library is built from the duchamp-root source code. ⚠️ WARNING: For educational and authorized security research purposes only. This repository provides a proof-of-concept exploit for CVE-2026-43499 GhostLock targeting the Xiaomi Redmi Turbo 5...