The vulnerability of the reconstructCoeff function in the vvdecapp decoder (VVdeC) lies in the use of memory after deallocation during the processing of specially created VVC streams. This allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

The vulnerability of the reconstructCoeff function in the vvdecapp decoder (VVdeC) lies in the use of memory after deallocation during the processing of specially created VVC streams. This allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

The vulnerability of the reconstructCoeff function in the vvdecapp decoder (VVdeC) lies in the use of memory after deallocation during the processing of specially created VVC streams. This allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

The vulnerability of the `createSubPicRefBufs` function in the vvdecapp (VVdeC) decoder allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the createSubPicRefBufs function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the readAlf function in the vvdecapp (VVdeC) decoder allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the readAlf function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the reconstructCoeff function in the vvdecapp decoder (VVdeC) allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after deallocation when processing specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

oppo-ghostlock

oppo-ghostlock GhostLock CVE-2026-43499 — OPPO Find N2 Linux カーネル権限昇格の研究 プロジェクト概要 GhostLock CVE-2026-43499 は Linux 2.6.39 から 7.1-rc1 に影響するカーネルスタック UAF 脆弱性であり、FUTEXCMPREQUEUEPI の競合状態によって引き起こされます。このプロジェクトは、NebuSec/CyberMeowfia の x8664 exploit を OPPO Find N2 ARM64, kernel 5.10.236 に移植します。 プロジェクトの状態...

bug-free-chainsaw

bug-free-chainsaw CVE-2015-7545 개념 증명...

CVE-2019-19633

CVE-2019-19633 Chevereto 1.0.01.1.4 Free 및 3.13.5 Core의 lib/G/functions.php는 요청의 X-Forwarded-For 헤더를 조작하여 구현된 보호 메커니즘을 트리거하지 않고 공격자가 무차별 대입 공격을 수행할 수 있도록 합니다. 헤더의 IP는 보호 활성화 및 IP 차단을 피하기 위해 25번째 요청마다기본값 25 변경되어야 합니다사실상 차단은 중요하지 않음. 첫 번째 25개 요청 X-Forwarded-For: 8.8.8.1, 8.8.8.2 두 번째 25개 요청 배치...

CVE-2019-11932

CVE-2019-11932 WhatsApp의 이중 해제 버그가 RCE로 이어지는 방법 제가 안드로이드 WhatsApp에서 발견한 이중 해제double-free 취약점과 이를 RCE로 전환한 방법을 공유하고자 합니다. 이 내용을 Facebook에 알렸고, Facebook은 이를 인지하여 WhatsApp 버전 2.19.244에서 공식적으로 패치했습니다. Facebook은 이 이슈에 대해 CVE-2019-11932를 예약하는 데 도움을 주었습니다. WhatsApp 사용자 여러분, 이 버그로부터 안전하려면 최신 WhatsApp...

how2heap

Educational Heap Exploitation This repo is for learning various heap exploitation techniques. We use Ubuntu's Libc releases as the gold-standard. Each technique is verified to work on corresponding Ubuntu releases. You can run apt source libc6 to download the source code of the Libc you are using...

CVE-2026-43499-S24U

Galaxy S24 UltraSM-S928U1용 CVE-2026-43499 펌웨어 S928U1UES6DZF2 를 실행하는 미국 Samsung Galaxy S24 Ultra를 위한 공개 소스 기반, 기기별 구현입니다. 지원 대상 Model: SM-S928U1 Codename: e3q Build / AP: S928U1UES6DZF2 / S928USQS6DZF2 Kernel: 6.1.145-android14-11-33419968-abS928USQS6DZF2 Architecture: arm64, 4K pages 대상 프로필은 펌웨어별...

CVE-2026-103344

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor Free...

CVE-2025-30400

CVE-2025-30400 概念実証: Windows DWM Use-After-Free UAF プロジェクト概要 このリポジトリは CVE-2025-30400 概念実証 を提供する Python プログラムであり、Microsoft Windows Desktop Window Manager DWM Core Library CVE-2025-30400 で報告されたような Use-After-Free UAF 権限昇格ゼロデイ脆弱性 の影響を示すためのものです。この重大な脆弱性は 2025 年 5 月に実際に悪用され、攻撃者が SYSTEM 権限昇格を達成できるものでした。...

CVE-2024-1065

CVE-2024-1065 — 페이지 캐시 익스플로잇 PoC CVE-2024-1065에 대한 개념 증명 익스플로잇으로, ARM Mali GPU 커널 드라이버의 물리적 페이지 use-after-free 취약점입니다. 이 익스플로잇은 페이지 캐시 익스플로잇 을 시연합니다. 즉, 해제된 MIGRATEMOVABLE 페이지를 SUID 바이너리의 메모리 내 코드 이미지로 경쟁적으로 유도한 다음, 이를 덮어써서 디스크의 어떤 파일도 수정하지 않고 루트 권한으로 임의 코드 실행을 달성합니다. 연구 목적으로만 사용하십시오. 이 PoC는 통제된...

graylog2-server

Graylog ようこそ！ Graylog は、無料でオープンなログ管理プラットフォームです。 プロジェクトの詳細はウェブサイトで、ドキュメントはドキュメントサイトでご覧いただけます。 イシュートラッキング バグを発見しましたか？ 改善のアイデアがありますか？ お気軽にイシューを追加してください。 コントリビューション 私たちと一緒にログ管理の未来を築き、毎日何千人もの人々に利用されているプロジェクトに参加しましょう。 開始するには、コントリビューターガイドに従い、コントリビューション手順をお読みください。 無料でオープンな製品の開発に対して報酬を得たいと思いませんか？...

CVE-2022-28672

CVE-2022-28672 Discord Server このバグは、javascriptオブジェクトのメモリ参照の不適切な処理によって引き起こされた Use after Free です。 ブログ Foxit PDF Reader - UaF - RCE - JIT Spraying アドバイザリ CVE-2022-28672 デモ...

awesome-cybersecurity-blueteam

Awesome Cybersecurity Blue Team サイバーセキュリティのブルーチームのための、素晴らしいリソース、ツール、その他のキラリと光るものを集めたリストです。...

clr

CLR C 검사기 L 생명주기 및 기타 R 정제 타입 Zig를 위한 동영상: https://www.youtube.com/watch?v=mf0WzTOe-40 후원: https://buymeacoffee.com/dnautics HN에서 토론: https://news.ycombinator.com/item?id=42923829 Lobsters에서 토론: https://lobste.rs/s/9sitsj/clrcheckerforlifetimesother 라이브 데모 동영상:...