CVE-2023-52927

CVE-2023-52927 LPE exploit for CVE-2023-52927 - a Use-After-Free vulnerability in netfilter. My write-up of the vulnerability: CVE-2023-52927 - Turning a Forgotten Syzkaller Report into kCTF Exploit Reproducer: KASAN trigger poc Building Install dependencies: make prerequisites Build exploit: mak...

CVE-2026-19935

The Zephyr Bluetooth host is vulnerable to a use-after-free flaw in the L2CAP connection-oriented channel (CoC) object. When using a dynamic PSM (0x0080-0x00FF), the system queues received data for deferred processing via a k_work item. However, during channel teardown in l2cap_chan_destroy(), th...

CVE-2026-19935 Use-after-free of an L2CAP CoC channel object in the Zephyr Bluetooth host: RX work item is not cancelled on channel teardown

The Bluetooth LE host queues received L2CAP connection-oriented channel CoC data for deferred processing through a struct kwork embedded in the channel object lechan-rxwork, handler l2caprxprocess whenever the channel uses a dynamic PSM 0x0080-0x00FF. Channel teardown in l2capchandestroy in...

metabigor

Metabigor - potencia OSINT sin la molestia de las claves API ¿Qué es Metabigor? Metabigor mapea la infraestructura de un objetivo sin pedirte que te registres para obtener una sola clave API. Rangos de red, certificados, dominios relacionados, puertos expuestos, proveedores de CDN y fugas de...

CVE-2025-62215_analysis

CVE-2025-62215 Vulnerability Analysis Windows Kernel Race Condition / Double-Free Privilege Escalation の脆弱性調査プロジェクト。 Overview Item| Detail ---|--- CVE| CVE-2025-62215 Component| Windows Kernel ntoskrnl.exe Type| Race Condition CWE-362 / Double Free CWE-415 Impact| Local Privilege Escalation →...

systeminformer

System Informer Una herramienta gratuita, potente y multipropósito que te ayuda a monitorear los recursos del sistema, depurar software y detectar malware. Traído a ti por Winsider Seminars & Solutions, Inc...

CVE-2024-44946

Usage of the Enhanced PoC: Compile the PoC Code: bash Copy code gcc -o kcmuafpocadvanced kcmuafpocadvanced.c -pthread Run the PoC: bash Copy code sudo ./kcmuafpocadvanced The advanced PoC should simulate a highly complex race condition, potentially triggering the UAF vulnerability in the Linux...

Linux-Kernel-4.4.0-Ubuntu---DCCP-Double-Free-Privilege-Escalation-CVE-2017-6074

Linux-Kernel-4.4.0-Ubuntu---DCCP-Double-Free-Privilege-Escalation-CVE-2017-6074...

CVE-2023-32233

CVE-2023-32233 5.x Kernel Adaptation Existing Exploits 1. https://github.com/Liuk3r/CVE-2023-32233/tree/main 2. https://github.com/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-32233mitigation Reason Since the lower version listdelrcu. Method This exploit has been tested on...

s4e-cve-scanner

Latest-CVE-Scanner This API allows you to scan latest Common Vulnerabilities and Exposures CVE. This code written for Security For Everyone users. You can register at https://securityforeveryone.com/user/register for free scans. Before we get started, it's good to know: 1. In order to continue to...

CVE-2023-25136

CVE-2023-25136 Looking into the memory when sshd 9.1p1 aborts due to a double free bug. The pdf has some images that are rather blurry. I will update it soon for better legibility...

CVE-2021-30862

CVE-2021-30862 In 2021, CodeColorist released his writeups on the Mistuned vulnerabilities, a series of vulnerabilities affecting the iTunes Store allowing for one-click remote code execution. Notably, he demonstrated popping calc with no memory corruption at all, but with just a logic bug. Durin...

CVE-2017-0541

poc and vulnerability analysis of CVE-2017-0541...

OSINT-Framework

Marco OSINT http://osintframework.com Notas Marco OSINT enfocado en recopilar información de herramientas o recursos gratuitos. La intención es ayudar a las personas a encontrar recursos OSINT gratuitos. Algunos de los sitios incluidos pueden requerir registro u ofrecer más datos por $$$, pero...

CVE-2023-38434

CVE-2023-38434 xHTTP commit 72f812d y versiones anteriores sufren de una vulnerabilidad de doble liberación en closeconnection en xhttp.c, línea 595. ifconn-request.public.headers.list != NULL freeconn-request.public.headers.list; Para confirmar la vulnerabilidad, compile el servidor xHTTP inclui...

CVE-2022-32832

CVE-2022-32832 Proof-of-concept and write-up for the CVE-2022-32832 vulnerability patched in iOS 15.6 CVE-2022-32832 is a vulnerability in the AppleAPFSUserClient::methodDeltaCreateFinalize external method selector 49. Here is the decompilation pre-patch: int64 cdecl...

2022-LPE-UAF

2022-LPE-UAF Security researchers discovered 3 vulnerabilities in the Linux kernel that could allow a local attacker to elevate privileges and potentially execute malicious code. The proof-of-concept code is publicly available increasing the likelihood of exploitation in the wild...

curl: curl: HTTP/2 upload Use-After-Free

A flaw was found in curl. When curl uploads data over an HTTP/2 connection, it mishandles server stream reset frames, which can lead to the reuse of previously released memory. Under specific memory and timing conditions, a malicious server can exploit this flaw to execute arbitrary code on the...

uafuzz

UAFuzz: Fuzzing dirigido a nivel binario para vulnerabilidades Use-After-Free Directed Greybox Fuzzing DGF como AFLGo tiene como objetivo realizar pruebas de estrés en ubicaciones objetivo potencialmente vulnerables preseleccionadas, con aplicaciones a diferentes contextos de seguridad: 1...

libpng: libpng: Arbitrary code execution due to use-after-free vulnerability

A flaw was found in libpng, a library used for processing PNG Portable Network Graphics image files. This vulnerability arises from improper memory management where a heap-allocated buffer is aliased between internal data structures. When specific functions are called, a freed memory region can...