firefox: Use-after-free in the DOM: Core & HTML component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

firefox: Use-after-free in the Audio/Video component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: Sandbox escape due to use-after-free in the DOM: Security component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Security component...

firefox: Sandbox escape due to use-after-free in the DOM: Navigation component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Navigation component...

firefox: Use-after-free in the Audio/Video component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: Use-after-free in the DOM: Core & HTML component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

CVE-2018-18500

CVE-2018-18500 PoC для CVE-2018-18500 — использование после освобождения в Firefox Разбор: https://news.sophos.com/en-us/2019/04/18/protected-cve-2018-18500-heap-write-after-free-in-firefox-analysis-and-exploitation/...

CVE-2026-65330

CVE-2026-65330 sudo /usr/bin/perl necptrieuafpocplatform.pl --spray-count 200...

Detection-and-Mitigation-for-CVE-2022-1679

Detection-and-Mitigation-for-CVE-2022-1679 ath9k — это драйвер ядра Linux, поддерживающий чипы Atheros. В драйвере беспроводного адаптера Atheros в ядре Linux обнаружена ошибка use-after-free, связанная с тем, как пользователь принуждает функцию ath9khtcwaitfortarget завершиться сбоем с помощью...

CVE-2020-0423

CVE-2020-0423 Un exploit pour CVE-2020-0423, qui est un UAF de travail defféré de Binder. Actuellement WIP , car il s'agit d'une série continue de billets de blog sur wired0ut.github.io...

ENV-CVE-2021-3975

ENV-CVE-2021-3975 — Environnement de reproduction de la vulnérabilité libvirt Ce dépôt est un instantané de l'environnement reproductible de la vulnérabilité CVE-2021-3975 libvirt qemuProcessHandleMonitorEOF use-after-free, CWE-416, exporté depuis l'image conteneur correspondante...

-Detection-and-Mitigation-for-CVE-2022-1679

-Detection-and-Mitigation-for-CVE-2022-1679 Описание ath9k — это драйвер ядра Linux для поддержки чипов Atheros. В драйвере беспроводного адаптера Atheros в ядре Linux была обнаружена ошибка use-after-free, связанная с тем, как пользователь принудительно вызывает сбой функции ath9khtcwaitfortarge...

CVE-2019-2215

CVE-2019-2215 Эксплойт для уязвимости Bad Binder в Android, написанный @wired0ut. Он использует UAF use-after-free для утечки taskstruct, затем перезаписывает addrlimit и повышает привилегии, перезаписывая блок id в cred. Полный ход исследования и эксплуатации можно найти здесь серия из 3 частей...

STIG-Edge-RCE-CVE2025-9478

STIG – Microsoft Edge Chromium 139.0.3405.125 Удаленное выполнение кода CVE-2025-9478, Plugin ID: 258091 До Обнаружение: Microsoft Edge версия 139.0.3405.86 была устаревшей и уязвимой к критической ошибке удаленного выполнения кода RCE CVE-2025-9478. Риск: Злоумышленники могли использовать...

Security update for the Linux Kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.296 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free i...

Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.22 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...

gemini-2.5-pro-nf-tables-red-teaming

Gemini 2.5 Pro nftables Red Teaming Case Study CVE-2023-32233 Recherche sur la sécurité des LLM | Divulgation responsable | Évaluation de l'alignement de l'IA Chercheur : Niranj R Mahaswar Destawell Programme de récompense pour les vulnérabilités de Google AI : 889286 — Hors scope Résumé Ce...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR MFSA 2026-100, bsc1282929: CVE-2026-96869: Information disclosure in the Networking component. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR MFSA 2026-100, bsc1282929: CVE-2026-96869: Information disclosure in the Networking component. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component...