CVE-2019-0211-exploit

CVE-2019-0211 — Apache HTTP Server ローカル権限昇格 CARPE DIEM 説明 CVE-2019-0211 は、modprefork および modphp または PHP-FPM を使用する Apache HTTP Server バージョン 2.4.17 から 2.4.38 に影響を与える ローカル権限昇格 の脆弱性です。 この脆弱性により、www-data シェルを持つ攻撃者が、PHP の Use-After-Free UAF と Apache の scoreboard の破損を組み合わせて root に昇格できます。Apache が gracefu...

cve-2024-1086-writeup

CVE-2024-1086 Causa Raíz y Explotación Kernels objetivo: Linux 6.8 netfilter nftables Ángulo novedoso: Confusión lógica en nftverdictinit provoca un double-free de refcount, explotable mediante heap spray para escritura arbitraria de memoria. Tabla de contenidos 1. Antecedentes — visión general d...

CVE-2026-82619

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitoreditemeventfiltertreatmentbsiniteventfilterctxandresult of the file src/ClientServer/services/bgenc/subscriptionmgr.c. Such manipulation of the argument EventFilter leads to use after free. T...

jfrog-CVE-2023-25136-OpenSSH_Double-Free

CVE-2023-25136 Proof-of-Concept Overview This is a DoS Proof-of-Concept of OpenSSH 9.1p1 Double-Free Vulnerability CVE-2023-25136. It will trigger the double-free and cause an abort crash. For a comprehensive understanding, check out the accompanying blog post for in-depth details. Dependencies...

cve-2019-2215

CVE-2019-2215 Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215 Based on a proof-of-concept by Jann Horn & Maddie Stone of Google Project Zero Overview Demonstration of a kernel memory R/W-only privilege escalation attack resulting in a temporary root shell. It works on Google Pixel 2/Pixel 2...

EUVD-2026-68367

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...

CVE-2026-82623 open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after free

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...

CVE-2026-82623

CVE-2026-82623 affects open62541 versions up to 1.5.5 , specifically the function UA_DataValue_backend_copyRange in the file plugins/historydata/ua_history_data_backend_memory.c of the History Backend component. The root cause is a use-after-free that can be triggered remotely without privileges ...

CVE-2015-0311

Reupload of an old Linux/Firefox port of an exploit for CVE-2015-0311 Use-after-free in Adobe Flash Player I created for educational purposes...

CVE-2026-23111-nftables-lab

CVE-2026-23111 nftables LPE: comprobación de exposición y laboratorio seguro Herramientas defensivas y un laboratorio de máquina virtual reproducible para CVE-2026-23111, la escalada de privilegios local por use-after-free en nftables del kernel de Linux una comprobación invertida de actividad de...

CVE-2026-43655-AppleM2ScalerCSCDriver-UAF

CVE-2026-43655: AppleM2ScalerCSCDriver shared scheduler use-after-free Public technical disclosure for CVE-2026-43655 , an AppleM2ScalerCSCDriver / IOSurfaceAccelerator use-after-free reachable from the default iOS app sandbox with no special entitlements. Apple addressed this issue in iOS 26.5 /...

redis-cve-2026-23479-check

redis-cve-2026-23479-check Un comprobador de versiones seguro y de solo lectura para CVE-2026-23479 — el use-after-free en el código de clientes bloqueados de Redis que permite a un usuario autenticado lograr ejecución remota de código en el host. No explota la vulnerabilidad. Se conecta,...

redis-cve-2026-23479-scanner

Escáner CVE-2026-23479 Herramienta de detección de la vulnerabilidad Use-After-Free en Redis CVE-2026-23479. Comprueba automáticamente las instancias de Redis en busca de vulnerabilidades, malas configuraciones y riesgos de exposición. Versiones afectadas...

CVE-2026-4253-Scanner

CVE-2026-42530 — Safe-Check Scanner Non-destructive mass scanner for the NGINX HTTP/3 QUIC use-after-free Inventory which of your hosts are exposed — without ever triggering the bug. ⚠️ Disclaimer This tool is for authorized security testing only — your own infrastructure, or systems you have...

CVE-2014-4109

This crash is difficult to reproduce. The included proof of concept makes it a little easier to trigger the crashing code path. My super scientific process of checking the crash was to click on the url with one hand and press enter with the other. It usually crashes within 15 attempts. "IE=9" als...

ENV-CVE-2021-3975

ENV-CVE-2021-3975 — Entorno de reproducción de la vulnerabilidad de libvirt Este repositorio es una instantánea del entorno de vulnerabilidad reproducible de la CVE-2021-3975 use-after-free en qemuProcessHandleMonitorEOF de libvirt, CWE-416, exportada desde la imagen de contenedor correspondiente...

CVE-2026-51302-PoC

CVE-2026-51302: Technical Inconsistencies sorry for the clickbait repo name but this CVE is complete and utter LLM hallucinated slop, honestly sad to see a CNA accept this with how inconsistent the claims are 💔 Conclusion CVE-2026-51302 is not real 😱 The published SQL does not reproduce a...

CVE-2026-23111

CVE-2026-23111 Auditor Linux Kernel nftables UAF This repository contains an automated audit script in Bash designed to deeply and accurately evaluate the CVE-2026-23111 vulnerability in Linux environments. 🔍 What is the CVE-2026-23111 vulnerability? CVE-2026-23111 is a Use-After-Free UAF...

libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free

A flaw was found in libxml2. A remote attacker can exploit a use-after-free vulnerability in the xmlParseInternalSubset function by providing maliciously crafted XML input. This improper handling of entity resolution can lead to a denial-of-service DoS, making the affected system or application...

Moderate: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...