Moderate: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free

A flaw was found in libxml2. A remote attacker can exploit a use-after-free vulnerability in the xmlParseInternalSubset function by providing maliciously crafted XML input. This improper handling of entity resolution can lead to a denial-of-service DoS, making the affected system or application...

CVE-2026-23918-poc

CVE-2026-23918 — Double Free в Apache modhttp2 Затронуто: Apache HTTP Server 2.4.66 с modhttp2 + Event MPM Исправлено в: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 HIGH — возможно неаутентифицированное удалённое выполнение кода CWE: CWE-415 Double Free В чем заключается уязвимость modhttp2 в Apach...

Web Directory Free < 1.7.0 - SQL Injection

The plugin does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based. id: CVE-2024-3552 info: name: Web Directory Free 1.7.0 - SQL...

CVE-2026-82619 Systerel S2OPC subscription_mgr.c use after free

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitoreditemeventfiltertreatmentbsiniteventfilterctxandresult of the file src/ClientServer/services/bgenc/subscriptionmgr.c. Such manipulation of the argument EventFilter leads to use after free. T...

EUVD-2026-68359

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitoreditemeventfiltertreatmentbsiniteventfilterctxandresult of the file src/ClientServer/services/bgenc/subscriptionmgr.c. Such manipulation of the argument EventFilter leads to use after free. T...

CVE-2026-82619 Systerel S2OPC subscription_mgr.c use after free

A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitoreditemeventfiltertreatmentbsiniteventfilterctxandresult of the file src/ClientServer/services/bgenc/subscriptionmgr.c. Such manipulation of the argument EventFilter leads to use after free. T...

CVE-2026-82619

Systerel S2OPC versions up to 1.7.3 are affected by a use-after-free vulnerability in the function monitored_item_event_filter_treatment_bs__init_event_filter_ctx_and_result located in src/ClientServer/services/bgenc/subscription_mgr.c. A remote attacker with low privileges can manipulate the Eve...

CVE-2020-0423

CVE-2020-0423 Эксплойт для CVE-2020-0423, который представляет собой UAF use-after-free в отложенной работе Binder. В настоящее время WIP , так как это продолжающаяся серия постов в блоге @ wired0ut.github.io...

gemini-2.5-pro-nf-tables-red-teaming

Gemini 2.5 Pro nftables Red Teaming Case Study CVE-2023-32233 Recherche sur la sécurité des LLM | Divulgation responsable | Évaluation de l'alignement de l'IA Chercheur : Niranj R Mahaswar Destawell Programme de récompense pour les vulnérabilités de Google AI : 889286 — Hors scope Résumé Ce...

CVE-2025-40271

CVE-2025-40271 — procreaddirde rb-tree UAF LPE Linux 커널 proc 파일시스템의 로컬 권한 상승 취약점에 대한 개념 증명입니다. 이 버그는 RBCLEARNODE 없이 rberase를 호출하여 procreaddirde에서 발생하는 use-after-free로, 디렉터리 열거 중에 오래된 레드-블랙 트리 링크가 경쟁 조건에 노출됩니다. 저자: MadExploits 원본 취약점 연구 및 C PoC는 Aviral Srivastava N-DAY RESEARCH가 작성했습니다. 이 저장소에는 컴파...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

CVE-2025-14174-Chrome-Zero-Day

영향을 받는 소프트웨어: 121.0.6167.85 이전 버전의 Google Chrome. 취약점 유형: V8 JavaScript 엔진의 Use‑after‑free 설명: V8 가비지 컬렉션의 use-after-free 버그로 인해 조작된 JavaScript가 메모리를 손상시킬 수 있으며, 브라우저 컨텍스트 내에서 임의 코드 실행으로 이어질 수 있습니다. 악성 코드 예시에는 exploit.jsJavaScript PoC 및 CVE 식별을 위한 HTB 사용 가능 코드HTML Embed가 포함되어 있습니다...

CVE-2026-42530

🛡️ CVE-2026-42530 - Уязвимость использования после освобождения в NGINX HTTP/3 QUIC Высококритическая уязвимость использования после освобождения в NGINX HTTP/3 QUIC ⚠️ Уязвимость потока кодировщика QPACK 🔍 Обзор CVE-2026-42530 — это уязвимость использования после освобождения в модуле NGINX...

CVE-2026-28318-check

SolarWinds Serv-U Неаутентифицированная DoS: Безопасный скрипт обнаружения Безопасный, недеструктивный детектор для CVE-2026-28318 , неаутентифицированного отказа в обслуживании в SolarWinds Serv-U= 15.5.4.108. Один POST, содержащий Content-Encoding: deflate и тело, передаёт это тело декомпрессор...

CVE-2026-46242

🚨 CVE-2026-46242 - BadEpoll Une vulnérabilité Use-After-Free de haute sévérité affectant le sous-systèmeeventpoll du noyau Linux pouvant permettre une escalade de privilèges locale, une corruption de mémoire ou un déni de service. 📖 Aperçu CVE-2026-46242 est une vulnérabilité Use-After-Free UAF...

CVE-2026-46215-POC

CVE-2026-46215 : Utilisation après libération de changehandle GEM DRM élévation de privilèges locale non privilégiée Élévation de privilèges locale via une utilisation après libération dans l'ioctl noyau DRM DRMIOCTLGEMCHANGEHANDLE drmgemchangehandleioctl, numéro d'ioctl 0xD2. Accessible par tout...

CVE-2019-2215

CVE-2019-2215 Эксплойт для уязвимости Bad Binder в Android, написанный @wired0ut. Он использует UAF use-after-free для утечки taskstruct, затем перезаписывает addrlimit и повышает привилегии, перезаписывая блок id в cred. Полный ход исследования и эксплуатации можно найти здесь серия из 3 частей...

CVE-2026-43499

👻 CVE-2026-43499 — GhostLock Une faille GhostLock vieille de 15 ans permet l'escalade root et l'évasion de conteneur sur la plupart des distributions Linux GhostLock est une vulnérabilité de type Use-After-Free UAF de haute sévérité dans le sous-système rtmutex du noyau Linux. La faille provient...

CVE-2026-43494

🛠️ PinTheft — CVE-2026-43494 Escalade de privilèges locale dans le noyau Linux via RDS + iouring Page Cache Overwrite 📌 Aperçu PinTheft est un exploit de root local sophistiqué pour CVE-2026-43494 , un bug de comptage de références dans le sous-système Reliable Datagram Sockets RDS du noyau Linux...