CVE-2020-9273

CVE-2020-9273 These are the files I created during analysis and exploitaion of CVE-2020-9273 - a heap use-after-free in ProFTPd. Take a look at the exploit video here. Description about the files in this repo: poc-not-really-v4.c - an article and poc I wrote last year oct/2020, read to understand...

List-CVE-2025-2026

CVE-2025-69412 - KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow ... 2. CVE-2025-69413 - In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on...

sqlite-rtree-rowid0

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-rtree-rowid0 sqlite-rtree-rowid0 Class: UAF Reach: Local SQLite 3.53.4 b09c88c14082339b66c7b7158d609a771e64ca69, SOURCEID 2026-07-24 19:02:57 bf7c7f30031888f4e796e429ab3978879485813aaca6f641c7b33e4e09459bcc -...

CVE-2026-56848

CVE-2026-56848 NVD Description A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x. Note: versions mentioned in the descriptio...

teamspeak3-vulnerabilities

TeamSpeak 3 Server - Proof of Concept Exploits This repository contains proof of concept code for three vulnerabilities CVE-2026-4390, CVE-2026-4391 and CVE-2026-4392 discovered in the TeamSpeak 3 server 3.13.7. All findings were responsibly disclosed to TeamSpeak and published in our advisory. F...

CVE-2026-45185

CVE-2026-45185 — Dead.Letter: Exim Heap UAF to Remote Root CVSS 9.8 Critical | Exim 4.97–4.99.2 | Ubuntu / GnuTLS builds | Unauthenticated Full write-up with GDB trace, step-by-step analysis, and global exposure data: https://0init.github.io/cve-2026-45185-dead-letter-exim-rce.html What is it...

qemu-colo-l4-oob

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · qemu-colo-l4-oob qemu-colo-l4-oob QEMU v11.1.2 4fc49f46dc95d4a27de2509e7fceb2931e91faeb - COLO filter-rewriter Class: OOB heap buffer overflow READ/WRITE. Reach: Local guest / Remote COLO peer. parsepacketearly accept...

CVE-2018-1000030

CVE-2018-1000030 Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not been confirmed ERRASANTHREADC18...

CVE-2026-57187

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a heap-use-after-free in PJSIP TCP/SDP handling by sending a SIP INVITE over a...

CVE-2026-57187 Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a heap-use-after-free in PJSIP TCP/SDP handling by sending a SIP INVITE over a...

CVE-2026-57187

The Asterisk telephony toolkit is vulnerable to a heap-use-after-free in PJSIP TCP/SDP handling. An authenticated attacker can trigger this by sending a SIP INVITE over a connection-oriented transport and disconnecting before the server responds with a 200 OK. While the crash has only been reprod...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP session.uploadprogress Heap Use-After-Free - Pre-Auth RCE v...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell — CVE-2026-109618 / CVE-2026-109619 Peringatan...

curl:curl_fuzzer_proto_smtp: Heap-use-after-free in Curl_client_cleanup

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=4561124654383104 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerprotosmtp Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x7bd59f9e43b...

CVE-2026-53918

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA handler keeps a per-message first lease pointer so multiple IA options in one message reuse the same Reconfigure authentication key. A DHCPv6 REQUEST from an adjacent-network...

CVE2026

php2shell — CVE-2026-109618 / CVE-2026-109619 Critical Ad...

UBUNTU-CVE-2025-60491

A heap use-after-free in the dasherflushsegment function /filters/d...

UBUNTU-CVE-2025-60490

A heap use-after-free in the gffilterpidsendeventdownstream funct...

Linux Distros Unpatched Vulnerability : CVE-2025-60476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap use-after-free in the gfodfac4cfgcleanlist function /odf/descriptors.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service Do...

php2shell-CVE-2026-109618-CVE-2026-109619-PoC

php2shell — CVE-2026-109618 / CVE-2026-109619 Critical Advisory CVSS v4.0: 9.2 - Critical: On October 20, details of two pre-auth Remote Code Execution RCE flaws in the PHP core leaked online ahead of coordinated disclosure. Exploitation allows arbitrary command execution straight from the web...