CVE-2026-96432 Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RSTSTREAM on a completed stream, planting a null pointer, and then send a PUSHPROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the...

CVE-2026-96432

A null pointer dereference vulnerability exists in the QNetworkAccessManager class of the Qt Network module . A malicious or compromised HTTP/2 server can exploit this by withholding a SETTINGS ACK and sending an RST_STREAM on a completed stream, which plants a null pointer. Subsequent delivery o...

EUVD-2026-109779

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RSTSTREAM on a completed stream, planting a null pointer, and then send a PUSHPROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the...

CVE-2026-96432 Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RSTSTREAM on a completed stream, planting a null pointer, and then send a PUSHPROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the...

CVE-2026-98877

A flaw was found in the Linux kernel's ARM Generic Interrupt Controller GIC driver. When virtual interrupt support is enabled on a system lacking an Interrupt Translation Service ITS controller, the kernel fails to disable virtual interrupt advertising. A local user capable of running a virtual...

Urgent11-Suricata-LUA-scripts

Urgent11-Suricata-LUA-scripts Suricata LUA scripts to detect CVE-2019-12255, CVE-2019-12256, CVE-2019-12258, and CVE-2019-12260 CVE-2019-12255 The script checks for CVE-2019-12255, the packet that is checked needs to have the PSH, ACK, and URG flags set, and have a payload size that exceeds 1500...

CVE-2022-2078

CVE-2022-2078 $ ./poc ... + getset leakbuffer: 0000 30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f 0123456789:;? 0010 28 00 00 00 00 02 0a 8f 68 8b a2 be 40 ac 70 8c [email protected]. 0020 ff ff ff ff 00 6c b5 81 .....l.. + kernel=0xffffffff8c70ac40...

wasm2c-tableflip

wasm2c sandbox escape: guest module runs a shell command on the host Read the blog: trustsig.eu/blog wasmrtallocatefuncreftable in wasm2c/wasm-rt-impl-tableops.inc sets table-size from the module's declared element count and then ignores the result of calloc. When the allocation fails the table i...

CVE-2026-98876

A flaw was found in the Linux kernel's Host1x bus driver. This vulnerability can lead to a Denial of Service DoS by causing a system crash. During device initialization error handling, the driver attempts to access client operations without first verifying their presence. A local user capable of...

CVE-2026-98875

A flaw was found in the Linux kernel's Nouveau GPU driver. During graphics hardware initialization on systems with GA100 chipsets, the driver fails to properly configure an internal security processor entry, leaving a required pointer uninitialized. A local user or process interacting with the...

CVE-2021-28476

CVE-2021-28476: Hyper-V vmswitch.sys arbitrary pointer dereference from guest VM Summary: A Hyper-V guest virtual machine can trigger a Denial-of-Service condition on its underlying host due to unsafe parsing of input by the VmsIfrInfoParamsOIDSWITCHNICREQUEST function in vmswitch.sys. The crash ...

CVE-2026-46215-exploit-linux-7.0-uaf-stable

CVE-2026-46215 Exploit for Linux 7.0 - More Stable & Reliable c0d3 by : Antonius w1sdom / ev1lut10n / sw0rdm4n - bluedragonsec.com https://github.com/bluedragonsecurity This exploit works in a limited environment, check some requirements below !!! WHAT THE HELL IS THIS ? This is an exploit for...

CVE-2025-24990_POC

Windows Agere Modem Driver ltmdm64.sys. This driver is very old and is not loaded by default on my test machine, so I will exploit it in a BYOVD scenario. Interestingly, according to my research this driver has existed on Windows 7 and has at least one bug. here At that time, MSRC didn't take any...

CVE-2026-46215-EXPLOIT

CVE-2026-46215 Exploit for Linux 7.0 c0d3 by : Antonius w1sdom / ev1lut10n / sw0rdm4n - bluedragonsec.com https://github.com/bluedragonsecurity This exploit works in a limited environment, check some requirements below !!! WHAT THE HELL IS THIS ? This is and exploit for CVE-2026-46215 Linux Kerne...

CVE-2025-55780

CVE-2025-55780 Null Pointer De-reference in MuPDF 1.26.4 EPUB Rendering Function CVE Reference - CVE-2025-55780 Affected Versions : 1.26.7 and before are affected Found and tested on : 1.26.4 Severity CVSSv3 score : 7.5 High Fixed in commit :...

CVE-2026-82946

SOEM version 2.0.0 and earlier contains a vulnerability where a malicious device can crash the master system. When the software receives an error response, it clears an internal pointer but continues processing. If another message arrives before timeout, the software attempts to use the cleared...

CVE-2024-27398

CVE-2024-27398 CVE-2024-27398 POC 📍 GDB Breakpoints GNU gdb Ubuntu 12.1-0ubuntu122.04.2 12.1 Copyright C 2022 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted ...

CVE-2026-62737

CVE-2026-62737 — ExecutionContext.sys Arbitrary Kernel Call Proof of concept for CVE-2026-62737: ExecutionContext.sys invokes a user-controlled TaskFn pointer in kernel mode without validation, producing a controlled kernel crash. Validated on stock Windows 11 25H2 build 26200.8655, ARM64: 0x7E...

practice-22-23

Project To run: ./script.sh GitHub repository - https://github.com/LaCinquette/practice-22-23 Progress 1. For vulnerability research I chose the FFmpeg project. I found a commit that met the requirements, namely: Matched the type CWE-476 - null pointer dereference 2. Created a Dockerfile in which...

CVE-2026-82946

SOEM version 2.0.0 and earlier is vulnerable to a NULL pointer dereference within its mailbox error handling. When the software receives an error response, it clears an internal pointer but fails to halt processing correctly. If a subsequent message arrives before a timeout occurs, the software a...