Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053295 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: serialize hash resizes and cleanups Syzbot was able to trigger the followin...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053325 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between deleting...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053144)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053144 advisory. An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040cs.c has a race condition and resultant use-after-free if a physically proximate...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053207)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053207 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix a null pointer crash in mtkdrmcrtcfinishpageflip It's possible that mtkcrtc-eve...

IOHIDFamily-PoC-Research

CVE-2026-28992 — IOHIDFamily FastPathUserClient PoC 보안 연구 저장소입니다. iOS 18.7.1 및 이전 버전에서 IOHIDFamily의 FastPathUserClient의 경쟁 조건을 보여주는 두 가지 PoC 앱입니다. ⚠️ 두 PoC 모두 커널 패닉을 일으키고 기기를 재부팅합니다. 먼저 작업을 저장하세요. 취약점 요약 필드| 세부 내용 ---|--- CVE| CVE-2026-28992 구성 요소| IOHIDFamily — IOHIDEventServiceFastPathUserClient...

xiaomi15-dada-cve-2026-64560

Xiaomi 15（dada）CVE-2026-64560 NebuSec CVE-2026-64560 Android 概念验证コードを、特定の Xiaomi 15 ビルド向けにデバイス固有に適応させたものです。ADB シェルのみのヘルパーを通じて、現在のブートに対して一時的な root アクセスを提供します。 !WARNING これは実験的なカーネルエクスプロイトコードです。デバイスの再起動、カーネル状態の破損、またはデータ損失を引き起こす可能性があります。所有しているデバイス、または明示的にテストを許可されたデバイスでのみ使用してください。先に重要なデータをバックアップしてください...

CVE-2025-39866

CVE-2025-39866 - use-after-free 저자: Byte Reaper 설명 이 POC는 CVE-2025-39866 취약점을 악용하려고 시도합니다. 이 취약점은 Linux 시스템 iwb” and schedules the critical free via “wbputmany”. step 3 : - thread 2 : free wbolb - thread 1 - pointer - free object wb free old - access free address - crash kernel segfault 요구 사항 :...

Windows-WinSock-UAF-Mitigation

CVE-2026-68820：Windows WinSock（afd.sys）UAF 缓解措施 本仓库包含一个概念性补丁，用于演示针对 CVE-2026-68820 的缓解措施。该漏洞是 Windows WinSock 辅助功能驱动程序（afd.sys）中的一个严重释放后使用（UAF）漏洞。 实际利用此漏洞可使本地认证攻击者触发竞争条件、劫持执行流，并将权限提升至 SYSTEM。 根本原因 该漏洞源于套接字对象在拆除阶段的生存期管理不当。在易受攻击的状态下，afd.sys 释放了上下文缓冲区，但未能立即将指针置空。如果并发线程在此窗口期间尝试访问套接字状态，就会访问已释放的内存（UAF）...

CVE-2016-5195

CVE-2016-5195: Dirty COW Linux カーネルの競合状態 防御的研究、非武器化検証、および CVE-2016-5195 Dirty COW のパッチ分析。Dirty COW は Linux カーネルのコピーオンライト競合状態であり、ローカルユーザーが読み取り専用マッピングに関連付けられたデータを改ざんし、権限を昇格させる可能性があります。 フィールド| 値 ---|--- コンポーネント| Linux カーネルメモリ管理 / getuserpages 弱点| CWE-362: 不適切な同期を伴う共有リソースの同時実行 深刻度| 高、CVSS 3.1: 7.0...

CVE-2024-53476

CVE-2024-53476 Descripción SimplCommerce se ve afectado por una vulnerabilidad de condición de carrera en la lógica de pago, lo que permite a múltiples usuarios comprar más productos de los que hay en stock mediante solicitudes de pago simultáneas. Método de detección Un atacante puede detectar...

VQ-RefluxCore

VQ-RefluxCore: カーネル脆弱性評価・研究フレームワーク VQ-RefluxCore は、カーネルレベルの競合状態およびファイルシステム構造の脆弱性 CVE-2026-64600 / RefluXFS に関連するローカル権限昇格 LPE のメカニズムをモデル化、分析、および実証するために設計された高度なセキュリティ研究フレームワークです。 👤 開発者とメタデータ 属性| 詳細 ---|--- 開発者| VulnQuest GitHub ハンドル| @vulnquest58 フレームワークバージョン| 2.0.0 RefluxCore リリース日| 2026年7月24日 分類|...

CVE-2016-5195

CVE-2016-5195 DirtyCOW PoC dirtycow.github.io에서 수정c include include include include include include include include void map; int f; struct stat st; char name; void madviseThreadvoid arg char str; str = chararg; int i, c = 0; fori = 0; i 100000000; i++ c += madvisemap, 100, MADVDONTNEED;...

CVE-2024-7627

CVE-2024-7627 のエクスプロイト — Bit File Manager WordPress 認証なし RCE エクスプロイト 📌 説明 このリポジトリには、WordPress プラグイン Bit File Manager （バージョン 6.0 – 6.5.5 ）における重大な認証なしリモートコード実行（RCE）脆弱性である CVE-2024-7627 用の概念実証（PoC）エクスプロイトが含まれています。 Guest User Read（ゲストユーザー読み取り）機能が有効な場合、このプラグインは checkSyntax 関数内でレースコンディションを露呈します。...

OESA-2026-3592 tomcat security update

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Security Fixes: Improper Access Control,...

EUVD-2026-71774

A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...

EUVD-2026-71789

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration::start due to a race condition between task spawning and object deletion. Attackers can trigger the calibration process via shell commands to write to freed heap memory, corrupting unrelated objects or...

SUSE CVE-2026-80768

In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260i2cread points dev-readbuf at a caller-supplied buffer often an on-stack variable, arms a completion and waits up to five seconds for the device to return the dat...

SUSE CVE-2026-80787

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: fix use-after-free in nvmetpciepfexeciodwork nvmetpciepfexeciodwork submits an I/O command with req-execute and then waits for the command to complete and transfers the data back to the host. This wait is not need...

SUSE CVE-2026-80817

In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix NULL pointer deref in iommufdioaschangeprocess when racing with ioptmapfilepages iommufdioaschangeprocess iterates every IOAS area while only holding every IOAS iovarwsem, so it assumes every area has a non-NUL...

SUSE CVE-2026-80848

In the Linux kernel, the following vulnerability has been resolved: xfrm: espintcp: fix UAF during close ZDI reported and analyzed a race condition during close for espintcp sockets: espintcpclose frees emsg-skb via kfreeskb without holding any socket lock. Concurrently, the xfrmtransreinject wor...