CVE-2026-21007-GPU-Driver-ioctl-Race-Condition-Kernel-Memory-Mapping-

CVE-2026-21007 – GPU Driver ioctl Race Condition Kernel Memory Mapping Program Code C sim // gpudriversim.c - Simulated GPU driver ioctl with race condition include include include include void gpummap = NULL; sizet mapsize = 0; int locked = 0; void ioctlmapsizet size // Allocate GPU memory and m...

CVE-2026-0163-EXP

CVE-2026-0163 DISCLAIMER This repository is for educational and research purposes only. The author is not responsible for any misuse, damage, or illegal activities caused by the use of this material. Use at your own risk. Respect applicable laws and ethical guidelines. Overview A functional remot...

CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm

CVE-2026-85046 Saw the other POC of this and I thought to myself this is such a nightmare to look at. So I went and simplified the POC and added a jump to your own wasm. Because wasm. Chrome 152.0.7977.75 can confuse object pointers with integers during sort. poc.js keeps a stale Wasm module...

RLSA-2026:89923 Important: libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...

libreswan security update

An update is available for libreswan. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the...

RLSA-2026:89742 Important: python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RLSA-2026:89748 Important: libreswan security update

Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...

python3.9 security update

An update is available for python3.9. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming language...

libreswan security update

An update is available for libreswan. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the...

RLSA-2026:89747 Important: xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling...

xorg-x11-server security update

An update is available for xorg-x11-server. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list X.Org is an open-source implementation of the X Window System. It...

RLSA-2026:89830 Moderate: gcc security update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fixes: gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 gcc: libstdc++ integer overflo...

gcc security update

An update is available for gcc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ad...

cve-2018-8389

jscript.dll - ActiveXObject BSTR - Use After Free Vulnerability Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code. Vulnerability Description A remote code execution vulnerability exists in the way that the scripting engine handles...

-Detection-and-Mitigation-for-CVE-2022-1679

-Detection-and-Mitigation-for-CVE-2022-1679 Description The ath9k is a Linux kernel driver supporting Atheros chips. A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages...

CVE-2021-28664-PoC

CVE-2021-28664-PoC Mali kbase GPU driver UAF CVE-2021-28664 → kernel arbitrary physical memory read/write primitive PoC skeleton. Targets generic ARM64 Android platforms, independent of any specific vendor or device model. Research scope stops at "kernel arbitrary physical memory read/write...

CVE-2023-21688

Big fire collab with @cof123 on SIDECHANNEL info leak + CVE-2022-38029 chainKALPC UAF+ carrotc4k3 sidechannel Under Construction... Please come back later... Not finished yet...

CVE-2021-38639

Windows win32k ascension UAC POC Components used:win32kfull.sys、win32kbase.sys、win32k.sys Describe: win32kbase.sys UAF using POC:popup calculator...

CVE-2026-45185

CVE-2026-45185 — Dead.Letter: Exim Heap UAF to Remote Root CVSS 9.8 Critical | Exim 4.97–4.99.2 | Ubuntu / GnuTLS builds | Unauthenticated Full write-up with GDB trace, step-by-step analysis, and global exposure data: https://0init.github.io/cve-2026-45185-dead-letter-exim-rce.html What is it...

CVE-2020-0674

CVE-2020-0674 CVE-2020-0674 is a use-after-free vulnerability in the legacy jscript engine. It can be triggered in Internet Explorer. The exploit here is written by maxpl0it but the vulnerability itself was discovered by Qihoo 360 being used in the wild. This exploit simply pops calc. Exploit...