CVE-2026-98677

A flaw was found in the Linux kernel's Analog-to-Digital Converter ADC Sigma-Delta driver. Due to an improper resource cleanup sequence when a device is unbound or disconnected, the internal sample buffer is freed before interrupt handling is disabled. A local attacker with administrative...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP RCE Patch-Status Tools — CVE-2026-109618 / CVE-2026-109619...

vvdecapp reconstructCoeff Memory Use After Free

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

vvdecapp reconstructCoeff Memory Use After Free

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

vvdecapp reconstructCoeff Memory Use After Free

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

vvdecapp Decoder Heap Buffer Overflow DoS

The vulnerability of the createSubPicRefBufs function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

vvdecapp readAlf Heap Buffer Overflow DoS

The vulnerability of the readAlf function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

vvdecapp decoder reconstructCoeff Heap Buffer Overflow DoS

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after deallocation when processing specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

php2shell-patches

PHP CVE-2026-109618 / CVE-2026-109619 Patch Helper A remediat...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

anti-php2shell !Python Versionhttps://img.shields.io/badg...

CVE-2026-98666

A flaw was found in the Linux kernel's Industrial I/O IIO adis16136 gyroscope driver. The driver fails to properly synchronize debugfs read operations during device unbinding, allowing an active read to continue after the underlying device data structures have been freed. A local user with access...

CVE-2026-98664

A flaw was found in the Linux kernel's ADIS16400 driver. A local user with access to the debug file system debugfs could cause a Denial of Service DoS or kernel memory corruption due to a use-after-free condition. This issue occurs because the driver creates its serial number debugfs file without...

CVE-2026-98663

A flaw was found in the Linux kernel's ADIS16480 Industrial I/O IIO driver. The driver fails to protect debug file system debugfs read operations against concurrent device removal. A local attacker with access to debugfs can exploit this race condition by reading firmware attributes while unbindi...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

svg-cheatsheet

SVG SSRF Cheatsheet Hosts that process SVG can potentially be vulnerable to SSRF, LFI, XSS, RCE because of the rich feature set of SVG. All of these methods specify a URI, which can be absolute or relative. File and HTTP protocol are important to test, but it could also support other protocols...

PR0CESS

PR0CESS some gadgets about windows process and ready to use :...

php-8.1.0-dev-exploit

php-8.1-dev-Exploit ⚠️ Important read first This repository contains a Java proof-of-concept PoC intended for CTF / lab use only. Do not run this code against systems you do not own or do not have explicit written permission to test. Unauthorized exploitation is illegal. Use only in isolated...

List-CVE-2025-2026

CVE-2025-69412 - KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow ... 2. CVE-2025-69413 - In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on...

RLSA-2026:86331 Important: glycin-loaders security update

Sandboxed and extendable image decoding. Security Fixes: librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-96889,RUSTSEC-2026-0305 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the...