174991 matches found
PHP2Shell: What defenders need to know about CVE-2026-109618 and CVE-2026-109619
PHP2Shell: What defenders need to know about CVE-2026-109618 and CVE-2026-109619 By Trellix Advanced Research Center · October 22, 2026 What happened On October 21, 2026, the PHP project released emergency fixes for two critical vulnerabilities in the PHP runtime, CVE-2026-109618 and...
POC_CVE-2026-45185
CVE-2026-45185 Nuclei Template Validation Lab This repository is not a general-purpose exploit PoC repository. It is a local validation lab for reproducing and reviewing the behavior of a CVE-2026-45185 template intended for contribution to projectdiscovery/nuclei-templates. The nuclei code...
CVE-2026-43499
CVE-2026-43499 — Linux Kernel Futex PI Use-After-Free Bug removewaiter in kernel/locking/rtmutex.c is used by the slowlock paths but also for proxy-lock rollback in rtmutexstartproxylock when invoked from futexrequeue. In the proxy-lock case waiter::task is not current, but removewaiter incorrect...
CVE-2026-76289
In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could make the Splunk Enterprise instance unavailable to other users by sending a request to the Representational State Transfer REST API endpoint for lookup table...
io_uring-n-day
CVE-2024-0582 PoC This repository contains a proof of concept for CVE-2024-0582 page-level use after free in iouring used for academic research. It includes a kernel configuration, build and run scripts for a reproducible QEMU environment, and the PoC exploit used in my analysis. Use this code on...
CVE-2022-2602-Kernel-Exploit
CVE-2022-2602-Kernel-Exploit Details https://blog.hacktivesecurity.com/index.php/2022/12/21/cve-2022-2602-dirtycred-file-exploitation-applied-on-an-iouring-uaf/ TL;DR The vulnerability is an Use-After-Free that impacts the registered file descriptor functionality in the iouring subsystem. It's...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109619 — PHP stale worker-global state "php2shell",...
K000163832: Linux kernel vulnerability CVE-2026-46121
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect memcgpath kfree with damonsysfslock Patch series "mm/damon/sysfs-schemes: fix use-after-free for memcgpath". Reads of 'memcgpath' and 'path' files in DAMON sysfs...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-audit !CVEhttps://img.shields.io/badge/CVE-2026-...
CVE-2017-6074-DOS
CVE-2017-6074 - DoS-Only Exploit Linux DCCP kernel panic This repository provides a modified version of the original CVE-2017-6074 exploit use-after-free in the Linux kernel DCCP subsystem, designed only to demonstrate Denial of Service DoS impact. An authenticated local user can trigger a kernel...
CVE-2022-0324
cve-2022-0324 https://ngtuonghung.github.io/pwn/cve-reproduction/cve-2022-0324/...
DEBIAN-CVE-2026-114042
FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the owned-stream deallocator when totalLength is smaller than the chunk size. A malicious RDP server can send a single well-formed Virtual Channel PDU to trigger the free and crash th...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell — Hardening e Laboratório Defensivo CVE-2026-1096...
CVE-2026-98657
A flaw was found in the Linux kernel's PulsedLight LIDAR sensor driver. When device initialization fails during power management setup, the driver fails to properly unregister the device before releasing its allocated memory. This leaves active system interfaces pointing to released memory,...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
CVE-2026-74936-gc-potato
CVE-2026-74936 A not fancy reproduction. The baseline required some fiddling here. Mozilla describes this issue as a WebAssembly use-after-free. Public fix 9823b5c86ffa keeps the exact trapping wasm::Code alive in JitActivation. The test performs a bad-signature cross-instance tail call. A Debugg...
GHSA-4RR5-89J8-MWWM Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at encode time. When TIFFWriteScanline fails, the encoder frees its output buffer but leaves the libtiff handle open. Later, when the encoder object is torn down, TIFFClose flushes...
Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at encode time. When TIFFWriteScanline fails, the encoder frees its output buffer but leaves the libtiff handle open. Later, when the encoder object is torn down, TIFFClose flushes...
