176104 matches found
CVE-2019-2215
CVE-2019-2215 Exploit for the Bad Binder vulnerability in Android written by @wired0ut. It abuses the UAF in order to leak taskstruct, then overwrites addrlimit and escalates privileges by overwriting the id block in cred. The full flow of the research and exploitation can be found here series of...
php-cve-2026-fix
php-cve-2026-fix A single Bash script that finds every PHP...
CVE-2026-98704
A flaw was found in the Linux kernel's mac80211 wireless subsystem. When associating with a wireless network profile that omits certain configuration parameters, the system prematurely frees internal data structures and subsequently reads the freed memory during connection setup. A malicious acce...
ENV-CVE-2021-3975
ENV-CVE-2021-3975 — libvirt vulnerability reproduction environment This repository is a snapshot of the reproducible vulnerability environment for CVE-2021-3975 libvirt qemuProcessHandleMonitorEOF use-after-free, CWE-416, exported from the corresponding container image yan5ui/cve-2021-3975:tier1...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shellscanner Non-destructive exposure assessment for C...
gemini-2.5-pro-nf-tables-red-teaming
Gemini 2.5 Pro nftables Red Teaming Case Study CVE-2023-32233 LLM Safety Research | Responsible Disclosure | AI Alignment Evaluation Researcher : Niranj R Mahaswar Destawell Google AI Vulnerability Reward Program : 889286 — Out of Scope Summary This repository documents a comparative LLM red...
CVE-2026-42530
CVE-2026-42530 Scanner for CVE-2026-42530, a use-after-free in nginx's HTTP/3 module. Affected: nginx 1.31.0, 1.31.1 Fixed: nginx 1.31.2 Usage pip install aioquic python3 scannerCVE-2026-42530.py port python3 scannerCVE-2026-42530.py --file hosts.txt How it works Opens two QPACK encoder streams o...
uaf-2023-28205
CVE-2023-28205: Apple WebKit Use-After-Free Vulnerability This vulnerability affects Apple WebKit and can be exploited through maliciously crafted web content, potentially allowing arbitrary code execution in the context of the WebKit process. The affected WebKit build analyzed in this repository...
CVE-2026-53359
CVE-2026-53359 A 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host it runs on. Januscape is a use-after-free vulnerability in the KVM code that has been sitting there since 2010. Using the exploit-check.sh script, we can get more vuln info about the Linux Kernel...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — CVE-2026-109618 / CVE-2026-109619 Proof-of-concep...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-waf Virtual patch / WAF rules สำหรับช่องโหว่ PHP2...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell Scanner Detection only — no exploitation performe...
CVE-2025-40271
CVE-2025-40271 — procreaddirde rb-tree UAF LPE Proof-of-concept for a local privilege escalation vulnerability in the Linux kernel proc filesystem. The bug is a use-after-free in procreaddirde caused by rberase without RBCLEARNODE, leaving stale red-black tree links that can be raced during...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell — CVE-2026-109618 Pre-auth use-after-free in PHP...
CVE-2026-42530
🛡️ CVE-2026-42530 - NGINX HTTP/3 QUIC Use-After-Free Vulnerability High-Severity Use-After-Free in NGINX HTTP/3 QUIC ⚠️ QPACK Encoder Stream Vulnerability 🔍 Overview CVE-2026-42530 is a use-after-free vulnerability in NGINX's ngxhttpv3module. A remote unauthenticated attacker can trigger it by...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109618 / CVE-2026-109619 - php2shell !CVE-2026-109...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell Scanner Detection only — no exploitation performe...
CVE-2019-2215
CVE-2019-2215 CVE-2019-2215 — Android Binder Use-After-Free Privilege Escalation Description Exploit for vulnerability CVE-2019-2215 — use-after-free in the Android kernel binder driver. Allows privilege escalation to root on vulnerable devices. Vulnerability CVE-2019-2215 — use-after-free in...
CVE-2025-14174-Chrome-Zero-Day
Affected Software: Google Chrome prior to version 121.0.6167.85. Vulnerability Type: Use‑after‑free in the V8 JavaScript engine. Description: A use‑after‑free bug in V8’s garbage collection allows crafted JavaScript to corrupt memory, leading to arbitrary code execution within the browser context...