home.social

#useafterfree — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #useafterfree, aggregated by home.social.

fetched live
  1. Daily CyberSecurity @[email protected] ·

    RustyTux is a public PoC for a Linux kernel privilege escalation via an ESP-in-TCP use-after-free (CVE-2026-23239). Details and exploit code are now public.

    #RustyTux #LinuxKernel #PrivilegeEscalation #UseAfterFree #espintcp #LPE #PoC #CVE202623239

    securityonline.info/rustytux-l

    #rustytux #linuxkernel #privilegeescalation #useafterfree #espintcp #lpe
  2. Daily CyberSecurity @[email protected] ·

    RustyTux is a public PoC for a Linux kernel privilege escalation via an ESP-in-TCP use-after-free (CVE-2026-23239). Details and exploit code are now public.

    #RustyTux #LinuxKernel #PrivilegeEscalation #UseAfterFree #espintcp #LPE #PoC #CVE202623239

    securityonline.info/rustytux-l

    #rustytux #linuxkernel #privilegeescalation #useafterfree #espintcp #lpe
  3. Daily CyberSecurity @[email protected] ·

    RustyTux is a public PoC for a Linux kernel privilege escalation via an ESP-in-TCP use-after-free (CVE-2026-23239). Details and exploit code are now public.

    #RustyTux #LinuxKernel #PrivilegeEscalation #UseAfterFree #espintcp #LPE #PoC #CVE202623239

    securityonline.info/rustytux-l

    #rustytux #linuxkernel #privilegeescalation #useafterfree #espintcp #lpe
  4. Daily CyberSecurity @[email protected] ·

    RustyTux is a public PoC for a Linux kernel privilege escalation via an ESP-in-TCP use-after-free (CVE-2026-23239). Details and exploit code are now public.

    #RustyTux #LinuxKernel #PrivilegeEscalation #UseAfterFree #espintcp #LPE #PoC #CVE202623239

    securityonline.info/rustytux-l

    #cve202623239 #poc #lpe #espintcp #useafterfree #privilegeescalation
  5. Daily CyberSecurity @[email protected] ·

    CVE-2026-68162, a Linux kernel SCTP use-after-free flaw (CVSS 7.8), has public PoC exploit code for root privilege escalation on Ubuntu 26.04.

    #Linux #CVE202668162 #PrivilegeEscalation #SCTP #Kernel #InfoSec #UseAfterFree

    securityonline.info/linux-kern

    #linux #cve202668162 #privilegeescalation #sctp #kernel #infosec
  6. Daily CyberSecurity @[email protected] ·

    CVE-2026-68162, a Linux kernel SCTP use-after-free flaw (CVSS 7.8), has public PoC exploit code for root privilege escalation on Ubuntu 26.04.

    #Linux #CVE202668162 #PrivilegeEscalation #SCTP #Kernel #InfoSec #UseAfterFree

    securityonline.info/linux-kern

    #linux #cve202668162 #privilegeescalation #sctp #kernel #infosec
  7. Daily CyberSecurity @[email protected] ·

    CVE-2026-68162, a Linux kernel SCTP use-after-free flaw (CVSS 7.8), has public PoC exploit code for root privilege escalation on Ubuntu 26.04.

    #Linux #CVE202668162 #PrivilegeEscalation #SCTP #Kernel #InfoSec #UseAfterFree

    securityonline.info/linux-kern

    #useafterfree #infosec #kernel #sctp #privilegeescalation #cve202668162
  8. Daily CyberSecurity @[email protected] ·

    CVE-2026-68162, a Linux kernel SCTP use-after-free flaw (CVSS 7.8), has public PoC exploit code for root privilege escalation on Ubuntu 26.04.

    #Linux #CVE202668162 #PrivilegeEscalation #SCTP #Kernel #InfoSec #UseAfterFree

    securityonline.info/linux-kern

    #linux #cve202668162 #privilegeescalation #sctp #kernel #infosec
  9. Daily CyberSecurity @[email protected] ·

    CVE-2026-81934, a critical Redis RCE flaw (CVSS 9.2), now has public exploit details and PoC code. Patch your TLS-enabled servers now.

    #Redis #CVE202681934 #RCE #Vulnerability #InfoSec #UseAfterFree #TLS

    securityonline.info/redis-cve-

    #redis #cve202681934 #rce #vulnerability #infosec #useafterfree
  10. Daily CyberSecurity @[email protected] ·

    CVE-2026-81934, a critical Redis RCE flaw (CVSS 9.2), now has public exploit details and PoC code. Patch your TLS-enabled servers now.

    #Redis #CVE202681934 #RCE #Vulnerability #InfoSec #UseAfterFree #TLS

    securityonline.info/redis-cve-

    #redis #cve202681934 #rce #vulnerability #infosec #useafterfree
  11. Daily CyberSecurity @[email protected] ·

    CVE-2026-81934, a critical Redis RCE flaw (CVSS 9.2), now has public exploit details and PoC code. Patch your TLS-enabled servers now.

    #Redis #CVE202681934 #RCE #Vulnerability #InfoSec #UseAfterFree #TLS

    securityonline.info/redis-cve-

    #redis #cve202681934 #rce #vulnerability #infosec #useafterfree
  12. Daily CyberSecurity @[email protected] ·

    CVE-2026-81934, a critical Redis RCE flaw (CVSS 9.2), now has public exploit details and PoC code. Patch your TLS-enabled servers now.

    #Redis #CVE202681934 #RCE #Vulnerability #InfoSec #UseAfterFree #TLS

    securityonline.info/redis-cve-

    #tls #useafterfree #infosec #vulnerability #rce #cve202681934
  13. Daily CyberSecurity @[email protected] ·

    CVE-2026-81934, a critical Redis RCE flaw (CVSS 9.2), now has public exploit details and PoC code. Patch your TLS-enabled servers now.

    #Redis #CVE202681934 #RCE #Vulnerability #InfoSec #UseAfterFree #TLS

    securityonline.info/redis-cve-

    #redis #cve202681934 #rce #vulnerability #infosec #useafterfree
  14. Daily CyberSecurity @[email protected] ·

    A public PoC for CVE-2026-53361 turns an AF_UNIX kernel race into a local container escape on Linux.

    #CVE202653361 #ContainerEscape #LinuxKernel #AFUNIX #UseAfterFree #KernelExploit

    securityonline.info/cve-2026-5

    #cve202653361 #containerescape #linuxkernel #afunix #useafterfree #kernelexploit
  15. Daily CyberSecurity @[email protected] ·

    A public PoC for CVE-2026-53361 turns an AF_UNIX kernel race into a local container escape on Linux.

    #CVE202653361 #ContainerEscape #LinuxKernel #AFUNIX #UseAfterFree #KernelExploit

    securityonline.info/cve-2026-5

    #cve202653361 #containerescape #linuxkernel #afunix #useafterfree #kernelexploit
  16. Daily CyberSecurity @[email protected] ·

    A public PoC for CVE-2026-53361 turns an AF_UNIX kernel race into a local container escape on Linux.

    #CVE202653361 #ContainerEscape #LinuxKernel #AFUNIX #UseAfterFree #KernelExploit

    securityonline.info/cve-2026-5

    #cve202653361 #containerescape #linuxkernel #afunix #useafterfree #kernelexploit
  17. Daily CyberSecurity @[email protected] ·

    A public PoC for CVE-2026-53361 turns an AF_UNIX kernel race into a local container escape on Linux.

    #CVE202653361 #ContainerEscape #LinuxKernel #AFUNIX #UseAfterFree #KernelExploit

    securityonline.info/cve-2026-5

    #kernelexploit #useafterfree #afunix #linuxkernel #containerescape #cve202653361
  18. Daily CyberSecurity @[email protected] ·

    A public PoC exploits a Redis RCE use-after-free flaw tied to CVE-2026-23479, running system commands as the Redis server. Update to 8.8.2.

    #Redis #RCE #UseAfterFree #CVE202623479 #InfoSec

    securityonline.info/redis-rce-

    #redis #rce #useafterfree #cve202623479 #infosec
  19. Daily CyberSecurity @[email protected] ·

    A public PoC exploits a Redis RCE use-after-free flaw tied to CVE-2026-23479, running system commands as the Redis server. Update to 8.8.2.

    #Redis #RCE #UseAfterFree #CVE202623479 #InfoSec

    securityonline.info/redis-rce-

    #redis #rce #useafterfree #cve202623479 #infosec
  20. Daily CyberSecurity @[email protected] ·

    A public PoC exploits a Redis RCE use-after-free flaw tied to CVE-2026-23479, running system commands as the Redis server. Update to 8.8.2.

    #Redis #RCE #UseAfterFree #CVE202623479 #InfoSec

    securityonline.info/redis-rce-

    #redis #rce #useafterfree #cve202623479 #infosec
  21. Daily CyberSecurity @[email protected] ·

    A public PoC exploits a Redis RCE use-after-free flaw tied to CVE-2026-23479, running system commands as the Redis server. Update to 8.8.2.

    #Redis #RCE #UseAfterFree #CVE202623479 #InfoSec

    securityonline.info/redis-rce-

    #infosec #cve202623479 #useafterfree #rce #redis
  22. Daily CyberSecurity @[email protected] ·

    CVE-2026-52912, a Linux kernel netfilter use-after-free, now has public PoC exploit code enabling root privilege escalation.

    #CVE202652912 #LinuxKernel #PrivilegeEscalation #Netfilter #UseAfterFree #PoC #Exploit #InfoSec

    securityonline.info/cve-2026-5

    #cve202652912 #linuxkernel #privilegeescalation #netfilter #useafterfree #poc
  23. Daily CyberSecurity @[email protected] ·

    CVE-2026-52912, a Linux kernel netfilter use-after-free, now has public PoC exploit code enabling root privilege escalation.

    #CVE202652912 #LinuxKernel #PrivilegeEscalation #Netfilter #UseAfterFree #PoC #Exploit #InfoSec

    securityonline.info/cve-2026-5

    #cve202652912 #linuxkernel #privilegeescalation #netfilter #useafterfree #poc
  24. Daily CyberSecurity @[email protected] ·

    CVE-2026-52912, a Linux kernel netfilter use-after-free, now has public PoC exploit code enabling root privilege escalation.

    #CVE202652912 #LinuxKernel #PrivilegeEscalation #Netfilter #UseAfterFree #PoC #Exploit #InfoSec

    securityonline.info/cve-2026-5

    #cve202652912 #linuxkernel #privilegeescalation #netfilter #useafterfree #poc
  25. Daily CyberSecurity @[email protected] ·

    CVE-2026-52912, a Linux kernel netfilter use-after-free, now has public PoC exploit code enabling root privilege escalation.

    #CVE202652912 #LinuxKernel #PrivilegeEscalation #Netfilter #UseAfterFree #PoC #Exploit #InfoSec

    securityonline.info/cve-2026-5

    #infosec #exploit #poc #useafterfree #netfilter #privilegeescalation
  26. Daily CyberSecurity @[email protected] ·

    Google patches CVE-2026-76017, a critical use-after-free in Chrome, among 7 security fixes. Update to 151.0.7922.173 or later now.

    #Chrome #CVE #UseAfterFree #Google #BrowserSecurity #InfoSec #PatchNow

    securityonline.info/chrome-cve

    #chrome #cve #useafterfree #google #browsersecurity #infosec
  27. Daily CyberSecurity @[email protected] ·

    Google patches CVE-2026-76017, a critical use-after-free in Chrome, among 7 security fixes. Update to 151.0.7922.173 or later now.

    #Chrome #CVE #UseAfterFree #Google #BrowserSecurity #InfoSec #PatchNow

    securityonline.info/chrome-cve

    #chrome #cve #useafterfree #google #browsersecurity #infosec
  28. Daily CyberSecurity @[email protected] ·

    Google patches CVE-2026-76017, a critical use-after-free in Chrome, among 7 security fixes. Update to 151.0.7922.173 or later now.

    #Chrome #CVE #UseAfterFree #Google #BrowserSecurity #InfoSec #PatchNow

    securityonline.info/chrome-cve

    #patchnow #infosec #browsersecurity #google #useafterfree #cve
  29. Daily CyberSecurity @[email protected] ·

    Google patches CVE-2026-76017, a critical use-after-free in Chrome, among 7 security fixes. Update to 151.0.7922.173 or later now.

    #Chrome #CVE #UseAfterFree #Google #BrowserSecurity #InfoSec #PatchNow

    securityonline.info/chrome-cve

    #chrome #cve #useafterfree #google #browsersecurity #infosec
  30. Daily CyberSecurity @[email protected] ·

    A public PoC for CVE-2026-68138 escalates a normal Linux user to root through a qdisc rate-table race condition.

    #CVE202668138 #PrivilegeEscalation #LinuxKernel #qdisc #UseAfterFree #LPE

    securityonline.info/cve-2026-6

    #cve202668138 #privilegeescalation #linuxkernel #qdisc #useafterfree #lpe
  31. Daily CyberSecurity @[email protected] ·

    A public PoC for CVE-2026-68138 escalates a normal Linux user to root through a qdisc rate-table race condition.

    #CVE202668138 #PrivilegeEscalation #LinuxKernel #qdisc #UseAfterFree #LPE

    securityonline.info/cve-2026-6

    #lpe #useafterfree #qdisc #linuxkernel #privilegeescalation #cve202668138
  32. Daily CyberSecurity @[email protected] ·

    A public PoC for CVE-2026-68138 escalates a normal Linux user to root through a qdisc rate-table race condition.

    #CVE202668138 #PrivilegeEscalation #LinuxKernel #qdisc #UseAfterFree #LPE

    securityonline.info/cve-2026-6

    #cve202668138 #privilegeescalation #linuxkernel #qdisc #useafterfree #lpe
  33. 🛡️ #1 hacks.gr @[email protected] ·

    Ένα απλό σχέδιο στο Zoom μπορούσε να γίνει πύλη για να επηρεάσει κάποιος την εφαρμογή σου — χωρίς να πατήσεις τίποτα.

    Η επίθεση αφορούσε τη λειτουργία annotations και, σύμφωνα με την ανάλυση, μπορούσε ακόμη και να οδηγήσει σε έλεγχο της εφαρμογής.

    Δεν έχει αναφερθεί χρήση σε πραγματικές επιθέσεις, αλλά οι διορθώσεις έχουν ήδη κυκλοφορήσει.

    Δες αν η έκδοσή σου είναι ασφαλής.

    hacks.gr/tromos-sto-zoom-to-ke

    #Cybersecurity #Zoom #OutOfBoundsWrite #OutOfBoundsRead #UseAfterFree

    #useafterfree #outofboundsread #outofboundswrite #zoom #cybersecurity
  34. Daily CyberSecurity @[email protected] ·

    A Linux kernel RDMA/rxe use-after-free (CVE-2026-64582) enables local privilege escalation. Full details and PoC exploit code are now public.

    #CVE202664582 #LinuxKernel #PrivilegeEscalation #RDMA #UseAfterFree #InfoSec

    securityonline.info/cve-2026-6

    #cve202664582 #linuxkernel #privilegeescalation #rdma #useafterfree #infosec
  35. Daily CyberSecurity @[email protected] ·

    A Linux kernel RDMA/rxe use-after-free (CVE-2026-64582) enables local privilege escalation. Full details and PoC exploit code are now public.

    #CVE202664582 #LinuxKernel #PrivilegeEscalation #RDMA #UseAfterFree #InfoSec

    securityonline.info/cve-2026-6

    #cve202664582 #linuxkernel #privilegeescalation #rdma #useafterfree #infosec
  36. Daily CyberSecurity @[email protected] ·

    A Linux kernel RDMA/rxe use-after-free (CVE-2026-64582) enables local privilege escalation. Full details and PoC exploit code are now public.

    #CVE202664582 #LinuxKernel #PrivilegeEscalation #RDMA #UseAfterFree #InfoSec

    securityonline.info/cve-2026-6

    #cve202664582 #linuxkernel #privilegeescalation #rdma #useafterfree #infosec
  37. Daily CyberSecurity @[email protected] ·

    A Linux kernel RDMA/rxe use-after-free (CVE-2026-64582) enables local privilege escalation. Full details and PoC exploit code are now public.

    #CVE202664582 #LinuxKernel #PrivilegeEscalation #RDMA #UseAfterFree #InfoSec

    securityonline.info/cve-2026-6

    #infosec #useafterfree #rdma #privilegeescalation #linuxkernel #cve202664582
  38. Daily CyberSecurity @[email protected] ·

    A Linux kernel RDMA/rxe use-after-free (CVE-2026-64582) enables local privilege escalation. Full details and PoC exploit code are now public.

    #CVE202664582 #LinuxKernel #PrivilegeEscalation #RDMA #UseAfterFree #InfoSec

    securityonline.info/cve-2026-6

    #cve202664582 #linuxkernel #privilegeescalation #rdma #useafterfree #infosec
  39. Habr @[email protected] ·

    У nginx сжатие заголовков одностороннее

    Стенд: один nginx, одно HTTP/3-соединение, четыре одинаковых запроса подряд. Меряем размер сжатого блока заголовков в обе стороны. Ответ (nginx → клиент): 131, 131, 131, 131 байт. Запрос (клиент → nginx): 246, 8, 8, 8. Ответ — константа: сколько запросов ни повтори, столько же байт. Запрос со второго раза схлопывается в тридцать раз. В HTTP/2 к тому же серверу — та же константа. Между тем динамическая таблица HPACK и QPACK и есть половина смысла обоих протоколов: повторяющийся заголовок отправляется один раз, дальше идут ссылки на номер. Клиент ей пользуется. Сервер не пользуется ни в одном из двух — в HTTP/2 выставляет её размер в ноль, в HTTP/3 не открывает encoder-поток вовсе. Разбор по фиксированным тегам: nginx 1.31.3, quic-go, Cloudflare quiche, ls-qpack, Google QUICHE. Две реализации из пяти таблицу всё-таки ведут. И приёмная половина — та, которой сервер сам не пользуется, но обязан обслуживать, — в мае принесла nginx use-after-free с оценкой 9.2.

    habr.com/ru/articles/1070310/

    #nginx #quic #qpack #hpack #сжатие_заголовков #динамическая_таблица #cve202642530 #useafterfree #исходный_код #http

    #http #исходный_код #useafterfree #cve202642530 #динамическая_таблица #сжатие_заголовков
  40. Habr @[email protected] ·

    У nginx сжатие заголовков одностороннее

    Стенд: один nginx, одно HTTP/3-соединение, четыре одинаковых запроса подряд. Меряем размер сжатого блока заголовков в обе стороны. Ответ (nginx → клиент): 131, 131, 131, 131 байт. Запрос (клиент → nginx): 246, 8, 8, 8. Ответ — константа: сколько запросов ни повтори, столько же байт. Запрос со второго раза схлопывается в тридцать раз. В HTTP/2 к тому же серверу — та же константа. Между тем динамическая таблица HPACK и QPACK и есть половина смысла обоих протоколов: повторяющийся заголовок отправляется один раз, дальше идут ссылки на номер. Клиент ей пользуется. Сервер не пользуется ни в одном из двух — в HTTP/2 выставляет её размер в ноль, в HTTP/3 не открывает encoder-поток вовсе. Разбор по фиксированным тегам: nginx 1.31.3, quic-go, Cloudflare quiche, ls-qpack, Google QUICHE. Две реализации из пяти таблицу всё-таки ведут. И приёмная половина — та, которой сервер сам не пользуется, но обязан обслуживать, — в мае принесла nginx use-after-free с оценкой 9.2.

    habr.com/ru/articles/1070310/

    #nginx #quic #qpack #hpack #сжатие_заголовков #динамическая_таблица #cve202642530 #useafterfree #исходный_код #http

    #http #исходный_код #useafterfree #cve202642530 #динамическая_таблица #сжатие_заголовков
  41. Habr @[email protected] ·

    У nginx сжатие заголовков одностороннее

    Стенд: один nginx, одно HTTP/3-соединение, четыре одинаковых запроса подряд. Меряем размер сжатого блока заголовков в обе стороны. Ответ (nginx → клиент): 131, 131, 131, 131 байт. Запрос (клиент → nginx): 246, 8, 8, 8. Ответ — константа: сколько запросов ни повтори, столько же байт. Запрос со второго раза схлопывается в тридцать раз. В HTTP/2 к тому же серверу — та же константа. Между тем динамическая таблица HPACK и QPACK и есть половина смысла обоих протоколов: повторяющийся заголовок отправляется один раз, дальше идут ссылки на номер. Клиент ей пользуется. Сервер не пользуется ни в одном из двух — в HTTP/2 выставляет её размер в ноль, в HTTP/3 не открывает encoder-поток вовсе. Разбор по фиксированным тегам: nginx 1.31.3, quic-go, Cloudflare quiche, ls-qpack, Google QUICHE. Две реализации из пяти таблицу всё-таки ведут. И приёмная половина — та, которой сервер сам не пользуется, но обязан обслуживать, — в мае принесла nginx use-after-free с оценкой 9.2.

    habr.com/ru/articles/1070310/

    #nginx #quic #qpack #hpack #сжатие_заголовков #динамическая_таблица #cve202642530 #useafterfree #исходный_код #http

    #nginx #quic #qpack #hpack #сжатие_заголовков #динамическая_таблица
  42. Daily CyberSecurity @[email protected] ·

    Google's new Chrome security update patches 5 high-severity use-after-free bugs, including CVE-2026-19556 and CVE-2026-19560. Update now.

    #Chrome #Google #UseAfterFree #CVE #BrowserSecurity #PatchNow #Cybersecurity

    securityonline.info/chrome-use

    #chrome #google #useafterfree #cve #browsersecurity #patchnow
  43. Daily CyberSecurity @[email protected] ·

    Google's new Chrome security update patches 5 high-severity use-after-free bugs, including CVE-2026-19556 and CVE-2026-19560. Update now.

    #Chrome #Google #UseAfterFree #CVE #BrowserSecurity #PatchNow #Cybersecurity

    securityonline.info/chrome-use

    #chrome #google #useafterfree #cve #browsersecurity #patchnow
  44. Daily CyberSecurity @[email protected] ·

    Google's new Chrome security update patches 5 high-severity use-after-free bugs, including CVE-2026-19556 and CVE-2026-19560. Update now.

    #Chrome #Google #UseAfterFree #CVE #BrowserSecurity #PatchNow #Cybersecurity

    securityonline.info/chrome-use

    #cybersecurity #patchnow #browsersecurity #cve #useafterfree #google
  45. Analyst207 @[email protected] ·

    Linux Flaw Exposes Host to Root Access

    A critical 18-year-old flaw in Linux's SCTP networking code, dubbed "SCTPhantom," has been discovered, allowing hackers to gain root access to a host; the vulnerability, tracked as CVE-2026-64564, has been present in every Linux kernel released since 2008.

    osintsights.com/linux-flaw-exp

    #LinuxFlaw #Sctp #Cve202664564 #Sctphantom #Useafterfree

    #linuxflaw #sctp #cve202664564 #sctphantom #useafterfree
  46. Daily CyberSecurity @[email protected] ·

    A Linux kernel vulnerability, CVE-2026-53264, lets a local user run arbitrary code via a net/sched use-after-free. A public PoC is now available.

    #CVE202653264 #LinuxKernel #UseAfterFree #PrivilegeEscalation #InfoSec

    securityonline.info/linux-kern

    #cve202653264 #linuxkernel #useafterfree #privilegeescalation #infosec
  47. Daily CyberSecurity @[email protected] ·

    A Linux kernel vulnerability, CVE-2026-53264, lets a local user run arbitrary code via a net/sched use-after-free. A public PoC is now available.

    #CVE202653264 #LinuxKernel #UseAfterFree #PrivilegeEscalation #InfoSec

    securityonline.info/linux-kern

    #infosec #privilegeescalation #useafterfree #linuxkernel #cve202653264
  48. Daily CyberSecurity @[email protected] ·

    A public PoC now details CVE-2026-42530, an NGINX HTTP/3 RCE from a QPACK use-after-free. Upgrade to NGINX 1.31.2 to close the flaw now.

    #NGINX #HTTP3 #CVE202642530 #RCE #UseAfterFree #QUIC #QPACK #PoC #Cybersecurity

    securityonline.info/nginx-http

    #nginx #http3 #cve202642530 #rce #useafterfree #quic
  49. Daily CyberSecurity @[email protected] ·

    A public PoC now details CVE-2026-42530, an NGINX HTTP/3 RCE from a QPACK use-after-free. Upgrade to NGINX 1.31.2 to close the flaw now.

    #NGINX #HTTP3 #CVE202642530 #RCE #UseAfterFree #QUIC #QPACK #PoC #Cybersecurity

    securityonline.info/nginx-http

    #nginx #http3 #cve202642530 #rce #useafterfree #quic
  50. Daily CyberSecurity @[email protected] ·

    A public PoC now details CVE-2026-42530, an NGINX HTTP/3 RCE from a QPACK use-after-free. Upgrade to NGINX 1.31.2 to close the flaw now.

    #NGINX #HTTP3 #CVE202642530 #RCE #UseAfterFree #QUIC #QPACK #PoC #Cybersecurity

    securityonline.info/nginx-http

    #nginx #http3 #cve202642530 #rce #useafterfree #quic
  51. Daily CyberSecurity @[email protected] ·

    A public PoC now details CVE-2026-42530, an NGINX HTTP/3 RCE from a QPACK use-after-free. Upgrade to NGINX 1.31.2 to close the flaw now.

    #NGINX #HTTP3 #CVE202642530 #RCE #UseAfterFree #QUIC #QPACK #PoC #Cybersecurity

    securityonline.info/nginx-http

    #cybersecurity #poc #qpack #quic #useafterfree #rce
  52. Daily CyberSecurity @[email protected] ·

    A public PoC now details CVE-2026-42530, an NGINX HTTP/3 RCE from a QPACK use-after-free. Upgrade to NGINX 1.31.2 to close the flaw now.

    #NGINX #HTTP3 #CVE202642530 #RCE #UseAfterFree #QUIC #QPACK #PoC #Cybersecurity

    securityonline.info/nginx-http

    #nginx #http3 #cve202642530 #rce #useafterfree #quic
  53. Daily CyberSecurity @[email protected] ·

    Node.js patched 11 vulnerabilities in its July 2026 release. The high-severity bugs include a HTTP/2 use-after-free (CVE-2026-56848). Update now.

    #NodeJS #CVE202656848 #HTTP2 #UseAfterFree #Vulnerability #InfoSec

    securityonline.info/nodejs-jul

    #nodejs #cve202656848 #http2 #useafterfree #vulnerability #infosec
  54. Daily CyberSecurity @[email protected] ·

    Node.js patched 11 vulnerabilities in its July 2026 release. The high-severity bugs include a HTTP/2 use-after-free (CVE-2026-56848). Update now.

    #NodeJS #CVE202656848 #HTTP2 #UseAfterFree #Vulnerability #InfoSec

    securityonline.info/nodejs-jul

    #nodejs #cve202656848 #http2 #useafterfree #vulnerability #infosec
  55. Daily CyberSecurity @[email protected] ·

    Node.js patched 11 vulnerabilities in its July 2026 release. The high-severity bugs include a HTTP/2 use-after-free (CVE-2026-56848). Update now.

    #NodeJS #CVE202656848 #HTTP2 #UseAfterFree #Vulnerability #InfoSec

    securityonline.info/nodejs-jul

    #infosec #vulnerability #useafterfree #http2 #cve202656848 #nodejs
  56. Daily CyberSecurity @[email protected] ·

    Google's Chrome security update fixes four high-severity bugs, including CVE-2026-16807, a Codecs flaw that could enable a sandbox escape. Update now.

    #Chrome #ChromeUpdate #SandboxEscape #UseAfterFree #Google #PatchNow

    securityonline.info/chrome-150

    #patchnow #google #useafterfree #sandboxescape #chromeupdate #chrome
  57. Daily CyberSecurity @[email protected] ·

    Chrome security update 150.0.7871.128 patches 7 flaws, including three critical use-after-free bugs in CameraCapture, GPU, and Network. Update now.

    #Chrome #GoogleChrome #CVE202615899 #UseAfterFree #BrowserSecurity #Chromium #CyberSecurity

    securityonline.info/chrome-sec

    #chrome #googlechrome #cve202615899 #useafterfree #browsersecurity #chromium
  58. Daily CyberSecurity @[email protected] ·

    Chrome security update 150.0.7871.128 patches 7 flaws, including three critical use-after-free bugs in CameraCapture, GPU, and Network. Update now.

    #Chrome #GoogleChrome #CVE202615899 #UseAfterFree #BrowserSecurity #Chromium #CyberSecurity

    securityonline.info/chrome-sec

    #chrome #googlechrome #cve202615899 #useafterfree #browsersecurity #chromium
  59. Daily CyberSecurity @[email protected] ·

    Chrome security update 150.0.7871.128 patches 7 flaws, including three critical use-after-free bugs in CameraCapture, GPU, and Network. Update now.

    #Chrome #GoogleChrome #CVE202615899 #UseAfterFree #BrowserSecurity #Chromium #CyberSecurity

    securityonline.info/chrome-sec

    #cybersecurity #chromium #browsersecurity #useafterfree #cve202615899 #googlechrome
  60. Daily CyberSecurity @[email protected] ·

    X.Org Server ships fixes for two flaws, including CVE-2026-56000, a CVSS 9.0 use-after-free. Update xorg-server and Xwayland now.

    #XorgServer #Xwayland #UseAfterFree #CVE202656000 #LinuxSecurity #PatchNow #InfoSec

    securityonline.info/xorg-serve

    #xorgserver #xwayland #useafterfree #cve202656000 #linuxsecurity #patchnow