Curated security research, vulnerabilities, advisories and tools for practitioners.

#uaf

Security coverage tagged uaf.

1.

php2shell (CVE-2026-109618 / CVE-2026-109619): PHP Pre-Auth RCE PoC, Source Patch & Comprehensive Defense Guide

vulnerability | Critical | 2026-10-21 08:31 | CVE-2026-109618 | github.com | Original ↗ | .md | #rce | #github | #pre-auth

2.

[CVE-2023-20938] Kernel UaF to Root #1: Freeing an Object That’s Still in Use

vulnerability | 2026-10-15 00:00 | CVE-2023-20938 | eshard.com | Original ↗ | .md | #vulnerability-research | #android | #kernel

3.

VectorFreed: librsvg Use-After-Free (CVE-2026-96889) Leading to RCE in Next.js and Downstream Frameworks

vulnerability | Critical | 2026-09-24 06:35 | CVE-2026-96889 | github.com | Original ↗ | .md | #rce | #supply-chain | #red-team

4.

PHP 8.5.5: var_destroy __destruct Reentrancy Heap UAF and Exploitation

vulnerability | High | 2026-05-02 16:39 | github.com | Original ↗ | .md | #rce | #php | #exploitation

5.

Who corrupted the data? — a Taint Analysis overview

research | 2024-07-29 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #memory-corruption

6.

Automatic post-fuzzing triage and automation using esReven

research | 2022-03-08 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #fuzzing

7.

Analyzing CVE-2018-8653 with esReven: Use-after-Free in Internet Explorer Scripting Engine

vulnerability | 2020-03-10 00:00 | CVE-2018-8653 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #software-security