kiks7

3 exploits Active since May 2020
CVE-2022-2602 NOMISEC MEDIUM WORKING POC
Linux Kernel < 6.0.19 - Use-After-Free in io_uring Unix SCM Garbage Collection
io_uring UAF, Unix SCM garbage collection
86 stars
CVSS 5.3
CVE-2020-27786 NOMISEC HIGH WORKING POC
Linux Kernel < 4.4.224 - Use-After-Free in MIDI ioctl Handler
A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue. A write to this specific memory while freed and before use causes the flow of execution to change and possibly allow for memory corruption or privilege escalation. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
10 stars
CVSS 7.8
CVE-2020-6468 NOMISEC HIGH WORKING POC
Google Chrome < 83.0.4103.61 - Remote Code Execution via V8 Type Confusion
Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2 stars
CVSS 8.8