<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Freebsd — PoC Archive</title><link>https://poc.intelseclab.com/tags/freebsd/</link><description>Latest proof-of-concept entries.</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sun, 16 Aug 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://poc.intelseclab.com/tags/freebsd/index.xml" rel="self" type="application/rss+xml"/><item><title>Citrix NetScaler ADC/Gateway -- Pre-Auth SAML PrefixList Heap Overflow to RCE (CVE-2026-8452)</title><link>https://poc.intelseclab.com/pocs/network/2026-08-16_cve-2026-8452-citrix-netscaler-saml-preauth-rce/</link><pubDate>Sun, 16 Aug 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/network/2026-08-16_cve-2026-8452-citrix-netscaler-saml-preauth-rce/</guid><description>Critical severity (CVSS 9.8) — network · CVE-2026-8452. Status: Patched. Affects: Citrix NetScaler ADC and NetScaler Gateway. Tags: citrix, netscaler, adc, gateway, saml, heap-overflow, preauth, rce, shellcode, webshell, freebsd, xml-signature, c14n, CVE-2026-8452.</description><category>network</category><category>Critical</category><category>citrix</category><category>netscaler</category><category>adc</category><category>gateway</category><category>saml</category><category>heap-overflow</category><category>preauth</category><category>rce</category><category>shellcode</category><category>webshell</category><category>freebsd</category><category>xml-signature</category><category>c14n</category><category>CVE-2026-8452</category></item><item><title>FreeBSD setcred(2) Kernel Stack Buffer Overflow — Local Privilege Escalation (CVE-2026-45250)</title><link>https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-45250-setcred-freebsd-lpe/</link><pubDate>Sun, 05 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-45250-setcred-freebsd-lpe/</guid><description>Critical severity — binary · CVE-2026-45250. Status: PoC. Affects: FreeBSD kernel — setcred(2) system call (sys/kern/kern_prot.c). Tags: freebsd, kernel, lpe, privilege-escalation, stack-overflow, setcred, smap-bypass, smep-bypass, zfs, kernel-exploit.</description><category>binary</category><category>Critical</category><category>freebsd</category><category>kernel</category><category>lpe</category><category>privilege-escalation</category><category>stack-overflow</category><category>setcred</category><category>smap-bypass</category><category>smep-bypass</category><category>zfs</category><category>kernel-exploit</category></item><item><title>FreeBSD OSS /dev/dsp Stale Kernel-Stack Buffer Local Privilege Escalation (CVE-2026-49417)</title><link>https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-49417-freebsd-dsp-kernel-lpe/</link><pubDate>Sun, 05 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-49417-freebsd-dsp-kernel-lpe/</guid><description>High severity — binary · CVE-2026-49417. Status: PoC. Affects: FreeBSD kernel — OSS audio driver (/dev/dsp) buffer allocation / thread-stack recycling. Tags: freebsd, kernel, oss, dev-dsp, kernel-stack-leak, rop, smep-bypass, cr4, local-privilege-escalation, c.</description><category>binary</category><category>High</category><category>freebsd</category><category>kernel</category><category>oss</category><category>dev-dsp</category><category>kernel-stack-leak</category><category>rop</category><category>smep-bypass</category><category>cr4</category><category>local-privilege-escalation</category><category>c</category></item><item><title>FreeBSD Linuxulator AT_SECURE=0 Local Privilege Escalation via LD_PRELOAD (CVE-2026-49413)</title><link>https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-49413-freebsd-linuxulator-atsecure-lpe/</link><pubDate>Sun, 05 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-49413-freebsd-linuxulator-atsecure-lpe/</guid><description>High severity — binary · CVE-2026-49413. Status: PoC. Affects: FreeBSD Linux compatibility layer ("Linuxulator", linux/linux64 kernel module) executing Linux setuid-root binaries under /compat/linux/. Tags: freebsd, linuxulator, at_secure, ld_preload, setuid, local-privilege-escalation, c.</description><category>binary</category><category>High</category><category>freebsd</category><category>linuxulator</category><category>at_secure</category><category>ld_preload</category><category>setuid</category><category>local-privilege-escalation</category><category>c</category></item><item><title>FreeBSD exec_args_adjust_args() Out-of-Bounds memmove — Local Privilege Escalation via sshd Race (CVE-2026-7270)</title><link>https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-7270-freebsd-execargs-oob-memmove-lpe/</link><pubDate>Sun, 05 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-7270-freebsd-execargs-oob-memmove-lpe/</guid><description>Critical severity — binary · CVE-2026-7270. Status: Weaponized. Affects: FreeBSD kernel — sys/kern/kern_exec.c exec_args_adjust_args(). Tags: freebsd, kernel, lpe, memmove, oob, race-condition, ld_preload, sshd, cwe-190, cwe-787.</description><category>binary</category><category>Critical</category><category>freebsd</category><category>kernel</category><category>lpe</category><category>memmove</category><category>oob</category><category>race-condition</category><category>ld_preload</category><category>sshd</category><category>cwe-190</category><category>cwe-787</category></item><item><title>FreeBSD /dev/dsp (OSS) Negative-Offset mmap Kernel Memory Corruption LPE (CVE-2026-45258)</title><link>https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-45258-1day-lpe-exploit/</link><pubDate>Sun, 05 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-45258-1day-lpe-exploit/</guid><description>Critical severity — binary · CVE-2026-45258. Status: PoC. Affects: FreeBSD kernel (OSS//dev/dsp sound driver mmap handling). Tags: freebsd, kernel, lpe, privilege-escalation, oss, dev-dsp, mmap, setuid, 1day.</description><category>binary</category><category>Critical</category><category>freebsd</category><category>kernel</category><category>lpe</category><category>privilege-escalation</category><category>oss</category><category>dev-dsp</category><category>mmap</category><category>setuid</category><category>1day</category></item></channel></rss>