GhostLock-OPPO-PCKM00

GhostLock — PoC para OPPO PCKM00 4.14.180 CVE-2026-43499 GhostLock — escalada local de privilégios por use-after-free na herança de prioridade do futex do kernel Linux, portada para o OPPO PCKM00 OP4A57, SM6150, Android 11, kernel 4.14.180-perf+. AVISO / 免责声明 Este projeto destina-se exclusivament...

LeakedHandlesFinder

LHF - Finder di Handle Trapelati Strumento per l'identificazione degli handle trapelati dei processi Windows. Utile per identificare nuove vulnerabilità LPE durante un pentest o semplicemente come nuovo processo di ricerca. Attualmente supporta lo sfruttamento autopwn di handle trapelati di...

Vikunja has an incomplete fix for CVE-2026-35595: Write-only user can detach shared project from parent hierarchy via parent_project_id=0

Summary The fix for CVE-2026-35595 project re-parenting privilege escalation only gates reparent operations when parentprojectid 0. A user with Write but not Admin permission on a shared child project can detach it from its parent by sending parentprojectid: 0, bypassing the Admin requirement. Th...

GHSA-44V6-7FXQ-VGF4 Vikunja has an incomplete fix for CVE-2026-35595: Write-only user can detach shared project from parent hierarchy via parent_project_id=0

Summary The fix for CVE-2026-35595 project re-parenting privilege escalation only gates reparent operations when parentprojectid 0. A user with Write but not Admin permission on a shared child project can detach it from its parent by sending parentprojectid: 0, bypassing the Admin requirement. Th...

CVE-2026-55064

Vikunja (open-source self-hosted task management platform) versions 2.3.0 through 2.4.0 contain an incomplete fix for CVE-2026-35595. The authorization checks in pkg/models/project_permissions.go and pkg/models/project.go only gate reparent operations when parent_project_id > 0, but UpdateProj...

CVE-2026-82253

gitoxide Rust crates gix = 0.72.0 and gix-validate = 0.10.0 contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the first occurrence of '..' via name.findb"..", allowing crafted names such as 'a..b/../../../.git/' to bypass the check;...

EUVD-2026-67705

gitoxide Rust crates gix = 0.72.0 and gix-validate = 0.10.0 contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the first occurrence of '..' via name.findb"..", allowing crafted names such as 'a..b/../../../.git/' to bypass the check;...

CVE-2026-82253

gitoxide (Rust crates gix ≤ 0.72.0 and gix-validate ≤ 0.10.0 ) is affected by a path traversal vulnerability. The submodule name validation in gix-validate only checks the first occurrence of .. via name.find(b".."), allowing crafted names like a..b/../../../.git/ to bypass the check. Additionall...

pixel-ksu-root

pixel-ksu-root Uno strumento guidato da adb che trasforma un Google Pixel stock con bootloader bloccato in un dispositivo rooted con KernelSU senza sbloccare il bootloader né modificare l'immagine di boot. Dall'host esegue un exploit del kernel in userspace non privilegiato sul dispositivo per...

CVE-2026-74744

A flaw was found in the Linux kernel's ipvlan component. The ipvlan devices do not properly inherit neededheadroom and neededtailroom from the physical device phydev. This can lead to insufficient space being reserved for packet headers and trailers, potentially causing memory corruption, such as...

ghostlock-emerald

GhostLock für POCO M6 Pro emerald GhostLock CVE-2026-43499 ist ein 15 Jahre alter Use-After-Free im Linux-Kernel im Futex-Code zur Prioritätsvererbung, der es jedem lokalen Benutzer ermöglicht, Root-Rechte zu erlangen. Dieses Projekt nutzt ihn, um das POCO M6 Pro MediaTek Helio G99 Ultra / MT6789...

AZL-97782 CVE-2026-74743 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: macvlan: inherit neededheadroom and neededtailroom from lowerdev macvlan devices inherit hardheaderlen from lowerdev during macvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying lowerdev requires...

CVE-2026-74743

In the Linux kernel, the following vulnerability has been resolved: macvlan: inherit neededheadroom and neededtailroom from lowerdev macvlan devices inherit hardheaderlen from lowerdev during macvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying lowerdev requires...

CVE-2026-74743

CVE-2026-74743 affects the Linux kernel's macvlan network driver. Macvlan devices inherit hard_header_len from the underlying device during initialization but leave needed_headroom and needed_tailroom set to zero. When the lower device requires extra headroom or tailroom (e.g., macsec , ipsec , w...

CVE-2026-74744 ipvlan: inherit needed_headroom and needed_tailroom from phy_dev

In the Linux kernel, the following vulnerability has been resolved: ipvlan: inherit neededheadroom and neededtailroom from phydev ipvlan devices inherit hardheaderlen from phydev during ipvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying phydev or stacked lower...

CVE-2026-74743 macvlan: inherit needed_headroom and needed_tailroom from lowerdev

In the Linux kernel, the following vulnerability has been resolved: macvlan: inherit neededheadroom and neededtailroom from lowerdev macvlan devices inherit hardheaderlen from lowerdev during macvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying lowerdev requires...

CVE-2026-74744 ipvlan: inherit needed_headroom and needed_tailroom from phy_dev

In the Linux kernel, the following vulnerability has been resolved: ipvlan: inherit neededheadroom and neededtailroom from phydev ipvlan devices inherit hardheaderlen from phydev during ipvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying phydev or stacked lower...

CVE-2026-74743 macvlan: inherit needed_headroom and needed_tailroom from lowerdev

In the Linux kernel, the following vulnerability has been resolved: macvlan: inherit neededheadroom and neededtailroom from lowerdev macvlan devices inherit hardheaderlen from lowerdev during macvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying lowerdev requires...

CVE-2026-43499

👻 CVE-2026-43499 — GhostLock Una falla GhostLock di 15 anni permette l'escalation a root e la fuga dal container sulla maggior parte delle distribuzioni Linux GhostLock è una vulnerabilità Use-After-Free UAF di alta gravità nel sottosistema rtmutex del kernel Linux. La falla ha origine da una...

Linux Distros Unpatched Vulnerability : CVE-2026-74744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvlan: inherit neededheadroom and neededtailroom from phydev ipvlan devices inherit hardheaderlen from phydev during ipvlaninit, but leave neededheadroom and...