RootMyVivo

RootMyVivo Root для vivo и iQOO с залоченным загрузчиком. Без разблокировки, без прошивки boot — поставил APK, нажал кнопку, подождал. В основе GhostLock CVE-2026-43499, use-after-free в futex PI + установка KernelSU поверх временного рута. English · 中文 Как это выглядит 1. Ставишь APK из релизов ...

GhostLock-NVIDIA-Shield-9.2.4

NVIDIA Shield TV Pro 9.2.4용 GhostLock 2019 NVIDIA Shield TV Promdarcy에서 Shield Experience 9.2.4를 실행하는 환경을 위해 검증된 GhostLock futex PI use-after-freeCVE-2026-43499의 arm64 포트입니다. 이 페이로드는 실행 중인 ADB 데몬의 자격 증명을 변경하므로, 부트로더 잠금 해제, userdata 초기화, su 설치 또는 검증된 파티션 수정 없이도 새 ADB 셸이 UID 0으로 실행됩니다. 이는 승인된 보안 연구...

hp-slate7-root-kit

Root для HP Slate 7 2800 на Android 4.1.1 English | Русский Этот репозиторий содержит полный автономный комплект для получения постоянного root-доступа на HP Slate 7 2800 с прошивкой 1.05.18 и ядром Linux 3.0.8+ через локальную уязвимость CVE-2015-1805. Комплект был реально выполнен на планшете, ...

ghostlock-h8q

GhostLock CVE-2026-43499 for Galaxy Z Fold 8 h8q / Fold 8 Ultra q8q 이 코드의 대부분은 @polygraphene의 원본 포크를 기반으로 합니다. 공개된 대부분의 익스플로잇 변종에서 사용되는 주요 프라이머select가 이 6.12 Samsung 타깃의 rtmutexwaiter 구조체와 제대로 정렬되지 않아 대폭 수정이 필요했습니다. 대신 iosubmit이 사용됩니다. 작동 확인: h8q-F971USQU1AZFW SM-F971U, P0=0xc7800000. make...

CVE-2021-21551-POC

DbUtilAx Расширенное доказательство концепции для эксплойта ядра Dell ‘dbutil23.sys’ CVE-2021-21551. Читайте полную статью в блоге здесь...

CVE-2019-2215

Bad-Binder CVE-2019-2215 다음은 x86 에뮬레이터에서 테스트된 bad binder CVE-2019-2215 취약점에 대한 익스플로잇입니다. 목표는 UAF 취약점을 악용하여 AAR 프리미티브를 트리거해 커널 주소를 누출하고, AAW 프리미티브를 사용하여 addrlimit을 덮어씀으로써 커널 읽기 및 쓰기 프리미티브를 확보한 뒤, 로컬 권한 상승 LPE을 위해 credstruct를 수정하는 것이었습니다. 크레딧...

Root-My-Device-Payloads

Root My Device Payloads A fork of BuSung-dev/Root-My-Galaxy-...

Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver

AI-assisted project. This research, exploit development, a...

GhostLock-5.10

GhostLock 5.10 This is a kernel root exploit for the Amazon Fire Max 11 sunstone and the Fire TV Stick 4K Max 2nd Gen / 2023 karat, adapted from CVE-2026-43499 in CyberMeowfia. Supported devices Two devices are supported, both on Fire OS 8. Each has its own build target. Fire Max 11 sunstone Fire...

CVE-2021-47996

creationtimestamp| type| source ---|---|--- 2026-08-25 18:52:52+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtwii2nyif2w 2026-09-02 12:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mujx7k3bo523...

CVE-2026-59565

CVE-2026-59565 is a remotely exploitable buffer overflow in Zscaler Client Connector on Windows that can lead to a local and kernel denial-of-service . The CVSS 3.1 score is 8.8 (HIGH) (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). CISA's SSVC assessment indicates no known exploitation , the vulnerabilit...

USN-8659-1: Linux kernel vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;...

GHSA-XPMJ-WJCP-6PWW

creationtimestamp| type| source ---|---|--- 2026-08-19 09:32:00+00:00| seen| https://gist.github.com/alon710/f8eaee2020ed8f819add6f9d1de77bf8...

CVE-2026-49430

The ZFSIOCRECVNEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size to a 32-bit integer for allocation, then used the original 64-bit size as the length for a byteswap operation. A local user with the "receive" delegated ZFS permission can trigger kernel memory corruption...

kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle

A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...

UBUNTU-CVE-2026-74955

Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

CVE-2026-72198

A flaw was found in the Linux kernel's NTFS file system driver. This vulnerability arises from the incorrect handling of non-resident records for attributes that are expected to be resident. This can lead to 'union confusion paths' where the kernel attempts to read data from an incorrect memory...

Linux Distros Unpatched Vulnerability : CVE-2026-72129

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-rdma: handle inline data with a nonzero offset nvmetrdmauseinlinesg maps the host-controlled inline data offset into the per-command inline scatterlist...

Linux Distros Unpatched Vulnerability : CVE-2026-68461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - device property: initialize the remaining fields of fwnodehandle in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software nod...

CVE-2026-74579

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftpayload: fix mask build for partial field offload nftpayloadoffloadmask builds the offload match mask for a payload expression that covers only part of a header field. For a partial IPv6 address match fieldlen = 16,...