LSPromise

LSPromise 一条完整的利用链，可从本地不受信任的应用将权限提升至 root/内核。它不涉及内存破坏或竞态条件，因此攻击者无需进行复杂的堆喷或绕过针对内存破坏漏洞的缓解措施（如 KASLR、MTE 或 CFI），这使得该利用链在易受攻击的设备上拥有 100% 的成功率。 已在运行 Android 17 初始官方版本的 Pixel 10 上测试。请注意，它不适用于 Pixel 6a，并且由于这些内核中的另一个 bug，此问题也可能出现在其他运行 6.1.xxx-android14 内核树的设备上。 使用方法：安装 KernelSU...

samsung-q60t-exploit

Tizen exploit Description Exploit and firmware decryption script presented at Grehack 2021. Slides are available inside the slides . directory and the replay video onYoutube . Directories This repository contains three directories: exploit/: containing the v8 exploit and the kernel exploit,...

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp 本程序为cve-2018-8453的利用程序。 开发\测试平台：x86: windows 10 rs2 15063 x64: windos 10 rs2 16299 附： 使用Palette来读写内核 严重声明： 本工具仅用于技术研究学习。非法使用造成一切后果，均与本人无关。...

RootMyVivo

RootMyVivo 给锁定 Bootloader 的 vivo / iQOO 手机获取 root。不用解锁、不用刷 boot——装个 APK，点个按钮，等结果。 原理是 GhostLock（CVE-2026-43499，futex PI 的 use-after-free）加上在临时 root 之上装 KernelSU。 Русский · English 使用流程 1. 从 Releases 下载 APK 并安装 2. 启动 Shizuku（只需要一次，用来拿 shell 权限），或者开 ADB over TCP 3. 点「获取 ROOT」——应用自动匹配内核对应的...

GhostLock-NVIDIA-Shield-9.2.4

适用于 NVIDIA Shield TV Pro 9.2.4 的 GhostLock 经验证的 arm64 移植版本，针对运行 Shield Experience 9.2.4 的 2019 款 NVIDIA Shield TV Pro（mdarcy）上的 GhostLock futex PI use-after-free（CVE-2026-43499）。该载荷会修改实时 ADB 守护进程的凭据，因此无需解锁引导加载程序、擦除用户数据、安装 su 或修改已验证分区，新的 ADB shell 即可获得 UID 0。 这是一个针对特定构建的内核漏洞利用，仅用于授权安全研究。...

ghostlock-h8q

GhostLock CVE-2026-43499 适用于 Galaxy Z Fold 8 h8q / Fold 8 Ultra q8q 本代码大部分基于 @polygraphene 对原始代码的 fork。 由于大多数已发布漏洞变体使用的主要 primer（select）无法与这些 6.12 Samsung 目标上的 rtmutexwaiter 结构正确对齐，因此需要进行大量修改。此处改用 iosubmit。 已验证可用： h8q-F971USQU1AZFW SM-F971U, P0=0xc7800000。使用 make PROJECT=h8q-F971USQU1AZFW 构建。 构建...

Root-My-Device-Payloads

Root My Device Payloads A fork of BuSung-dev/Root-My-Galaxy-...

Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver

AI-assisted project. This research, exploit development, a...

GhostLock-5.10

GhostLock 5.10 This is a kernel root exploit for the Amazon Fire Max 11 sunstone and the Fire TV Stick 4K Max 2nd Gen / 2023 karat, adapted from CVE-2026-43499 in CyberMeowfia. Supported devices Two devices are supported, both on Fire OS 8. Each has its own build target. Fire Max 11 sunstone Fire...

CVE-2021-47996

creationtimestamp| type| source ---|---|--- 2026-08-25 18:52:52+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtwii2nyif2w 2026-09-02 12:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mujx7k3bo523...

CVE-2026-59565

CVE-2026-59565 is a remotely exploitable buffer overflow in Zscaler Client Connector on Windows that can lead to a local and kernel denial-of-service . The CVSS 3.1 score is 8.8 (HIGH) (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). CISA's SSVC assessment indicates no known exploitation , the vulnerabilit...

USN-8659-1: Linux kernel vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;...

GHSA-XPMJ-WJCP-6PWW

creationtimestamp| type| source ---|---|--- 2026-08-19 09:32:00+00:00| seen| https://gist.github.com/alon710/f8eaee2020ed8f819add6f9d1de77bf8...

CVE-2026-49430

The ZFSIOCRECVNEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size to a 32-bit integer for allocation, then used the original 64-bit size as the length for a byteswap operation. A local user with the "receive" delegated ZFS permission can trigger kernel memory corruption...

kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle

A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...

UBUNTU-CVE-2026-74955

Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

CVE-2026-72198

A flaw was found in the Linux kernel's NTFS file system driver. This vulnerability arises from the incorrect handling of non-resident records for attributes that are expected to be resident. This can lead to 'union confusion paths' where the kernel attempts to read data from an incorrect memory...

Linux Distros Unpatched Vulnerability : CVE-2026-72129

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-rdma: handle inline data with a nonzero offset nvmetrdmauseinlinesg maps the host-controlled inline data offset into the per-command inline scatterlist...

Linux Distros Unpatched Vulnerability : CVE-2026-68461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - device property: initialize the remaining fields of fwnodehandle in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software nod...

Photon OS 5.0: Linux PHSA-2026-5.0-92-0837

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0837. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...