Lucene search
+L

2219 matches found

Kitploit
Kitploit
added 2026/09/21 2:00 a.m.8 views

CVE-2022-41218

Introduction This vulnerability is a race condition vulnerability that occurs in drivers/media/dvb-core/dmxdev.c. Therefore, a race condition may occur in the usb device driver using this dmxdev. This vulnerability could be used to trigger 3 UAFs. Vulnerability 1. vmalloc UAF write First, the...

5.5CVSS7.8AI score0.00812EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 10:21 p.m.20 views

oppo-pgem10-ghostlock

OPPO Find X6 Pro GhostLock Adaptation Project Overview This project conducts adaptation research for the CVE-2026-43499 GhostLock vulnerability on the OPPO Find X6 Pro PGEM10. Based on the original exploit architecture from NebuSec CyberMeowfia, referencing adaptation ideas from oppo-ghostlock...

7.8CVSS7.1AI score0.00789EPSS
SaveExploits103References4
Kitploit
Kitploit
added 2026/09/20 4:36 p.m.13 views

GhostLock-for-OnePlus15T

GhostLock — OnePlus 15T 适用于 OnePlus 15T 锁 Bootloader 设备的内核漏洞利用工具。利用 CVE-2026-43499 在不解锁 Bootloader、不修改 boot.img 的前提下获取 root 权限。 仅限授权的安全研究和教育用途。 本仓库修改自GhostLock-for-OnePlus 源仓库,专门适配 OnePlus 15T PLZ110 / SM8850 / 骁龙 8 Elite 的物理内存布局和 CPU 时序。 目录 漏洞概述 支持设备 前置条件 构建方法 使用方式 运行模式 技术细节 文件结构 适配新设备 常见问题 漏洞概述...

7.8CVSS7.3AI score0.00789EPSS
SaveExploits103References2
Kitploit
Kitploit
added 2026/09/20 11:40 a.m.11 views

ghostlock-oppo-watch3pro

GhostLock CVE-2026-43499 — OPPO Watch 3 Pro 完整研究案例 对 OPPO Watch 3 Pro OWW211, ColorOS Watch 国行, Android 11, ARM32 上 CVE-2026-43499 GhostLock, rtmutex/futex-PI 栈 UAF 的完整利用研究。 最终结论:链走写入机制在 OPPO 00522 msm-5.4 重构版 rtmutex 上触发即崩溃, 无法完成利用 。所有触发方式(T2 requeue / schedsetattr)实机验证均 panic; 且...

7.8CVSS7.4AI score0.00789EPSS
SaveExploits103References9
Kitploit
Kitploit
added 2026/09/20 10:12 a.m.11 views

GhostLock-for-OnePlus

GhostLock — OnePlus Kernel exploit targeting locked-bootloader OnePlus devices. Uses CVE-2026-43499 to obtain root access without unlocking the bootloader or modifying boot.img. Authorized security research and educational purposes only. Table of Contents Vulnerability Overview Supported Devices...

7.8CVSS7.5AI score0.00789EPSS
SaveExploits103References1
Kitploit
Kitploit
added 2026/09/20 9:47 a.m.11 views

CVE-2026-43499-armv7

CVE-2026-43499 GhostLock — ARM32 Huawei Watch 4 Pro 基于 CVE-2026-43499 GhostLock 的 Linux 内核提权漏洞利用尝试 — Huawei Watch 4 Pro MDS-AL00, armv7l 项目概述 本项目是针对 Huawei Watch 4 Pro MDS-AL00, Snapdragon SW5100, HarmonyOS 4.3.0 AOSP 12 设备的 GhostLock 内核漏洞利用尝试,在 ARM 32-bit armv7l 架构上适配。 GhostLock CVE-2026-43499...

7.8CVSS7.5AI score0.00789EPSS
SaveExploits103References2
Kitploit
Kitploit
added 2026/09/20 9:22 a.m.7 views

Vulnerability_PoC

一些有趣漏洞的 PoC/Exploit 作者:Numen Cyber Labs 漏洞研究团队 1. TCP/IP RCE 漏洞(CVE-2022–34718)PoC 还原与分析 https://medium.com/@numencyberlabs/analysis-and-summary-of-tcp-ip-protocol-remote-code-execution-vulnerability-cve-2022-34718-8fcc28538acf 2. CVE-2022–36537 漏洞技术分析与 Exploit...

9.8CVSS7.7AI score0.99978EPSS
SaveExploits100
Kitploit
Kitploit
added 2026/09/20 8:56 a.m.12 views

ghostlock-kit

GhostLock Kit — vivo iQOO Neo9S Pro V2339FA / MT6989 适用于 vivo iQOO Neo9S Pro(V2339FA,MediaTek MT6989) 的 GhostLock 一键 root 套件。 本仓库包含:MCAST transport 移植补丁 、一键脚本、完整分析文档;完整可运行套件(含二进制与 KernelSU)见 Releases。 Device: vivo iQOO Neo9S Pro V2339FA / PD2339, MT6989 Firmware: PD2339A16.2.12.1.W10.V000L1 Andro...

7.8CVSS7.8AI score0.00789EPSS
SaveExploits103References5
Kitploit
Kitploit
added 2026/09/20 7:50 a.m.12 views

CyberMeowfia

网站:nebusec.ai · Twitter @nebusecurity · 漏洞列表 885+ IonStack 后续,关注 https://github.com/NebuSec/CyberMeowfia/issues/44 最新研究 IonStack 第二部分 :GhostLock,一个已在所有 Linux 发行版中存在 15 年的 stack-UAF Linux 内核 📖 分析报告 · 🐦 Twitter Longinus :一个漏洞中的两个边界,用单个漏洞穿透 Chrome 的 Renderer 和 V8 沙箱,CVE-2026-6307 Chrome V8 📖 分析报告 · ...

8.8CVSS7.5AI score0.00504EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/20 6:33 a.m.8 views

UnPlus

unplus CVE-2026-43499 Futex PI UAF 内核任意地址写入 exploit 的核心逻辑代码,用于绕过 SELinux 获取 root。 本仓库只包含核心 exploit 逻辑源码(src/)和单二进制打包器(wrapper/)。 src/target.h 是模板 ,需填入你自己设备的参数才能运行(见下文"设备适配")。 构建 核心逻辑(src/) root@kitploit: 环境要求: Android NDK r29+ API 35, aarch64 export ANDROIDNDKROOT=/path/to/android-ndk 构建纯逻辑产物 mak...

7.8CVSS7.3AI score0.00789EPSS
SaveExploits103References1
Kitploit
Kitploit
added 2026/09/19 9:08 a.m.18 views

iqoo-temp-root

vivo/iQOO 临时 Root 工具箱 免解锁、免刷机、临时 root(重启失效)。 核心原理:CVE-2026-43499(futex PI UAF)内核利用 + KernelSU 临时加载。 支持机型(App 版) 机型| 设备代号| 载荷 ---|---|--- iQOO Z10 Turbo| z10t / iqooz10t / V2452A / pd2452| preloadz10t.so 156KB iQOO Z10 Turbo Pro| V2453A / pd2453| preloadneo11.so 162KB iQOO Z10 Turbo+| pd2405 /...

7.8CVSS7.3AI score0.00789EPSS
SaveExploits103
Kitploit
Kitploit
added 2026/09/19 2:47 a.m.15 views

GhostLock-GOT-W29

CVE-2026-43499 GhostLock — HUAWEI MatePad Pro 11 GOT-W29 针对 GOT-W29(HarmonyOS 4.0, kernel 4.19.157-perf+)上 CVE-2026-43499 (rtmutex/futex-PI 栈 UAF,"GhostLock")的提权研究。 最终结论 1. 漏洞真实且可触发 :值持有 PI 环使 FUTEXCMPREQUEUEPI 返回 -EDEADLK, 回滚路径激活 removewaiter 的 current != waiter-task 清理 bug(本内核...

7.8CVSS7.4AI score0.00789EPSS
SaveExploits103References4
Kitploit
Kitploit
added 2026/09/18 4:16 p.m.7 views

GhostLock

GhostLock - CVE-2026-43499 本地提权漏洞利用 漏洞概述 CVE 编号: CVE-2026-43499 漏洞类型: futex PI(优先级继承)栈 UAF(Use-After-Free) 影响范围: Linux 内核 6.1 6.12(Android GKI) 利用效果: 本地提权 + SELinux 禁用,获取 root shell 工作原理 漏洞触发路径 root@kitploit: 用户空间 → pselect → 内核栈上分配 rtmutexwaiter → futex PI 操作触发 waiter 释放 → 释放后的 waiter 内存被 fdset...

7.8CVSS7.5AI score0.00789EPSS
SaveExploits103References2
Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.5 views

EulerOS Virtualization 2.11.1 : kernel (EulerOS-SA-2026-3424)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : kernel:SUNRPC: fix a memleak in gssimportv2contextCVE-2023-52653 apparmor: Fix null pointer deref when receiving skb during sock...

10CVSS0.36848EPSS
SaveExploits170References1484
Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-90392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix potential UAF when reading bpf link info In bpflinkshowfdinfo and bpflinkgetinfobyfd, link-prog is accessed without holding any locks. If the prog is...

7.8CVSS0.00163EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-90393

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix potential UAF in bpfnetnslinkupdateprog In bpfnetnslinkupdateprog, the checks for oldprog and prog type are currently performed locklessly before...

0.00227EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-90423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Fix UAF in ODP init error-handling path rxeodpmrinituser stores &umemodp-umem in mr-umem before calling rxeodpinitpages. If rxeodpinitpages fails,...

7.8CVSS0.00127EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/17 5:17 p.m.4 views

AZL-102318 CVE-2026-93050 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove Three issues arise when the device is removed while a tty session is still active: 1. UAF of struct ipoctal: the remove callback frees ipoctal via...

0.00205EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/17 5:17 p.m.4 views

AZL-102858 CVE-2026-90421 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix UAF when probe runs concurrent to dyn ID removal Dynamic IDs are only guaranteed to be valid when dynids.lock is held, as removeidstore can free the node. Thus, make a copy in pcimatchdevice. Also, clarify that the id...

0.00189EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/17 5:17 p.m.6 views

CVE-2026-90423

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix UAF in ODP init error-handling path rxeodpmrinituser stores &umemodp-umem in mr-umem before calling rxeodpinitpages. If rxeodpinitpages fails, rxeodpmrinituser releases umemodp and returns an error. rxeregusermr the...

7.8CVSS0.00127EPSS
SaveExploits0References3
Rows per page
Query Builder