Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

CVE-2026-100781

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

Relapse-Exploit-PSH5

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

Amazon Linux 2023 : environment-modules, environment-modules-compat (ALAS2023-2026-3135)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3135 advisory. modulecomgenwordsandfiles fed untrusted text module names readoff disk, LOADEDMODULES, MODULEPATH straight into compgen -W, whichperforms a full unquoted-word expansion on its wordlist --...

badspin

Bad Spin: Android Binder LPE Author: Moshe Kol 권한 상승 익스플로잇으로, unstrustedapp에서 Android Binder 취약점CVE-2022-20421을 대상으로 합니다. 이 취약점은 2022년 10월 Android 보안 게시판에서 패치되었습니다. 이 익스플로잇은 커널 버전 5.4.x 및 5.10.x를 실행하는 기기에서 작동하며, 완전한 커널 R/W 프리미티브를 달성합니다. Google Pixel 6의 경우 완전한 루트 권한 및 SELinux 우회도 획득합니다. 전체 작성 글은...

stealth_call

これは何か？ Windows x64向けのヘッダーオンリーライブラリで、ntdllのインポートに触れることなく、バイナリに文字列を残すことなく、EDRを混乱させるような一般的なレッドフラグなしで、任意のNTシステムコールを呼び出すことができます。 CRTなし。STLなし。IATなし。全体で約19KBにコンパイルされ、DLL依存関係は文字通りゼロです。 既存のシステムコールライブラリの一般的な落とし穴（平文文字列、既知のハッシュ定数、非ntdllメモリからの直接システムコール、「何か変なことをしている」と叫ぶIATインポート、SECNOCHANGE...

CVE-2026-97517

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject beacons with bad HE operation The HE operation element not only needs to be longer than the fixed part, but also have an appropriate size for the variable part inside of it. Check this...

CVE-2026-93805

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate rx/tx MLME callback frame lengths before access cfg80211rxmlmemgmt and cfg80211txmlmemgmt call tracepoints before rejecting frames shorter than the frame-control field. After that, they only require len =...

CVE-2026-93804

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ibss: wait for in-flight TX on disconnect While leaving an IBSS in ieee80211ibssdisconnect mac80211 flushes stations, turns the carrier off and immediately tells the driver to leave as well. While there may be...

CVE-2026-93803

In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: fix key index receive bound checks libipwrx reads skb-datahdrlen + 3 to extract the WEP key index in both the software-decrypt key selection path and the hardware-decrypted IV/ICV strip path. In both places the...

Exploit for CVE-2025-7771

CVE-2025-7771 — ThrottleStop.sys Arbitrary Physical Memory R/W...

CVE-2026-93094

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dplinkpeer dangling references on AP vdev rollback ath12kmacvdevcreate for an AP vdev creates the bss self-peer via ath12kpeercreate, which finishes by calling ath12kdplinkpeerassign to publish the dplinkpeer in...

UBUNTU-CVE-2026-92497

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid buffer overread in ath12kwmioprx Currently, in ath12kwmioprx, the firmware buffer is read without first verifying that the buffer has enough data to hold a header. This could result in a buffer overread. Updat...

CVE-2026-92497

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid buffer overread in ath12kwmioprx Currently, in ath12kwmioprx, the firmware buffer is read without first verifying that the buffer has enough data to hold a header. This could result in a buffer overread. Updat...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock CVE-2026-43499 for the Galaxy S26 CVE-2026-43499...

Exploit for Type Confusion in Google Chrome

CVE-2026-78938 — V8 TurboFan CheckMaps instance-migration type...

stealth_call

Cos'è? Libreria header-only per Windows x64 che consente di invocare qualsiasi syscall NT senza toccare gli import di ntdll, senza lasciare stringhe nel binario e senza i soliti campanelli d'allarme che fanno impazzire gli EDR. Niente CRT. Niente STL. Niente IAT. L'intero progetto compila a circa...

CVE-2026-54136: Incorrect Authorization

Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to 1.715.0, a resource-scoped API token could read script contents outside its allowed path scope through GET /api/w/workspace/scripts/listsearch. The route-level scope middleware...