Mi8E5-Unlocker-by-CVE-2026-43499

Mi 8e5 Unlock Toolkit Automated Unlocking Tool for Mi 8e5 Based on CVE-2026-43499 Project Overview Mi 8e5 Unlock Toolkit is an automated unlocking assistance tool designed for the Mi 8e5 device model. The project is implemented based on research related to CVE-2026-43499, integrating ADB, Fastboo...

RootMyVivo-Exploit

RMV Exploit — CVE-2026-43499 for vivo and iQOO A fork of boxiaolanya2008/CVE-2026-43499-Neo11Plus, reworked for RootMyVivo. Everything that broke the phone after rooting is gone; the exploit core keeps its proven timing. Русский · 中文 Targets Directory| Device| Kernel| Offset source ---|---|---|--...

GhostLock-NVIDIA-Shield-9.2.4

GhostLock for NVIDIA Shield TV Pro 9.2.4 Validated arm64 port of the GhostLock futex PI use-after-free CVE-2026-43499 for the 2019 NVIDIA Shield TV Pro mdarcy running Shield Experience 9.2.4. The payload changes the credentials of the live ADB daemon, so new ADB shells are UID 0 without a...

root-s24-e1s

Root S24 e1s / S921BXXSDCZB2 Per-boot local root on Galaxy S24 SM-S921B firmware S921BXXSDCZB2 kernel 6.1.138-android14-11, then late-load KernelSU Next so com.rifsxd.ksunext reports Working LKM. Not affiliated with Root My Galaxy. No GitHub payload feed, no multi-device catalog. One firmware,...

rmg-s9180-fzg1

Root My Galaxy SM-S9180 dm3q — FZG1 payload ports Ports of the CVE-2026-43499 payload UAF → KernelSU LKM temporary root for Samsung Galaxy S23 Ultra SM-S9180 dm3q. Hong Kong TGY — S9180ZHS8FZG1 Kernel: 5.15.189-android13-8-33413713-abS9180ZHS8FZG1 2026-07-05 security patch Root method:...

pixel-ksu-root

pixel-ksu-root Root a stock, locked-bootloader Google Pixel from an unprivileged adb shell, using a kernel CVE — no unlock, no flash, no vendor help. A userspace-reachable kernel bug yields a short-lived read/write primitive. That primitive is spent late-loading a KernelSU module into the running...

CVE-2026-43499_HW-CLT-AL01

CVE-2026-43499 Android arm64 Local Privilege Escalation Adaptation 中文 | English This is an Android arm64 local privilege escalation adaptation project for CVE-2026-43499. The project generates a target-specific target.h from the target device's boot.img and profile, then builds the corresponding...

ghostlock-a17

GhostLock — CVE-2026-43499 on Samsung Galaxy A17 Full user-to-root exploit chain for CVE-2026-43499 "GhostLock" on the Samsung Galaxy A17 SM-A175F , running Android 16 / GKI 6.12. The chain starts from the public GhostLock primitives and ends with a usermode helper executing as: uid=0root gid=0ro...

CVE-2026-43499-Poc-Analysis

CVE-2026-43499 Android arm64 Local Privilege Escalation Adaptation English | 中文 This is an Android arm64 local privilege escalation adaptation project for CVE-2026-43499. The project generates a target-specific target.h from the target device's boot.img and profile, then builds the corresponding...

GhostLock-for-OnePlus

GhostLock — OnePlus Kernel exploit targeting locked-bootloader OnePlus devices. Uses CVE-2026-43499 to obtain root access without unlocking the bootloader or modifying boot.img. Authorized security research and educational purposes only. Table of Contents Vulnerability Overview Supported Devices...

duchamp-root

中文 | English +One-Click+Root;CVE-2026-43499+\IonStack+Exploit;710%E8%A7%A3%E9%94%81%E8%8A%82%E6%9C%80%E6%96%B0%E5%8A%9B%E4%BD%9C+%F0%9F%94%A5 -blue -green ⚡ Proud user of JetBrains Mono ⚡ This README uses JetBrains Mono exclusively. Comic Sans is forbidden. !IMPORTANT 🚨 Disclaimer This exploit is...

cve-2026-43499-app.s0

cve-2026-43499-app.s0...

rmx3888-cve-2026-43499-config

CVE-2026-43499 Exploit Configuration for realme RMX3888 Device Information Brand/Model : realme RMX3888 Android Version : 16 SDK 36 Build ID : BP2A.250605.015 Kernel : Linux 6.1.141-android14-11-o-gffc54a6d2287 SoC : Qualcomm SM8650 Snapdragon 8 Gen 3 Architecture : ARM64 aarch64 Overview This...

UnPlus

unplus CVE-2026-43499 Futex PI UAF kernel arbitrary-address-write exploit core logic code, used to bypass SELinux and gain root. This repository only contains the core exploit logic source src/ and the single-binary packager wrapper/. src/target.h is a template ; you must fill in parameters for...

Mi8E5-Unlocker-by-CVE-2026-43499

Mi 8e5 Unlock Toolkit Automated bootloader unlock assistant for Mi 8e5 series devices, implementing CVE-2026-43499. This is an English-translated and macOS/Linux-ported fork of the original Windows-only release by @Kernix. Original repo:...

CVE-2026-43499-PoC-Scanner

CVE-2026-43499 PoC Scanner This repository contains a Go-based scanner and proof-of-concept implementation for a Linux kernel vulnerability related to CVE-2026-43499. The project is intended for research, defensive analysis, and authorized security testing only. Overview The code in this reposito...

CVE-2026-43499-root-KernelSU

CVE-2026-43499-root-KernelSU A local privilege escalation adaptation based on kernel vulnerability CVE-2026-43499, with embedded KernelSU integrated. It compiles to produce preload.so; upon successful exploitation, KernelSU will be started in late-load mode jailbreak mode. Supports generating...

ghost-hoock

ghost-hoock A minimal fork of GhostLock that keeps only one primitive : turning off SELinux via CVE-2026-43499 futex PI UAF. ghost-hoock running on Samsung A17 -green Table of contents What is this How it works What was kept from the original What was removed Building Running Requirements...

CVE-2026-43499-pja110

Website: nebusec.ai · Twitter @nebusecurity · Bug list 885+ Latest research IonStack part II : GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years Linux Kernel 📖 Writeup · 🐦 Twitter Longinus : 2 Boundaries in One Bug, Piercing Chrome's Renderer and V8 Sandbox with a...

Exploit for Use After Free in Linux Linux_Kernel

Samsung Root Kit — Offline Version Android App DF Chain Prefe...