oppo-ghostlock

oppo-ghostlock GhostLock CVE-2026-43499 — Investigación de escalada de privilegios del kernel de Linux en OPPO Find N2 Resumen del proyecto GhostLock CVE-2026-43499 es una vulnerabilidad UAF en la pila del kernel que afecta a Linux 2.6.39 hasta 7.1-rc1, desencadenada mediante una condición de...

libsignal

Overview libsignal contains platform-agnostic APIs used by the official Signal clients and servers, exposed as a Java, Swift, or TypeScript library. The underlying implementations are written in Rust: libsignal-protocol: Implements the Signal protocol, including the Double Ratchet algorithm. A...

UniBLEed

UniBLEed Unitree G1 RCE PoC & Scripts CVE-2026-76639 / CVE-2026-76640 technical details at boschko.ca/g1-ble-rce/ Use this repository only with robots, accounts, and networks you are authorized to test. The active chains can change the robot's WiFi configuration, stop or restart services, crash...

cve-2025-21479_iqooneo8

CVE-2025-21479 — Qualcomm Adreno GPU 提权漏洞利用（SM8475 / iQOO Neo8） 针对 CVE-2025-21479 的本地提权实验代码，目标是 vivo V2301A（iQOO Neo8 / PD2301，Snapdragon 8+ Gen 1 / SM8475，Adreno A730，Android 14，GKI 内核 5.10）上的 Qualcomm Adreno GPU（KGSL）。 原理上，漏洞利用通过 KGSL 的 CPSMMUTABLEUPDATE 命令驱动 GPU 的 SMMU， 获得任意物理内存读写 能力，进而关闭...

CVE-2026-9254

TP-Link Archer BE800 V1 — Parental Control LAN RCE CVE: CVE-2026-9254 CVSS: 8.7 High Auth required: None Network position: LAN only Found on version 1.3.2 Build 20251015 rel.106595553 Summary The parental control blocking endpoint /cgi-bin/luci/blocking?form=vercode is reachable from the LAN...

ghostlock-k419-adapter

GhostLock — OnePlus Locked Bootloader Jailbreak Kernel exploit for OnePlus/OPPO/realme devices with locked bootloader. Achieves root + KernelSU installation without unlocking bootloader or modifying boot image. Runtime auto-detection of kernel version with multi-device offset table. Vulnerability...

CVE-2020-9496

CVE-2020-9496 - RCE Because the 2 xmlrpc related requets in webtools xmlrpc and ping are not using authentication they are vulnerable to unsafe deserialization. This issue was reported to the security team by Alvaro Munoz [email protected] from the GitHub Security Lab team. This vulnerabilit...

CVE-2024-31969

📌 CVE-2024-31969 CVE-2024-31969 adalah kerentanan local privilege escalation pada sudo ketika menggunakan perintah sudoedit. Kerentanan ini diperkenalkan sejak sudo 1.9.0 karena cara sudoedit memvalidasi environment variable pengguna dan kepemilikan file yang kurang tepat. 📖 Deskripsi A flaw...

Security Bulletin: Multiple Vulnerabilities in IBM API Connect

Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.12 Vulnerability Details CVEID:CVE-2026-2303 DESCRIPTION: The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS. The C wrapper implementation contains a heap...

CVE-2026-4253-Scanner

CVE-2026-42530 — Safe-Check Scanner Non-destructive mass scanner for the NGINX HTTP/3 QUIC use-after-free Inventory which of your hosts are exposed — without ever triggering the bug. ⚠️ Disclaimer This tool is for authorized security testing only — your own infrastructure, or systems you have...

DataEase-Authenticated-SQL-Injection-

DataEase: Authenticated SQL Injection previewData Summar...

USN-8737-1: GNU C Library vulnerabilities

It was discovered that GNU C Library had a buffer overflow in the strfmon function when handling right-justification padding. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. CVE-2026-19499 It was discover...

SkillSpector v2.11.1

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. Research shows that 26.1% of...

Vulnerability-CVE-2025-64446-CVE-2025-58034

FortiWeb Exploitation Simulation CVE-2025-64446 & CVE-2025-58034 Note: This document is for educational and security research purposes only. Do not use to attack systems without permission. 1. Overview FortiWeb is a Web Application Firewall WAF device used to protect web applications. In 2025, tw...

CVE-2026-46300

CVE-KERNEL · Linux Kernel LPE Chain Multi-CVE Local Privilege Escalation chain for Linux kernel vulnerabilities uid=1000 → root via xfrm-ESP, RxRPC, or Fragnesia page-cache write Overview CVE-KERNEL is a Python-based Local Privilege Escalation LPE tool that chains multiple Linux kernel CVEs to...

memdumper

memdumper memdumper reads the memory of a running macOS process under another signed binary's debugger entitlement. The aim is that taskforpid and ptrace run as that entitled binary, so an EDR records it rather than memdumper. by cenobyte [email protected] 2026...

Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 1.0)

Summary Vulnerabilities identified in IBM Cloud Pak for Data System Yosemite 1.0 have been addressed in version 11.3.1.2-IF2 Vulnerability Details CVEID:CVE-2026-41848 DESCRIPTION: Applications may be vulnerable to a Regular Expression Denial of Service ReDoS attack if an attacker is able to...

CVE-2026-0257

CVE-2026-0257 PAN-OS GlobalProtect Authentication Bypass Vulnerability ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Proftpd

CVE-2010-4221 — ProFTPD TELNET IAC Stack Overflow: From Patch...

exphub

Notice 终究还是觉得每个漏洞每个单独的脚本很不方便，故将所有的poc和exp脚本整在一起，可以一键扫描+漏洞利用，由于近期都在做整合所以exphub搁置许久没有更新，目前整合版已经接近尾声，将在10月发布（节后），敬请关注 已经发布 --- https://github.com/zhzyker/vulmap Exphub Exphub漏洞利用脚本库 （想要star⭐ 目前包括Webloigc、Struts2、Tomcat、Drupal的漏洞利用脚本，均为亲测可用的脚本文件，尽力补全所有脚本文件的使用说明文档，优先更新高危且易利用的漏洞利用脚本...