CVE-2026-40369

Esta es una reescritura y resumen del análisis técnico público de VoidSec sobre CVE-2026-40369, con un diagrama de flujo añadido y notas defensivas para mi propia comprensión. Todos los detalles técnicos centrales provienen de su investigación. No realicé ingeniería inversa independiente sobre es...

Elysium-Vanguard-Sentinel-Audit

SENTINEL-ROOT-AUDIT: Honor Magic V2 Hypervisor Detection Suite ➲ Project Overview SENTINEL-ROOT-AUDIT is a professional-grade security suite designed to audit kernel integrity and detect hypervisor-level interventions on the Honor Magic V2 SM8550. While the core vulnerability CVE-2025-38352 allow...

CTT-NFS-Vortex-RCE

CTT-NFS-Vortex-RCE CVE-2026-21509 ⚠️ Aviso Técnico: Nueva Divulgación Física Este repositorio contiene un exploit completamente armado para CVE-2026-21509 , dirigido al controlador en modo kernel del Sistema de Archivos de Red de Windows NFSv4.1 nfssvr.sys. A diferencia de los PoC estándar que...

CVE-2026-65343

CVE-2026-65343 — Lectura fuera de límites en AppleKeyStore derrota de KASLR Componente: extensión del kernel AppleKeyStore — LibSerSEPControlDeserialize Afectados: iOS / iPadOS 26.6 23G71 y anteriores Corregido en: iOS / iPadOS 26.6.1 23G83 Tipo: lectura fuera de límites en la deserialización de...

s26-m1q-ghostlock-selinux

S26 SM-S942U1 / m1q GhostLock CVE-2026-43499 — uid=0 root + KernelSU 激活达成 针对 Samsung Galaxy S26（SM-S942U1，codename m1q，SoC SM8850 骁龙 8 Elite Gen2， 内核 6.12.30-android16-5-android16-5-pd30ff70，Android 16）的 CVE-2026-43499（GhostLock）提权研究。 ✅ 最终结果：uid=0 root + KernelSU 激活达成 root@kitploit: exploit 后通过...

CVE-2026-20805-PoC

PoC CVE-2026-20805 Prueba de concepto que demuestra una vulnerabilidad de divulgación de información en el Administrador de ventanas de escritorio de Microsoft dwm.exe. Descripción general Este repositorio contiene una prueba de concepto PoC personalizada desarrollada para reproducir...

Exploit for Use After Free in Linux Linux_Kernel

Galaxy A37 Root — CVE-2026-43499 Native payload for the Sam...

GhostUnlock-SM-S918U

GhostUnlock — Samsung Galaxy S23 Ultra SM-S918U1, dm3q Temp...

CVE-2026-80118

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure in DirectIo64.sys, reachable by unprivileged local users through a single IOCTL with no caller-identity check. The handl...

CVE-2026-80118 PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via DirectIo64.sys IOCTL

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure in DirectIo64.sys, reachable by unprivileged local users through a single IOCTL with no caller-identity check. The handl...

CVE-2026-80118

PassMark PerformanceTest (before 11.1 build 1012), BurnInTest (before 11.1 build 1000), and OSForensics (before 11.1 build 1016) contain an unauthenticated physical memory disclosure in DirectIo64.sys . A single IOCTL with no caller-identity check allows unprivileged local users to write a crash-...

EUVD-2026-71689

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure in DirectIo64.sys, reachable by unprivileged local users through a single IOCTL with no caller-identity check. The handl...

PT-2026-86231

Name of the Vulnerable Software and Affected Versions PassMark PerformanceTest versions prior to 11.1 build 1012 BurnInTest versions prior to 11.1 build 1000 OSForensics versions prior to 11.1 build 1016 Description An unauthenticated physical memory disclosure exists in the DirectIo64.sys driver...

CVE-2026-43499-NAM-AL00

CVE-2026-43499 — GhostLock auf Huawei Nova 9 NAM-AL00 Sicherheitsforschung: Bestätigung auf dem Gerät und Exploit-Analyse von CVE-2026-43499 GhostLock auf Huawei Nova 9 NAM-AL00, Snapdragon 778G/SM7325, HarmonyOS 4.2.0.185, Kernel 5.4.86-qgki. Zusammenfassung CVE-2026-43499 ist ein...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 — GhostLock on Huawei Nova 9 NAM-AL00 Securi...

UBUNTU-CVE-2026-72013

In the Linux kernel, the following vulnerability has been resolved: riscv: Prevent NULL pointer dereference in machinekexecprepare A NULL pointer dereference issue is noticed in riscv's machinekexecprepare, where image-segmenti.buf might be NULL and copied unchecked. The NULL buf comes from...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 vivo PD2425 Exploit Adaptation Project A porti...

Exploit for CVE-2026-50416

CVE-2026-50416: a kernel pointer on every desktop, readable fr...

CVE-2026-13199

CVE-2026-13199 affects Raspberry Pi 5 and Compute Module 5 EEPROM firmware. The issue is that the EEPROM produced non-random KASLR and RNG seed values, resulting in consistent kernel addresses across boots and devices. This may lower entropy and potentially ease exploitation of other vulnerabilit...

AZL-90387 CVE-2026-52937 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: tap: fix stack info leak in tapioctl SIOCGIFHWADDR In the SIOCGIFHWADDR path, tapioctl copies 16 bytes of an uninitialised on-stack struct sockaddrstorage to userspace via ifrhwaddr, but netifgetmacaddress only writes safamily an...