CVE-2023-52927

CVE-2023-52927 LPE exploit for CVE-2023-52927 - a Use-After-Free vulnerability in netfilter. My write-up of the vulnerability: CVE-2023-52927 - Turning a Forgotten Syzkaller Report into kCTF Exploit Reproducer: KASAN trigger poc Building Install dependencies: make prerequisites Build exploit: mak...

PS5-IPV6-Kernel-Exploit

PS5 3.xx / 4.xx Kernel Exploit Summary This repo contains an experimental WebKit ROP implementation of a PS5 kernel exploit based on TheFlow's IPV6 Use-After-Free UAF , which was reported on HackerOne. The exploit strategy is for the most part based on TheFlow's BSD/PS4 PoC with some changes to...

CVE-2020-17382

CVE-2020-17382 Windows 10 x64 2004 Build 19041.264 Exploit Kudos to @matteomalvica for asking me so many questions about this vulnerability that forced me to write an exploit for him for the latest Windows 10 release 19041.264 without KVA Shadow i.e. non Specter vulnerable CPUs and without VBS...

CVE-2022-0995

CVE-2022-0995 Exploit pour CVE-2022-0995. Utilise un débordement de tas hors limites dans le composant watchqueue du noyau Linux. Une technique similaire est décrite dans cette recherche https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html. L'exploit a été testé sur...

ghostlock-oppo-watch3pro

GhostLock CVE-2026-43499 — полное исследование OPPO Watch 3 Pro Полное исследование эксплуатации CVE-2026-43499 GhostLock, rtmutex/futex-PI stack UAF на OPPO Watch 3 Pro OWW211, ColorOS Watch китайская версия, Android 11, ARM32. Итоговый вывод: механизм записи через цепочку на OPPO 00522 rtmutex ...

cve-2026-43499-m3q-azf1

GhostLock: удержание SELinux — SM-S948U1 / AZF1 m3q Исследовательский снимок работающего удержания только SELinux для Samsung Galaxy S26 Ultra SM-S948U1, кодовое имя m3q на прошивке S948U1UES3AZF1 GKI 6.12.30-android16-5. Этот пакет не является полным root. Он переключает SELinux в режим Permissi...

IonStack-S22-cve-2026-43499

IonStack-S22-cve-2026-43499 ОБЪЕДИНЕНО С ОРИГИНАЛЬНЫМ РЕПОЗИТОРИЕМ: Найти его здесь https://github.com/CamsShaft/IonStack-S22 Полный root в домене ядра с selinux permissive на моём SM-S901W S22 5.10.168-android12-9-27760517-abS901WVLS4DWL3. ПРИМЕЧАНИЯ: Я не буду вдаваться в большие подробности ил...

Exploit for CVE-2026-64560

k80pro-miro-cve-2026-64560 CVE-2026-64560 for Redmi K80 Pro...

Bagagwa-Exploit-PS5

Bagagwa exploit, PS5 12.40 -- work in progress Thanks to Clau...

ps5-12.40-jailbreak

PS5 12.40 native exploit, work in progress This is the workin...

Root-My-Device-Payloads

Root My Device Payloads A fork of BuSung-dev/Root-My-Galaxy-...

Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver

AI-assisted project. This research, exploit development, a...

Exploit for CVE-2026-64560

Xiaomi 15 dada CVE-2026-64560 Device-specific adaptation...

GhostLock-5.10

GhostLock 5.10 This is a kernel root exploit for the Amazon Fire Max 11 sunstone and the Fire TV Stick 4K Max 2nd Gen / 2023 karat, adapted from CVE-2026-43499 in CyberMeowfia. Supported devices Two devices are supported, both on Fire OS 8. Each has its own build target. Fire Max 11 sunstone Fire...

CVE-2021-47996

creationtimestamp| type| source ---|---|--- 2026-08-25 18:52:52+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtwii2nyif2w 2026-09-02 12:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mujx7k3bo523...

CVE-2026-59565

CVE-2026-59565 is a remotely exploitable buffer overflow in Zscaler Client Connector on Windows that can lead to a local and kernel denial-of-service . The CVSS 3.1 score is 8.8 (HIGH) (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). CISA's SSVC assessment indicates no known exploitation , the vulnerabilit...

USN-8659-1: Linux kernel vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;...

GHSA-XPMJ-WJCP-6PWW

creationtimestamp| type| source ---|---|--- 2026-08-19 09:32:00+00:00| seen| https://gist.github.com/alon710/f8eaee2020ed8f819add6f9d1de77bf8...

CVE-2026-49430

The ZFSIOCRECVNEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size to a 32-bit integer for allocation, then used the original 64-bit size as the length for a byteswap operation. A local user with the "receive" delegated ZFS permission can trigger kernel memory corruption...

kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle

A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...