Lucene search
+L

2172 matches found

Kitploit
Kitploit
added 2026/09/13 6:27 a.m.3 views

UnPlus

unplus CVE-2026-43499 Futex PI UAF kernel arbitrary-address-write exploit core logic code, used to bypass SELinux and gain root. This repository only contains the core exploit logic source src/ and the single-binary packager wrapper/. src/target.h is a template ; you must fill in parameters for...

7.8CVSS7.2AI score0.00789EPSS
SaveExploits89References1
Kitploit
Kitploit
added 2026/09/13 3:45 a.m.13 views

oppo-ghostlock

oppo-ghostlock GhostLock CVE-2026-43499 — OPPO Find N2 Linux Kernel Privilege Escalation Research Project Overview GhostLock CVE-2026-43499 is a kernel stack UAF vulnerability affecting Linux 2.6.39 through 7.1-rc1, triggered via a FUTEXCMPREQUEUEPI race condition. This project ports the x8664...

7.8CVSS7.2AI score0.00789EPSS
SaveExploits89References4
Kitploit
Kitploit
added 2026/09/13 2:31 a.m.5 views

GhostLock-for-OnePlus

GhostLock — OnePlus Kernel exploit targeting locked-bootloader OnePlus devices. Uses CVE-2026-43499 to obtain root access without unlocking the bootloader or modifying boot.img. Authorized security research and educational purposes only. Table of Contents Vulnerability Overview Supported Devices...

7.8CVSS7.4AI score0.00789EPSS
SaveExploits89References1
Kitploit
Kitploit
added 2026/09/13 1:01 a.m.7 views

CyberMeowfia

Website: nebusec.ai · Twitter @nebusecurity · Bug list 885+ IonStack followup, follow https://github.com/NebuSec/CyberMeowfia/issues/44 Latest research IonStack part II : GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years Linux Kernel 📖 Writeup · 🐦 Twitter Longinus : ...

8.8CVSS7.5AI score0.00504EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/12 10:25 p.m.4 views

Vulnerability_PoC

The PoC/Exploit of some interesting vulnerabilities Author: Vulnerability Research Team of Numen Cyber Labs 1. TCP/IP RCE Vulnerability CVE-2022–34718 PoC Restoration and Analysis...

9.8CVSS8.2AI score0.99931EPSS
SaveExploits47
Kitploit
Kitploit
added 2026/09/12 7:57 p.m.8 views

GhostLock-for-OnePlus15T

GhostLock — OnePlus 15T Kernel exploit targeting locked-bootloader OnePlus 15T devices. Uses CVE-2026-43499 to obtain root access without unlocking the bootloader or modifying boot.img. Authorized security research and educational purposes only. Modified from the originalGhostLock-for-OnePlus...

7.8CVSS7.3AI score0.00789EPSS
SaveExploits89References2
Kitploit
Kitploit
added 2026/09/12 9:08 a.m.6 views

iqoo-temp-root

vivo/iQOO Temporary Root Toolkit No bootloader unlocking, no flashing needed, temporary root lost on reboot. Core principle: CVE-2026-43499 futex PI UAF kernel exploit + temporary KernelSU loading. Supported devices App version Device| Codename| Payload ---|---|--- iQOO Z10 Turbo| z10t / iqooz10t...

7.8CVSS7.2AI score0.00789EPSS
SaveExploits89
Kitploit
Kitploit
added 2026/09/12 8:25 a.m.4 views

CVE-2022-41218

Introduction This vulnerability is a race condition vulnerability that occurs in drivers/media/dvb-core/dmxdev.c. Therefore, a race condition may occur in the usb device driver using this dmxdev. This vulnerability could be used to trigger 3 UAFs. Vulnerability 1. vmalloc UAF write First, the...

5.5CVSS7.1AI score0.00795EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 4:13 a.m.6 views

CVE-2026-43499-armv7

CVE-2026-43499 GhostLock — ARM32 Huawei Watch 4 Pro CVE-2026-43499 GhostLock 기반 Linux 커널 권한 상승 exploit 시도 — Huawei Watch 4 Pro MDS-AL00, armv7l 프로젝트 개요 이 프로젝트는 Huawei Watch 4 Pro MDS-AL00, Snapdragon SW5100, HarmonyOS 4.3.0 AOSP 12 기기를 대상으로 한 GhostLock 커널 취약점 exploit 시도이며, ARM 32-bit armv7l 아키텍처에...

7.8CVSS7.4AI score0.00789EPSS
SaveExploits89References2
Kitploit
Kitploit
added 2026/09/12 2:46 a.m.12 views

GhostLock-GOT-W29

CVE-2026-43499 GhostLock — HUAWEI MatePad Pro 11 GOT-W29 针对 GOT-W29(HarmonyOS 4.0, kernel 4.19.157-perf+)上 CVE-2026-43499 (rtmutex/futex-PI 栈 UAF,"GhostLock")的提权研究。 最终结论 1. 漏洞真实且可触发 :值持有 PI 环使 FUTEXCMPREQUEUEPI 返回 -EDEADLK, 回滚路径激活 removewaiter 的 current != waiter-task 清理 bug(本内核...

7.8CVSS7.2AI score0.00789EPSS
SaveExploits89References4
NVD
NVD
added 2026/09/11 8:18 p.m.5 views

CVE-2026-80928

In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smackfilesendsigiotask When inspecting the credentials of another task, objective credentials -realcred, accessed with taskcred must always be used. Accessing -cred on a non-current task is forbidden unless...

7.8CVSS0.00168EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/11 4:16 p.m.4 views

GhostLock

GhostLock - CVE-2026-43499 Local Privilege Escalation Exploit Vulnerability Overview CVE ID: CVE-2026-43499 Vulnerability Type: futex PI priority inheritance stack UAF Use-After-Free Affected Range: Linux kernel 6.1 6.12 Android GKI Exploitation Impact: Local privilege escalation + SELinux disabl...

7.8CVSS7.4AI score0.00789EPSS
SaveExploits89References2
Kitploit
Kitploit
added 2026/09/11 6:10 a.m.7 views

onetwoseven-writeup

HTB OneTwoSeven — Full Walkthrough A complete, end-to-end walkthrough of OneTwoSeven , a retired HackTheBox Linux machine. The full chain: deterministic credential generation → symlink escape of an SFTP chroot → vim swap file recovery → SSH port-forwarding to a firewalled admin panel → bypass of...

7.8CVSS7.2AI score0.28058EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/10 3:31 p.m.5 views

RootMyVivo-Exploit

RMV Exploit — iQOO Neo 11 PD2520 向け CVE-2026-43499 クリーンビルド boxiaolanya2008/CVE-2026-43499-Neo11Plus のフォークで、 RootMyVivo Neo 向けに作り直したもの: 我々のシナリオに不要なものはすべて削除し、 検証済みのエクスプロイトカーネルはタイミングを変更せずそのまま残した。 upstream から削除したもの コンポーネント| 理由 ---|--- 壁紙の変更 + systemserver の kill| ルート後に「自然発生する」ソフトリブートと壁紙変更の主な原因 io デーモ...

7.8CVSS0.00789EPSS
SaveExploits89References1
Kitploit
Kitploit
added 2026/09/10 1:42 a.m.10 views

pixel-ksu-root

pixel-ksu-root Root a stock, locked-bootloader Google Pixel from an unprivileged adb shell, using a kernel CVE — no unlock, no flash, no vendor help. A userspace-reachable CVE gives a short-lived kernel read/write primitive, which late-loads a KernelSU module kernelsu.ko into the running GKI...

8.8CVSS6.8AI score0.93235EPSS
SaveExploits124References23
Kitploit
Kitploit
added 2026/09/09 3:44 a.m.7 views

root-s24-e1s

Root S24 e1s / S921BXXSDCZB2 Per-boot local root on Galaxy S24 SM-S921B firmware S921BXXSDCZB2 kernel 6.1.138-android14-11, then late-load KernelSU Next so com.rifsxd.ksunext reports Working LKM. Not affiliated with Root My Galaxy. No GitHub payload feed, no multi-device catalog. One firmware,...

7.8CVSS7.2AI score0.00789EPSS
SaveExploits89References4
Kitploit
Kitploit
added 2026/09/09 2:47 a.m.13 views

ghostlock-cve-2026-43499

CVE-2026-43499 GhostLock — ARM32 Kernel Privilege Escalation Research Linux kernel futex PI rtmutex Use-After-Free vulnerability research and exploit development targeting Huawei Watch 4 Pro MDS-AL00 , Snapdragon SW5100, armv7l, kernel 5.4.210. Vulnerability removewaiter in kernel/locking/rtmutex...

7.8CVSS6.9AI score0.00789EPSS
SaveExploits89
Kitploit
Kitploit
added 2026/09/08 9:36 p.m.7 views

ghostlock-cve-2026-43499-4.19-k40

GhostLock — CVE-2026-43499 PoC Qualcomm 4.19 kernel Local privilege escalation exploiting CVE-2026-43499 — an rtmutex removewaiter bug that leaves a struct rtmutexwaiter dangling on the waiter's kernel stack kernel/locking/rtmutex.c, CWE-416 use-after-free. Adapted from NebuSec/CyberMeowfia...

7.8CVSS7.4AI score0.00789EPSS
SaveExploits89References1
Kitploit
Kitploit
added 2026/09/08 3:30 p.m.4 views

ghostlock-k419-adapter

GhostLock — OnePlus Locked Bootloader Jailbreak Kernel exploit for OnePlus/OPPO/realme devices with locked bootloader. Achieves root + KernelSU installation without unlocking bootloader or modifying boot image. Runtime auto-detection of kernel version with multi-device offset table. Vulnerability...

7.8CVSS7.2AI score0.00789EPSS
SaveExploits89
Kitploit
Kitploit
added 2026/09/08 2:47 p.m.10 views

K50G-POCOF4GT-CVE-2026-43499-PoC

Redmi K50 Gaming ingres — CVE-2026-43499 GhostLock 临时 Root PoC 免解锁 BL 一键临时 Root 。利用 GhostLock(CVE-2026-43499, futex PI Use-After-Free) 本地提权链拿到 root 锚点,随后通过 KernelSU 3.3.0 late-load 方式把 kernelsu 模块挂载进运行中的内核,配合 KSU 模块保持 SELinux Permissive 并修复网络。 目标设备: Redmi K50G / POCO F4 GT —— 代号 ingres, SoC SM845...

7.8CVSS7.4AI score0.00789EPSS
SaveExploits89
Rows per page
Query Builder