Original research and non-destructive PoC for a pre-auth stack buffer overflow via unbounded sscanf scanset in the Netis NC63 ipFilterList handler
Original research and non-destructive PoC for a pre-auth Base64-decoded password stack buffer overflow in Netis NC63 login.cgi
Oracle OID LDAP Server Privileges Management Exploit
CVE-2026-73072 - Draft or TODO
4gaBoards < 3.3.9 - User Information Disclosure
GhostLock CVE-2026-43499 research for Galaxy S26 (SM-S942U1/m1q): SELinux Permissive achieved, KASLR + tracefs port, uid=0 boundary documented
GhostLock (CVE-2026-43499) adaptation for non-Android Linux 6.x ARM64
尝试移植CVE-2026-43499提权漏洞到HW P20Pro上
Proof of Concept for CVE-2026-19598 affecting Pods <= 3.3.9.
EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization.
CVE-2026-18504, CVE-2026-16732 - Draft or TODO
PoC for CVE-2025-62593: unauthenticated RCE in Ray (CISA KEV). Stdlib-only Python.
CVE-2026-43499 (GhostLock) — Linux kernel futex PI rt_mutex UAF ARM32 privilege escalation research targeting Huawei Watch 4 Pro (kernel 5.4.210)
CVE-2026-14669 - PostgreSQL to_char() timezone abbreviation heap buffer overflow PoC; for authorized security testing
Windows Defender 0day vulnerability CVE-2026-69414 ShieldBreak
CVE-2026-65400 - Draft or TODO
TP-Link Archer BE800 V1 — Parental Control LAN RCE