[POC] CVE-2026-9198 — CVE-2026-9198Aug 11, 2026
pocexploitCVE-2026-9198
CVE-2026-43499 GhostLock APK 骨架 — 从零开始，仅空项目编译验证
CVE-2026-43499 GhostLock APK 骨架 — 仅验证空项目能编译通过
GhostLock-X200 v1.0 - temporary root toolchain for vivo X200 (PD2415 / b57 kernel) based on CVE-2026-43499. For authorized security research only.
独立 APK：CVE-2026-43499 GhostLock 提权 + Shizuku shell 身份执行
Community-maintained fork of image-size with fixes for CVE-2025-71329 and CVE-2025-71330
mcp-server-kubernetes 3.8.x - Argument Injection
LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting
Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF
Ray 2.56.0 - Directory Traversal & Local File Inclusion
PraisonAI praisonaiagents 1.6.77 - Remote Code Execution
CVE-2026-64747 AGXG14P count-bitmask OOB trigger probe (A15/iOS 26.5.2)
CVE-2026-43499 (GhostLock) research on HUAWEI MatePad Pro 11 GOT-W29
CVE-2026-19264 - Critical unauthenticated path traversal to full instance takeover in Postiz (< 2.22.1). Technical writeup: decode-order bypass, JWT_SECRET escalation, and analysis of the upstream fix.
PoC for CVE-2025-3248: unauthenticated RCE in Langflow < 1.3.0 via /api/v1/validate/code.
PoC repository for the blog post CopyEscape: Taking Over Docker Hosts with docker cp
KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499 (Note: Fork)
POC 4 CVE-2026-15038