[POC] CVE-2026-43499 — ghostlock-skeleton-v2Aug 11, 2026
pocexploitCVE-2026-43499
CVE-2026-43499 GhostLock APK 骨架 — 从零开始，仅空项目编译验证
CVE-2026-43499 GhostLock APK 骨架 — 仅验证空项目能编译通过
GhostLock-X200 v1.0 - temporary root toolchain for vivo X200 (PD2415 / b57 kernel) based on CVE-2026-43499. For authorized security research only.
独立 APK：CVE-2026-43499 GhostLock 提权 + Shizuku shell 身份执行
mcp-server-kubernetes 3.8.x - Argument Injection
LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting
Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF
Ray 2.56.0 - Directory Traversal & Local File Inclusion
PraisonAI praisonaiagents 1.6.77 - Remote Code Execution
CVE-2026-64747 AGXG14P count-bitmask OOB trigger probe (A15/iOS 26.5.2)
CVE-2026-43499 (GhostLock) research on HUAWEI MatePad Pro 11 GOT-W29
CVE-2026-19264 - Critical unauthenticated path traversal to full instance takeover in Postiz (< 2.22.1). Technical writeup: decode-order bypass, JWT_SECRET escalation, and analysis of the upstream fix.
PoC repository for the blog post CopyEscape: Taking Over Docker Hosts with docker cp
KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499 (Note: Fork)
POC 4 CVE-2026-15038
CorgetGpsDget 2_3.2 - OS Command Injection
OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution
Joomla 2.9.99.4 - Unauthenticated Remote Code Execution