1/ A DoS exploit demo for CVE-2024-49112 by SafeBreach.... RCE exploit is probably coming soon. Patch!show more

Our team has just successfully reproduced the IngressNightmare vulnerability... (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asmshow more

Rooting Android: Exploiting Your GPU On Smartphone (CVE-2024-23380) by... Eugene Rodionov PoC exploit is not available for download. [slides] #BlackHatshow more

Exploit Demo & Analysis Article by 78ResearchLab(78ResearchLab) CVE-2026-20817 :... Windows Error Reporting(WER) Service Elevation of Privilege Vulnerability #CVE_2026_20817 #LPE #Windowsshow more

We've had a renderer RCE -> UXSS exploit on... Samsung phones since last November, in collaboration with Crusaders of Rust. Full writeup coming next week.show more

Today’s exploit is from a ipv6 UAF, introduced in... Nov 2021, fixed on upstream in Aug 2026. Discovered and exploit by NebuSec security pipeline. Exploit in our GitHub:show more

My very first blog post is live: During research,... I've run into and documented a simple universal SQLite Injection RCE trick. Enjoy! N-day Analysis about Synology Beestation RCE (CVE-2024-50629~50631) by legendary DEVCORE 🎃 🍊 Thanks to Pumpkin 🎃 Orange Tsai 🍊 for original finding and allowing to post, and to Ryan Emmons for the invaluable references 🔥 Enjoy the Demo! PoC:show more

Today's exploit is for the latest Fedora 44, a... UAF in netfilter, CVE-2026-52912. It was introduced in Mar 2016 and fixed upstream in May 2026. Discovered and exploited by the NebuSec security pipeline. (RANDOM_KMALLOC_CACHES + SELinux) Exp source code:show more

Hot off the press from watchTowr Labs member SinSinology,... with a nice side of silent patching from Veeam 😉 details to come later (CVE-2024-40711 and friends..). Special thanks to Soroush Dalili for his help with this exploit!show more

qwerty and I exploited a VSock 1-day in Google... kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04show more

RIP for all 6 entries. The last-minute patch turned... out quite solid. So I decided to give my exploit a proper goodbye. Enjoy!show more

Exim 4.99.3 is out, patching CVE-2026-45185, a critical RCE... found by XBOW! Check out our post linked in the reply; I'll summarize some details in this thread.show more

my first fully original cartoon, rabbit patch is coming... soon!! heres a small snippet!show more

And this is how you train CyberKimi to find... the next chrome 0-day you start with unpatched n-days. So we caught a fresh V8 LLE aliasing bug and a SLICED-PARENT-FLIP race bug off the main-branch diff fix landed Sep 2, still live on every shipping Chrome stable today and we exploited them. Exploit weaponized autonomously in <24h No CVE published yet. This is a silent in the wild exploit that Chrome Stable isn't protected from. Stage 1 - Bug 554421904 stage-1 (deterministic LLE forge) Stage 2 - cage escape prep: compose the caged RW into sandbox-wide RW (forge a BigUint64Array external pointer) and leak the binary base through the native side - ASLR done, at runtime, no baked offsets. Stage 3 - PC control: a RegExp calling-convention desync lands the CPU on a string we fully control From there: JOP chain living inside the subject string → tail-call system(). Calc pops. The special harness that we built: patch-diff watcher mining every V8 security fix within hours → variant analysis → autonomous weaponization → demo The 24h patch-to-exploit buffer keeps shrinking. 🐺show more

🚨💣 BREAKING PS5 SCENE NEWS 💣🚨 The exploit by... Gezine is now WORKING on PS5 Firmware 13.20 😳🔥 This could change EVERYTHING… The door is opening again for future jailbreak progress 👀 ⚠️ Remember: 👉 DO NOT UPDATE if you're on lower firmware 👉 Every exploit brings us closer to a full HEN The scene is MORE ALIVE than ever 🚀show more

In its greed and ignorance, the human mind invents... cruel ways to exploit defenseless animals. Soon there will be #MothersDay. This is not how #mothers , those precious givers of life, should be celebrated. This is a nightmare, an injustice..#GoVegan &amp; #StayVegan for the #animalsshow more

🎥 | SZA announces something new is coming out... soon at the 2024 TDE Christmas Concert and Toy Drive “a little new something coming out very soon”show more