Website: nebusec.ai · Twitter @nebusecurity · Bug list (1000+)
- Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon
[Chrome V8] 📖 Writeup · 🐦 Twitter - Route of Root: Bring a "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF
[Linux Kernel] 📖 Writeup · 🐦 Twitter · 🔗 Source code - IonStack part III: Rooting Android 17 with GhostLock
[Linux Kernel] 📖 Writeup · 🐦 Twitter · 🔗 Source code - IonStack part I: Unsound IonBanana Peel in Ion Compiler, Slipping Through Firefox's SpiderMonkey JIT
[Firefox SpiderMonkey] 📖 Writeup · 🐦 Twitter · 🔗 Source code - IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years
[Linux Kernel] 📖 Writeup · 🐦 Twitter · 🔗 Source code - Longinus: 2 Boundaries in One Bug, Piercing Chrome's Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307
[Chrome V8] 📖 Writeup · 🐦 Twitter - Nginx-QuicBurst: First public Nginx RCE on a generic config with an ASLR bypass, CVE-2026-42530
[Nginx] 🐦 Twitter · 🔗 Source code - Nginx-PoolSlip: First public Nginx RCE with an ASLR bypass, CVE-2026-9256
[Nginx] 🐦 Twitter · 🔗 Source code - How an Omitted Write Barrier in V8 Turns Into RCE in Chrome: CVE-2026-5865
[Chrome V8] 📖 Writeup · 🐦 Twitter · 🔗 Source code - From a Netfilter Bug to kernelCTF: Exploiting CVE-2026-23274 in the Linux Kernel and winning a $10,500 Bounty
[Linux Kernel] 📖 Writeup · 🐦 Twitter · 🔗 Source code
- CVE-2026-64560: LPE on Linux and Android · 🔗 Source code
- CVE-2026-43074: LPE on Linux and Android · 🔗 Source code
CVE-2026-31678: Linux Kernel LPE 🔗 Source code for Fedora 44 (6.19.10-300) CVE-2026-43042: Linux Kernel LPE 🔗 Source code for Debian 13 (6.12.101) CVE-2026-52912: Linux Kernel LPE 🔗 Source code for Fedora 44 (6.19.10-300) CVE-2026-52923: Linux Kernel LPE 🔗 Source code for RHEL 10 (6.12.0-211.7.3.el10_2) CVE-2026-52929: Linux Kernel LPE 🔗 Source code for Ubuntu 26.04 (7.0.0-28) CVE-2026-52933: Linux Kernel LPE 🔗 Source code for Fedora 44 (6.19.10-300) CVE-2026-68162: Linux Kernel LPE 🔗 Source code for Ubuntu 26.04 (7.0.0-28) CVE-2026-72137: Linux Kernel LPE 🔗 Source code for ubuntu 26.04 (7.0.0-28) CVE-2026-72255: Linux Kernel LPE 🔗 Source code for Ubuntu 26.04 (7.0.0-28) CVE-2026-74480: Linux Kernel LPE 🔗 Source code for RHEL 10 (6.12.0-211.7.3.el10_2) CVE-2026-74581: Linux Kernel LPE 🔗 Source code for Debian 13 (6.12.101) CVE-2026-80714: Linux Kernel LPE 🔗 Source code for Debian 13 (6.12.101)