PoCs and exploits for CVEs discovered by VEGA. . Contribute to NebuSec/CyberMeowfia development by creating an account on GitHub.

Security team NebuSec published technical details and functional exploit code for a critical Linux flaw. This Linux CVE-2026-52924 flaw triggers a use-after-free memory state within the kernel network stack. Upstream maintainers initially classified the bug as a denial-of-service issue. However, the published proof-of-concept shows that attackers can obtain full root privileges. Why It Matters This vulnerability introduces severe system security risks for enterprise servers.

Security researchers at NebuSec have disclosed a Linux kernel vulnerability that allows an unprivileged local attacker to escalate privileges and potentially obtain root-level control.

A collection of local Linux vulnerabilities has acquired a second life as weaponized code engineered for total root compromise. NebuSec disclosed a series of critical kernel vulnerabilities and published fully functional exploits, meticulously verified across openSUSE, Debian, RHEL, Ubuntu, Fedora, Arch, and Android. The Severe Threat of ZcopyReaper The most exemplary flaw bears the moniker ZcopyReaper, officially designated as CVE-2026-43502. The Linux CNA assigned it a severe CVSS 3.1 score of 7.8.

ローカルで悪用可能なLinuxの脆弱性群が、root権限の完全な乗っ取りを狙った実戦投入可能なコードへと姿を変えました。NebuSecは一連の重大なカーネル脆弱性を公表するとともに、完全に機能するエクスプロイトを公開し、openSUSE、Debian、RHEL、Ubuntu、Fedora、Arch

TL;DR Security researchers at NebuSec identified a high-severity local privilege escalation flaw in the Linux kernel. The details of the vulnerability and the proof-of-concept exploit code have been publicly disclosed. Unprivileged local users can exploit this ZcopyReaper Linux vulnerability to gain full system control. Why It Matters This ZcopyReaper Linux vulnerability carries a CVSS score of 7.8. This high score represents a severe risk to multi-user environments.

Linux kernelのSCTPにUse-After-Free脆弱性CVE-2026-68162が公表され、NebuSecがUbuntu向けPoCを公開しました。CVSS 7.8で、低権限ローカルユーザーからroot権限昇格につながる可能性があります。影響kernel、修正版、Ubuntuの評価状況、PoC公開後の対応を整理します

PoCs and exploits for CVEs discovered by NebuSec. - NebuSec/CyberMeowfia

TL;DR A Linux kernel vulnerability, tracked as CVE-2026-68162, affects the SCTP networking code. It rates CVSS 7.8. Researchers at NebuSec have published proof-of-concept exploit code that escalates a local user to root on Ubuntu 26.04. Why It Matters Root access gives an attacker full control of a machine. This Linux kernel vulnerability turns a low-privileged local account into that outcome. With public exploit code now available, the risk to unpatched systems rises quickly.

PoCs and exploits for CVEs discovered by NebuSec. - NebuSec/CyberMeowfia

TL;DR A double-free flaw in the Linux kernel, tracked as CVE-2026-72137, carries a CVSS score of 9.8. The bug sits in the xfrm subsystem's nat_keepalive component and can lead to memory corruption. Researchers at NebuSec have publicly released proof-of-concept exploit code and a video showing root privilege escalation. Why It Matters The Linux kernel powers servers, cloud hosts, and containers worldwide.

CVE-2026-10702 is a miscompilation bug in Firefox's SpiderMonkey Ion/Warp JIT. The MObjectToIterator instruction produced by scalar-replacing Object.keys() declares a load-only alias set, but it can actually allocate a fresh property buffer. Global value numbering trusts that model and reuses a now-dangling slots pointer, yielding a use-after-free that is escalated into addrof/fakeobj, a fake Uint8Array, and full arbitrary read/write in the renderer.