CyberMeowfia

Website: nebusec.ai  ·  Twitter @nebusecurity  ·  Bug list (1000+)

Latest research

• Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon

  [Chrome V8] Writeup · Twitter

• Route of Root: Bring a "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF

  [Linux Kernel] Writeup · Twitter · Source code

• IonStack part III: Rooting Android 17 with GhostLock

  [Linux Kernel] Writeup · Twitter · Source code

• IonStack part I: Unsound IonBanana Peel in Ion Compiler, Slipping Through Firefox's SpiderMonkey JIT

  [Firefox SpiderMonkey] Writeup · Twitter · Source code

• IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years

  [Linux Kernel] Writeup · Twitter · Source code

• Longinus: 2 Boundaries in One Bug, Piercing Chrome's Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307

  [Chrome V8] Writeup · Twitter

• Nginx-QuicBurst: First public Nginx RCE on a generic config with an ASLR bypass, CVE-2026-42530

  [Nginx] Twitter · Source code

• Nginx-PoolSlip: First public Nginx RCE with an ASLR bypass, CVE-2026-9256

  [Nginx] Twitter · Source code

• How an Omitted Write Barrier in V8 Turns Into RCE in Chrome: CVE-2026-5865

  [Chrome V8] Writeup · Twitter · Source code

• From a Netfilter Bug to kernelCTF: Exploiting CVE-2026-23274 in the Linux Kernel and winning a $10,500 Bounty

  [Linux Kernel] Writeup · Twitter · Source code

N-day research

• CVE-2026-64560: LPE on Linux and Android · Source code
• CVE-2026-43074: LPE on Linux and Android · Source code

Other security research

CVE-2026-31678: Linux Kernel LPE Source code for Fedora 44 (6.19.10-300) CVE-2026-43042: Linux Kernel LPE Source code for Debian 13 (6.12.101) CVE-2026-52912: Linux Kernel LPE Source code for Fedora 44 (6.19.10-300) CVE-2026-52923: Linux Kernel LPE Source code for RHEL 10 (6.12.0-211.7.3.el10_2) CVE-2026-52929: Linux Kernel LPE Source code for Ubuntu 26.04 (7.0.0-28) CVE-2026-52933: Linux Kernel LPE Source code for Fedora 44 (6.19.10-300) CVE-2026-68162: Linux Kernel LPE Source code for Ubuntu 26.04 (7.0.0-28) CVE-2026-72137: Linux Kernel LPE Source code for ubuntu 26.04 (7.0.0-28) CVE-2026-72255: Linux Kernel LPE Source code for Ubuntu 26.04 (7.0.0-28) CVE-2026-74480: Linux Kernel LPE Source code for RHEL 10 (6.12.0-211.7.3.el10_2) CVE-2026-74581: Linux Kernel LPE Source code for Debian 13 (6.12.101) CVE-2026-80714: Linux Kernel LPE Source code for Debian 13 (6.12.101)