Curated security research, vulnerabilities, advisories and tools for practitioners.

#exploit-development

Security coverage tagged exploit-development.

1.

[CVE-2025-39964] How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail

research | 2026-09-24 00:00 | CVE-2025-39964 | starlabs.sg | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #linux-kernel

2.

Write Once, Shell Everywhere: Turning Arbitrary File Writes into RCE

research | 2026-08-07 00:00 | ethiack.com | Original ↗ | .md | #rce | #vulnerability-research | #attack-chains

3.

When AI Makes 0-Days Feel Like N-Days

research | 2026-07-27 00:00 | starlabs.sg | Original ↗ | .md | #ai-security | #zero-day | #vulnerability-research

4.

IonStack part III: Rooting Android 17 with GhostLock

vulnerability | High | 2026-07-15 00:00 | CVE-2026-43499 | nebusec.ai | Original ↗ | .md | #public-poc | #featured | #vulnerability-research

5.

Watching GPT-5.6 Sol Ultra Write a Chrome Exploit: Exploit Development as We Know It Is Dead

blog | 2026-07-14 00:00 | hacktron.ai | Original ↗ | .md | #v8 | #llm-benchmark | #exploit-development

6.

I handed the epoll UAF to an agent

blog | 2026-07-13 00:00 | CVE-2026-46242 | guysrd.github.io | Original ↗ | .md | #ai-security | #kernel-security | #linux

7.

Old Bug, Harder Rules : Exploiting CVE-2023-36802 Without the Usual Shortcuts

research | 2026-06-24 00:00 | CVE-2023-36802 | starlabs.sg | Original ↗ | .md | #vulnerability-research | #type-confusion | #exploit-development

8.

blog | 2026-05-10 00:00 | guysrd.github.io | Original ↗ | .md | #vulnerability-research | #memory-safety | #use-after-free

9.

I Let Claude Opus Write a Chrome Exploit: The Next Model (Mythos?) Won't Need My Help?

blog | 2026-04-15 00:00 | hacktron.ai | Original ↗ | .md | #discord | #v8 | #exploit-development

10.

[CVE-2026-0899] CHECK Removed, Context Confused, Checkmate Achieved

research | 2026-04-01 00:00 | CVE-2026-0899 | starlabs.sg | Original ↗ | .md | #vulnerability-research | #v8 | #chrome

11.

Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel

vulnerability | High | 2025-09-02 14:43 | CVE-2024-50264 | swarm.ptsecurity.com | Original ↗ | .md | #privilege-escalation | #use-after-free | #linux-kernel

12.

Buried in the Log. Exploiting a 20 years old NTFS Vulnerability

vulnerability | 2025-07-09 14:05 | CVE-2025-49689 | swarm.ptsecurity.com | Original ↗ | .md | #privilege-escalation | #windows | #ntfs

13.

Breaking Crypto with XBOW

blog | 2024-07-17 12:00 | xbow.com | Original ↗ | .md | #ai-security | #benchmark | #cryptography

14.

Building an Exploit for FortiGate Vulnerability CVE-2023-27997

vulnerability | 2023-10-27 00:00 | CVE-2023-27997 | bishopfox.com | Original ↗ | .md | #exploit-development | #heap-overflow | #fortinet

15.

A More Complete Exploit for Fortinet CVE-2022-42475

vulnerability | 2023-05-17 00:00 | CVE-2022-42475 | bishopfox.com | Original ↗ | .md | #rop | #exploit-development | #heap-overflow

16.

DOM based AngularJS sandbox escapes

research | 2022-08-16 09:18 | portswigger.net | Original ↗ | .md | #browser-security | #xss | #sandbox-escape

17.

A Kernel Hacker Meets Fuchsia OS

research | 2022-05-24 09:52 | swarm.ptsecurity.com | Original ↗ | .md | #rootkit | #exploit-development | #fuchsia

18.

Ruby Vulnerabilities: Exploiting Dangerous Open, Send and Deserialization Operations

vulnerability | 2022-05-17 00:00 | bishopfox.com | Original ↗ | .md | #rce | #ruby-on-rails | #ruby

19.

Creating an Exploit: SolarWinds Vulnerability CVE-2021-35211

vulnerability | 2022-01-13 00:00 | CVE-2021-35211 | bishopfox.com | Original ↗ | .md | #vulnerability | #solarwinds | #rop

20.

Vulnerability discovery in Java applications

vulnerability | 2021-06-23 00:00 | 0xpat.github.io | Original ↗ | .md | #java | #sql-injection | #owasp

21.

An iOS hacker tries Android

blog | 2020-12-21 00:00 | projectzero.google | Original ↗ | .md | #android | #ios | #exploit-development

22.

Hacker Spotlight: Interview with MrTuxRacer

blog | 2020-10-23 14:00 | hackerone.com | Original ↗ | .md | #bug-bounty | #interview | #hackerone

23.

[CVE-2020-9802] JITSploitation III: Subverting Control Flow

vulnerability | 2020-09-01 00:00 | CVE-2020-9802 | projectzero.google | Original ↗ | .md | #cve | #exploit-development | #project-zero

24.

[CVE-2020-6831] Exploiting Android Messengers with WebRTC: Part 2

vulnerability | 2020-08-05 00:00 | CVE-2020-6831 | projectzero.google | Original ↗ | .md | #android | #cve | #webrtc

25.

MMS Exploit Part 4: MMS Primer, Completing the ASLR Oracle

blog | 2020-08-04 00:00 | projectzero.google | Original ↗ | .md | #android | #exploit-development | #project-zero

26.

Exploiting Android Messengers with WebRTC: Part 1

blog | 2020-08-03 00:00 | projectzero.google | Original ↗ | .md | #android | #webrtc | #exploit-development

27.

One Byte to rule them all

blog | 2020-07-30 00:00 | projectzero.google | Original ↗ | .md | #research | #exploit-development | #project-zero

28.

MMS Exploit Part 3: Constructing the Memory Corruption Primitives

blog | 2020-07-28 00:00 | projectzero.google | Original ↗ | .md | #android | #exploit-development | #project-zero

29.

A survey of recent iOS kernel exploits

blog | 2020-06-11 00:00 | projectzero.google | Original ↗ | .md | #ios | #kernel | #survey

30.

Staying Ahead of Emerging Threats

vulnerability | 2020-03-05 00:00 | CVE-2019-19781 | bishopfox.com | Original ↗ | .md | #attack-surface | #citrix | #exploit-development