Website: nebusec.ai  ·  Twitter @nebusecurity  ·  Bug list (1000+)

Latest research

• Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon
  [Chrome V8] 📖 Writeup · 🐦 Twitter
• Route of Root: Bring a "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF
  [Linux Kernel] 📖 Writeup · 🐦 Twitter · 🔗 Source code
• IonStack part III: Rooting Android 17 with GhostLock
  [Linux Kernel] 📖 Writeup · 🐦 Twitter · 🔗 Source code
• IonStack part I: Unsound IonBanana Peel in Ion Compiler, Slipping Through Firefox's SpiderMonkey JIT
  [Firefox SpiderMonkey] 📖 Writeup · 🐦 Twitter · 🔗 Source code
• IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years
  [Linux Kernel] 📖 Writeup · 🐦 Twitter · 🔗 Source code
• Longinus: 2 Boundaries in One Bug, Piercing Chrome's Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307
  [Chrome V8] 📖 Writeup · 🐦 Twitter
• Nginx-QuicBurst: First public Nginx RCE on a generic config with an ASLR bypass, CVE-2026-42530
  [Nginx] 🐦 Twitter · 🔗 Source code
• Nginx-PoolSlip: First public Nginx RCE with an ASLR bypass, CVE-2026-9256
  [Nginx] 🐦 Twitter · 🔗 Source code
• How an Omitted Write Barrier in V8 Turns Into RCE in Chrome: CVE-2026-5865
  [Chrome V8] 📖 Writeup · 🐦 Twitter · 🔗 Source code
• From a Netfilter Bug to kernelCTF: Exploiting CVE-2026-23274 in the Linux Kernel and winning a $10,500 Bounty
  [Linux Kernel] 📖 Writeup · 🐦 Twitter · 🔗 Source code

N-day research

• CVE-2026-64560: LPE on Linux and Android · 🔗 Source code
• CVE-2026-43074: LPE on Linux and Android · 🔗 Source code

Other security research

CVE-2026-31678: Linux Kernel LPE 🔗 Source code for Fedora 44 (6.19.10-300) CVE-2026-43042: Linux Kernel LPE 🔗 Source code for Debian 13 (6.12.101) CVE-2026-52912: Linux Kernel LPE 🔗 Source code for Fedora 44 (6.19.10-300) CVE-2026-52923: Linux Kernel LPE 🔗 Source code for RHEL 10 (6.12.0-211.7.3.el10_2) CVE-2026-52929: Linux Kernel LPE 🔗 Source code for Ubuntu 26.04 (7.0.0-28) CVE-2026-52933: Linux Kernel LPE 🔗 Source code for Fedora 44 (6.19.10-300) CVE-2026-68162: Linux Kernel LPE 🔗 Source code for Ubuntu 26.04 (7.0.0-28) CVE-2026-72137: Linux Kernel LPE 🔗 Source code for ubuntu 26.04 (7.0.0-28) CVE-2026-72255: Linux Kernel LPE 🔗 Source code for Ubuntu 26.04 (7.0.0-28) CVE-2026-74480: Linux Kernel LPE 🔗 Source code for RHEL 10 (6.12.0-211.7.3.el10_2) CVE-2026-74581: Linux Kernel LPE 🔗 Source code for Debian 13 (6.12.101) CVE-2026-80714: Linux Kernel LPE 🔗 Source code for Debian 13 (6.12.101)