Website: nebusec.ai  ·  Twitter @nebusecurity  ·  Bug list (885+)

Latest research

• IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years
  [Linux Kernel] 📖 Writeup · 🐦 Twitter
• Longinus: 2 Boundaries in One Bug, Piercing Chrome's Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307
  [Chrome V8] 📖 Writeup · 🐦 Twitter
• How an Omitted Write Barrier in V8 Turns Into RCE in Chrome: CVE-2026-5865
  [Chrome V8] 📖 Writeup · 🐦 Twitter
• From a Netfilter Bug to kernelCTF: Exploiting CVE-2026-23274 in the Linux Kernel and winning a $10500 Bounty
  [Linux Kernel] 📖 Writeup · 🐦 Twitter