Alexandre Borges

@alexandreborges.bsky.social

524 Followers 60 Following

Vulnerability Researcher | Exploit Developer (speaker 3x at DEF CON)

Fraggap (CVE-2026-53362) is a bug in the Linux UDPv6 corking path that allows a 15-byte OOB write into skb_shared_info.
Hunting Memory Leaks in bsnmpd with DTrace:
The work continues... a third vulnerability in just a few days, and like the other two, this one also affects iOS 26.5 and iOS 26.5.2. The challenge, as usual, centers on the next steps for exploitation.
Redis 8.6: Remote Code Execution via Stream PEL Use After Free:
Malwoverview 8.0.5 (Revolutions)
Dissecting and Exploiting Linux LPE Variant: DirtyClone (CVE-2026-43503)
BitLocker downgrade attacks
A Windows Kernel in a Browser Tab, Part I: Cold Boot, Fast Boot, and Four Megabyte
Unprivileged root via a use-after-free in DRM GEM change_handle (CVE-2026-46215):
Spiteful Fruit - AppleRAID Kernel Heap OOB Write:
Another vulnerability in iOS 26.5 with a clear and reproducible crash, registers control, primitive and PoC confirmed, and possibly a working exploit... who knows... ;)
Malwoverview 8.0.2
Striga: Lifting x86 to LLVM IR with Python:
GHSL-2026-140: Heap Buffer Write Overflow in 7-Zip (CVE-2026-48095)
Arbitrary Kernel Address Increment via NtQuerySystemInformation
FatGid+4: A four-byte type, an eight-byte stride, one root shell.
Kernel-Exploit-Dojo
How Kernel Anti-Cheats Work: A Deep Dive into Modern Game Protection
The Exploiting Reversing Series (ERS) currently features 945 pages of exploit development based on real-world targets: https://exploitreversing.com In the coming weeks, I will publish new articles covering exploration in areas such as Windows, Chrome, iOS/macOS, and hypervisors. #exploit #exploitation
Malwoverview v8.0 (codename: Revolutions)
Exploiting Reversing (ER) series: article 07 | Exploitation Techniques | CVE-2024-30085 (part 01)
TP-Link ER605 DDNS Pre-Auth RCE: Chaining CVE-2024-5242, CVE-2024-5243, CVE-2024-5244
Before Vegas: The “Red Hackers” Who Shaped China’s Cyber Ecosystem
Malwoverview 7.0
Phantom Grid
Achieving remote code execution in LangSmith Playground using unsafe template formatting
Dangling pointers, fragile memory – from an undisclosed vulnerability to a Pixel 9 Pro escalation
MongoBleed explained simply
godap: A complete TUI for LDAP
Microsoft ms-photos URI NTLM Leak
LANDFALL: New Commercial-Grade Android Spyware in Exploit Chain Targeting Samsung Devices