Some bugs & exploits found by me:

• hash_bind_uaf - Linux Kernel 3.8.0->4.3.6 AF_ALG hash_bind() exploit.
• php-bypass-bpftrace - POC to bypass bpftrace based webshell/execve prevention using FFI + prctl.
• getfree - Weaponized PHP 5.X -> 8.4.X extract double-free/uaf exploit.
• CVE-2025-49113 - RoundCube WebMail <= 1.6.10 post-auth object deserialization exploit PoC.