110866 matches found
SUSE CVE-2026-15900
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware
Russian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy to trick Ukrainian targets into infecting their own machines with data-stealing malware. According to the Computer Emergency Response Team of Ukraine CERT-UA, the activity has been attributed to...
oxo v2.9.3
OXO Scan Orchestration Engine OXO is a security scanning framework built for modularity, scalability, and simplicity. OXO Engine combines specialized tools to work cohesively to find vulnerabilities and perform actions like recon, enumeration, and fingerprinting. Documentation Agents Store CLI...
PT-2026-61058
Name of the Vulnerable Software and Affected Versions SJCAM AllWinner Tech SJ4000-Air versions prior to 1.4C Whitelabel based versions prior to 1.4C Description An issue allows an attacker to execute arbitrary code by using a specially crafted FEX file. Recommendations At the moment, there is no...
PT-2026-61659
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.128 Description A use after free issue in the GPU component allows a remote attacker to potentially perform a sandbox escape by inducing the user to visit a crafted HTML page. A use after...
CVE-2026-57848
Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component reachable to any process on the device via the android.intent.action.SEND intent and accepts the file to share as a URI supplied through the android.intent.extra.STREAM extra. The activity does not validate or filte...
CVE-2026-57848 Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validation
Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component reachable to any process on the device via the android.intent.action.SEND intent and accepts the file to share as a URI supplied through the android.intent.extra.STREAM extra. The activity does not validate or filte...
EUVD-2026-45395
Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component reachable to any process on the device via the android.intent.action.SEND intent and accepts the file to share as a URI supplied through the android.intent.extra.STREAM extra. The activity does not validate or filte...
CVE-2026-57848
Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component reachable to any process on the device via the android.intent.action.SEND intent and accepts the file to share as a URI supplied through the android.intent.extra.STREAM extra. The activity does not validate or filte...
CVE-2026-57848
CVE-2026-57848 concerns Stoat for Android where the exported ShareTargetActivity does not validate the incoming android.intent.extra.STREAM URI before using it as the outgoing attachment. An attacker able to invoke intents can supply a file:// URI pointing to the app’s internal storage (e.g., dat...
CVE-2026-57848 Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validation
Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component reachable to any process on the device via the android.intent.action.SEND intent and accepts the file to share as a URI supplied through the android.intent.extra.STREAM extra. The activity does not validate or filte...
Exploit for Use After Free in Linux Linux_Kernel
smt878u-ionstack-poc Pure-C, host-assisted re-root proof of c...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock — OnePlus Kernel exploit targeting locked-bootloade...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock SELinux Disabler Write-1-only extraction of JoinCh...
share-poc-XRing-O1
CVE-2026-43499 GhostLock – XRing O1 Exploit Research Targ...
Exploit for Missing Release of Memory after Effective Lifetime in Linux Linux_Kernel
badepoll-selinux-disabler Standalone extraction of the SELinu...
Exploit for Missing Release of Memory after Effective Lifetime in Linux Linux_Kernel
android-selinux-disabler Standalone extraction of the SELinux...
PT-2026-60984
Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component reachable to any process on the device via the android.intent.action.SEND intent and accepts the file to share as a URI supplied through the android.intent.extra.STREAM extra. The activity does not validate or filte...
Linux Distros Unpatched Vulnerability : CVE-2026-15900
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML...
CVE-2026-57848: Improper Export of Android Application Components
Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component reachable to any process on the device via the android.intent.action.SEND intent and accepts the file to share as a URI supplied through the android.intent.extra.STREAM extra. The activity does not validate or filte...