AIX360

AI Explainability 360 v0.3.0 ✨ NEW: IBM Research has a new In-Context Explainability 360 ICX360 toolkit that extends explainability to LLMs , specifically in terms of the input given to the LLM. Please check it out! 🚀✨ The AI Explainability 360 toolkit is an open-source library that supports...

CVE-2026-38766

CVE-2026-38766 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via a kernel mode driver...

CVE-2026-38765

CVE-2026-38765 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

360WFP_Exploit

360WFPExploit A proof-of-concept PoC demonstrating potential abuse of the 360 Security WFP driver 360netmonx64wfp.sys interface, aimed at verifying the risk that IOCTL interfaces without caller authentication may be misused by third-party programs. This project is intended for security research a...

CVE-2019-0708-Check

360 RDP vulnerability non-destructive scanner: https://cert.360.cn/warning/detail?id=1caed77a5620fc7da993fea91c237ed5 GitHub project: https://github.com/hualy13/CVE-2019-0708-Check...

CVE-2019-0708Poc-BatchScanning

title: CVE-2019-0708 Batch Detection This batch detection is based on the public non-destructive detection tool from 360 0708detector.exe, with the following functions: 1. Single detection 2. Batch detection 双击0708detector-全自动批量版.exe即可使用！ Batch detection supports custom IP list to be scanned, and...

Cockpit Web Console < 360 - Remote Code Execution

Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH...

DsArk64

DsArk64 DsArk64.sys ships with 360 Total Security. WHQL-signed by Microsoft. LOLDrivers: magicsword-io/LOLDrivers308. CVE: Requested MITRE. Primitives Process kill ring 0 IOCTL 0x80863008, input: 4-byte raw PID Driver calls ZwOpenProcessALLACCESS + ZwTerminateProcess from kernel No encryption on...

bypass360mimikatz_x64

Method: Modify resources, add digital signature Extraction password: 6613kris清水川崎...

CVE-2017-15428

CVE-2017-15428 Information This is an exploit for the V8 vulnerability CVE-2017-15428, which was discovered in 2017 by Zhao Qixun @S0rryMybad of the Qihoo 360 Vulcan Team. I did not have any involvement in the discovery of this bug. This exploit was written as part of my final year thesis at...

Look-at-The-XNU-Through-A-Tube-CVE-2018-4242-Write-up-Translation-

Look at The XNU Through A Tube CVE-2018-4242 Write-up Zhuo Liang of Qihoo 360 Nirvan Team Contents 1 Introduction 1 1.1 CVE-2018-4242 . . . . . . . . . . . . . . . . . . . . . . . . . 1 2 The XNU Kernel 2 2.1 System Call . . . . . . . . . . . . . . . . . . . . . . . . . . 2 2.2 MIG...

CVE-2026-38764

CVE-2026-38764 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

CVE-2026-38763

CVE-2026-38763 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service in the kernel...

macOS Autodesk Fusion 360 <= 2705.1.30 Multiple Vulnerabilities (adsk-sa-2026-0019)

The version of Autodesk Fusion 360 installed on the remote macOS or Mac OS X host is less than or equal to 2705.1.30. It is, therefore, affected by multiple vulnerabilities: - A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command expose...

CVE-2026-121609

A vulnerability was identified in Qihoo 360 Whole Home Router M5 4.0.17.1566. This issue affects the function Home of the file /etc/init.d/mpt of the component Boot Script. The manipulation leads to hard-coded credentials. Remote exploitation of the attack is possible. The exploit is publicly...

CVE-2026-121608

A vulnerability was determined in Qihoo 360 D603-2, D600-2 and D606-6 up to 6.3.2. This vulnerability affects the function onpushmessage of the file /fs2/bin/iscm of the component Timezone Push Handler. Executing a manipulation of the argument tz can lead to os command injection. The attack may b...

CVE-2026-121607

A vulnerability was found in Qihoo 360 D603-2, D600-2, D606-6 and D706 up to 6.4.9. This affects the function testspeedcommand of the file /fs2/bin/iscm. Performing a manipulation of the argument host results in os command injection. The attack may be initiated remotely. The exploit has been made...

CVE-2026-121609 Qihoo 360 Whole Home Router M5 Boot Script mpt start hard-coded credentials

A vulnerability was identified in Qihoo 360 Whole Home Router M5 4.0.17.1566. This issue affects the function Home of the file /etc/init.d/mpt of the component Boot Script. The manipulation leads to hard-coded credentials. Remote exploitation of the attack is possible. The exploit is publicly...

CVE-2026-121609

A vulnerability exists in the Boot Script component of Qihoo 360 Whole Home Router M5 4.0.17.1566 . Specifically, the Home function within the file /etc/init.d/mpt is susceptible to manipulation that results in hard-coded credentials . This flaw allows for remote exploitation , and an exploit is ...

CVE-2026-121608

Qihoo 360 devices, specifically models D603-2 , D600-2 , and D606-6 running firmware versions up to 6.3.2 , are susceptible to an OS command injection vulnerability. The flaw exists within the Timezone Push Handler component, specifically in the on_push_message function of the /fs2/bin/iscm file....