CVE-2021-28663

CVE-2021-28663 Una fuga PoC básica para CVE-2021-28663 Detalles internos de la vulnerabilidad de puerta trasera del kernel de Android Esta es una PoC básica para CVE-2021-28663. Un fallo de diseño en el controlador del kernel de GPU Mali para Android. 1. Crear un GPUVA y también hacer mmap para...

cve-2025-29927

CVE-2025-29927 CVE-2025-29927 漏洞 从 11.1.4 到 13.5.6 的所有 Next.js 版本，以及 14.x 中 14.2.25 之前的版本、15.x 中 15.2.3 之前的版本均受此漏洞影响。对于依赖中间件实现访问控制的应用程序来说，影响尤为严重，攻击者可以在无需认证的情况下获取对受保护资源的未授权访问。 漏洞机制 CVE-2025-29927 漏洞源于 Next.js 处理 x-middleware-subrequest 头部的设计缺陷。该头部最初是 Next.js 框架内部使用的，用于防止中间件无限执行循环。 当 Next.js...

ets5-password-recovery

ETS5 密码恢复工具 目录 简介 安装 系统要求 密码恢复如何工作？ 设计缺陷是如何发现的？ 如何降低风险？ 协调漏洞披露 许可证 更新日志 简介 您是否忘记了某个 ETS5 项目的密码，无法再访问 KNX 安装的配置？ETS5 密码恢复工具可让您检索存储在 ETS5 项目存储中的项目密码和其他机密。这是因为 ETS5 存在一个严重的设计缺陷，它使用硬编码的密码和盐值来加密项目信息（CVE-2021-36799）。 将加密秘密存储在源代码中是不明智的，因为它们可以通过逆向工程软件恢复，因此提供的保护比以明文形式存储信息好不了多少。这可能对 KNX...

CVE-2025-49844_POC

CVE-2025-49844POC POC de CVE-2025-49844 -h ver información de ayuda ··· Redis presenta una vulnerabilidad de ejecución remota de código en scripts Lua CVE-2025-49844. La causa principal de esta vulnerabilidad es un defecto de diseño en la interacción entre el motor de scripts Lua de Redis y la...

tech-seminar-React2Shell

React2Shell CVE-2025-55182 우리FISA 기술세미나 6기 - 3팀 React Server ComponentRSC의 설계 결함을 이용한 원격 코드 실행RCE 취약점, React2Shell 분석 및 연구 团队 成员| 角色| GitHub ---|---|--- 남인서| 资料调查, PPT制作, 演讲| @sene03 유승준| 资料调查, PPT制作, 演讲| @fluanceifi 이수현| 资料调查, PPT制作| @hyun793 김유정| 资料调查, PPT制作| @yujung23 目录 Contents 1...

CVE-2020-0096-StrandHogg2

此设计缺陷使攻击者可以在另一个应用程序的顶部显示其自己的活动（页面），从而可能使用户迷失自己的私人数据。该漏洞被称为StrandHogg 2.0，最近由挪威安全公司Promon披露。 范围：理论上是全版本 android10测试失败了，测试8.0.1测试成功 验证步骤： 修改代码为目标app的包名和导出的activity 启动目标app的目标activity 启动测试app 在启动目标app发现劫持成功 LINKS https://source.android.com/security/bulletin/2020-05-01...

POC-2020-8558

Resumen CVE-2020-8558 es una vulnerabilidad de Kubernetes que fue publicada porque kube-proxy inesperadamente hace que los servicios del host vinculados a localhost estén disponibles para otros en la red. Pongo énfasis en inesperadamente porque esta vulnerabilidad se debe a un defecto de diseño...

vulnerabilities in Adobe Campaign Classic

Adobe has identified several vulnerabilities in Adobe Campaign Classic. These vulnerabilities include Server-Side Request Forgery SSRF, which allows privilege escalation without any user interaction; incorrect handling of special elements in the template engine, resulting in the execution of...

CVE-2026-64151: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGESIZE in the pgsizebitmap Sashiko pointed out that the driver could drop PAGESIZE from the pgsizebitmap. That is technically allowed but nothing does it, and such an iommudomain would not be used wit...

CVE-2026-42085

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, OpenC3 COSMOS contains a design flaw in the savetoolconfig function that allows saving tool configuration files at arbitrary locations...

CVE-2026-42085

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, OpenC3 COSMOS contains a design flaw in the savetoolconfig function that allows saving tool configuration files at arbitrary locations...

CVE-2025-66286

An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests. Applications expect to use the WebPage::send-request signal handler to approve or reject all network requests. However, certain types of HTTP request...

CVE-2025-66286

An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests. Applications expect to use the WebPage::send-request signal handler to approve or reject all network requests. However, certain types of HTTP request...

PT-2026-36665

Summary The OpenC3 password change functionality allows a user to change their password without providing the old password, by accepting a valid session token instead. In assumed breach scenarios, this behaviour can be exploited by an attacker who has already obtained a valid session token, to ga...

EUVD-2026-17585

The MS27102A Remote Spectrum Monitor is vulnerable to an authentication bypass that allows unauthorized users to access and manipulate its management interface. Because the device provides no mechanism to enable or configure authentication, the issue is inherent to its design rather than a...

CVE-2026-3356

The CVE-2026-3356 entry concerns the MS27102A Remote Spectrum Monitor, a device that exposes an authentication bypass vulnerability. The providedConnected documents (Red Hat, ENISA EUVD, NVD/NVD-related, CISA ICS advisory, AttackersKB, CVE listing, and PT-Security) consistently describe a flaw in...

CVE-2026-3356 Missing Authentication for Critical Function vulnerability in Anritsu Remote Spectrum Monitor

The MS27102A Remote Spectrum Monitor is vulnerable to an authentication bypass that allows unauthorized users to access and manipulate its management interface. Because the device provides no mechanism to enable or configure authentication, the issue is inherent to its design rather than a...

CVE-2026-30310

In its design for automatic terminal command execution, Sixth offers two options: Execute safe commands and Execute all commands. The description for the former states that commands determined by the model to be safe will be automatically executed, whereas if the model judges a command to be...

Sixth 安全漏洞

Sixth is an artificial intelligence code assistant developed by the Nigerian company Sixth. There is a security vulnerability in Sixth, which stems from its design, making it susceptible to prompt injection attacks, potentially leading to arbitrary command execution...

NVIDIA Isaac Launchable Arbitrary Code Execution Vulnerability

NVIDIA Isaac Launchable is a one-click deployment GPU development environment designed to simplify the AI development process and accelerate experimentation and deployment. NVIDIA Isaac Launchable suffers from a security vulnerability that stems from improper design and can be exploited by remote...