CVE-2021-28663

CVE-2021-28663 Un PoC de fuite basique pour CVE-2021-28663 détails internes de la vulnérabilité de porte dérobée du noyau Android Ceci est un PoC de base pour CVE-2021-28663. Une faille de conception dans le pilote Mali GPU Android Kernel Driver. 1. Créer un GPUVA et aussi faire mmap dessus afin...

cve-2025-29927

CVE-2025-29927 CVE-2025-29927 Vulnérabilité Toutes les versions de Next.js de 11.1.4 à 13.5.6, les versions 14.x antérieures à 14.2.25 et les versions 15.x antérieures à 15.2.3 sont concernées par cette vulnérabilité. L'impact est particulièrement significatif pour les applications qui s'appuient...

ets5-password-recovery

أداة استعادة كلمة مرور ETS5 جدول المحتويات مقدمة التثبيت المتطلبات كيف تعمل استعادة كلمة المرور؟ كيف تم اكتشاف العيب التصميمي؟ كيف يمكن تخفيف المخاطر؟ الإفصاح المنسق عن الثغرات الترخيص سجل التغييرات مقدمة هل نسيت كلمة المرور لأحد مشاريع ETS5 الخاصة بك ولم تعد قادرًا على الوصول إلى تكوين تثبيت KNX...

CVE-2025-49844_POC

CVE-2025-49844POC POC pour CVE-2025-49844 -h pour afficher les informations d'aide ··· Redis présente une vulnérabilité d'exécution de code à distance dans les scripts Lua CVE-2025-49844. La cause principale de cette vulnérabilité réside dans une faille de conception dans l'interaction entre le...

tech-seminar-React2Shell

React2Shell CVE-2025-55182 우리FISA 기술세미나 6기 - 3팀 React Server ComponentRSC의 설계 결함을 이용한 원격 코드 실행RCE 취약점, React2Shell 분석 및 연구 Équipe Membre| Rôle| GitHub ---|---|--- 남인서| Recherche documentaire, création de PPT, présentation| @sene03 유승준| Recherche documentaire, création de PPT, présentation|...

CVE-2020-0096-StrandHogg2

Cette faille de conception permet à un attaquant d'afficher ses propres activités pages par-dessus une autre application, ce qui peut amener les utilisateurs à perdre de vue leurs données privées. Cette vulnérabilité est connue sous le nom de StrandHogg 2.0 et a récemment été révélée par la socié...

POC-2020-8558

Aperçu La CVE-2020-8558 est une vulnérabilité de Kubernetes publiée parce que kube-proxy rend de manière inattendue les services liés à l'hôte local localhost accessibles aux autres machines du réseau. Je mets l'accent sur « de manière inattendue » parce que cette vulnérabilité provient d'un défa...

vulnerabilities in Adobe Campaign Classic

Adobe has identified several vulnerabilities in Adobe Campaign Classic. These vulnerabilities include Server-Side Request Forgery SSRF, which allows privilege escalation without any user interaction; incorrect handling of special elements in the template engine, resulting in the execution of...

CVE-2026-64151: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGESIZE in the pgsizebitmap Sashiko pointed out that the driver could drop PAGESIZE from the pgsizebitmap. That is technically allowed but nothing does it, and such an iommudomain would not be used wit...

CVE-2026-42085

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, OpenC3 COSMOS contains a design flaw in the savetoolconfig function that allows saving tool configuration files at arbitrary locations...

CVE-2026-42085

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, OpenC3 COSMOS contains a design flaw in the savetoolconfig function that allows saving tool configuration files at arbitrary locations...

CVE-2025-66286

An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests. Applications expect to use the WebPage::send-request signal handler to approve or reject all network requests. However, certain types of HTTP request...

CVE-2025-66286

An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests. Applications expect to use the WebPage::send-request signal handler to approve or reject all network requests. However, certain types of HTTP request...

PT-2026-36665

Summary The OpenC3 password change functionality allows a user to change their password without providing the old password, by accepting a valid session token instead. In assumed breach scenarios, this behaviour can be exploited by an attacker who has already obtained a valid session token, to ga...

EUVD-2026-17585

The MS27102A Remote Spectrum Monitor is vulnerable to an authentication bypass that allows unauthorized users to access and manipulate its management interface. Because the device provides no mechanism to enable or configure authentication, the issue is inherent to its design rather than a...

CVE-2026-3356 Missing Authentication for Critical Function vulnerability in Anritsu Remote Spectrum Monitor

The MS27102A Remote Spectrum Monitor is vulnerable to an authentication bypass that allows unauthorized users to access and manipulate its management interface. Because the device provides no mechanism to enable or configure authentication, the issue is inherent to its design rather than a...

CVE-2026-3356

The CVE-2026-3356 entry concerns the MS27102A Remote Spectrum Monitor, a device that exposes an authentication bypass vulnerability. The providedConnected documents (Red Hat, ENISA EUVD, NVD/NVD-related, CISA ICS advisory, AttackersKB, CVE listing, and PT-Security) consistently describe a flaw in...

CVE-2026-30310

In its design for automatic terminal command execution, Sixth offers two options: Execute safe commands and Execute all commands. The description for the former states that commands determined by the model to be safe will be automatically executed, whereas if the model judges a command to be...

Sixth 安全漏洞

Sixth is an artificial intelligence code assistant developed by the Nigerian company Sixth. There is a security vulnerability in Sixth, which stems from its design, making it susceptible to prompt injection attacks, potentially leading to arbitrary command execution...

NVIDIA Isaac Launchable Arbitrary Code Execution Vulnerability

NVIDIA Isaac Launchable is a one-click deployment GPU development environment designed to simplify the AI development process and accelerate experimentation and deployment. NVIDIA Isaac Launchable suffers from a security vulnerability that stems from improper design and can be exploited by remote...