9014 matches found
CVE-2021-28663
CVE-2021-28663 Una semplice PoC leak per CVE-2021-28663 Interno della vulnerabilità backdoor del kernel Android Questa è una PoC di base per CVE-2021-28663. Un difetto di progettazione nel driver Mali GPU del kernel Android. 1. Crea una GPUVA e fai anche mmap su di essa per ottenere l'indirizzo...
tech-seminar-React2Shell
React2Shell CVE-2025-55182 Seminário técnico WooriFISA 6ª edição - Equipe 3: Análise e pesquisa da vulnerabilidade de execução remota de código RCE explorando a falha de design do React Server Component RSC, React2Shell Equipe...
CVE-2020-0096-StrandHogg2
Questo difetto di progettazione consente a un attaccante di visualizzare la propria attività pagina sopra un'altra applicazione, potenzialmente inducendo l'utente a perdere i propri dati privati. La vulnerabilità è chiamata StrandHogg 2.0 ed è stata recentemente divulgata dalla società di sicurez...
POC-2020-8558
Visão Geral A CVE-2020-8558 é uma vulnerabilidade do Kubernetes que foi divulgada porque o kube-proxy inesperadamente disponibiliza serviços do host vinculados a localhost para outros na rede. Eu enfatizo o "inesperadamente" porque essa vulnerabilidade é decorrente de uma falha de design descuido...
ets5-password-recovery
ETS5 Password Recovery Tool Sommario Introduzione Installazione Requisiti Come funziona il recupero della password? Come è stato scoperto il difetto di progettazione? Come si può mitigare il rischio? Divulgazione coordinata delle vulnerabilità Licenza Registro delle modifiche Introduzione Hai...
CVE-2025-49844_POC
CVE-2025-49844POC CVE-2025-49844 POC -h Hilfe anzeigen ··· Redis weist eine Schwachstelle zur Remote-Codeausführung über Lua-Skripte auf CVE-2025-49844. Die Ursache dieser Schwachstelle liegt im Kern in einem Designfehler in der Interaktion zwischen der Lua-Skript-Engine von Redis und der...
cve-2025-29927
CVE-2025-29927 Vulnerabilità CVE-2025-29927 Tutte le versioni di Next.js dalla 11.1.4 alla 13.5.6, le 14.x precedenti alla 14.2.25 e le 15.x precedenti alla 15.2.3 sono interessate da questa vulnerabilità. L'impatto è particolarmente significativo per le applicazioni che si affidano al middleware...
CVE-2026-42085
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, OpenC3 COSMOS contains a design flaw in the savetoolconfig function that allows saving tool configuration files at arbitrary locations...
CVE-2026-42085
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, OpenC3 COSMOS contains a design flaw in the savetoolconfig function that allows saving tool configuration files at arbitrary locations...
CVE-2025-66286
An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests. Applications expect to use the WebPage::send-request signal handler to approve or reject all network requests. However, certain types of HTTP request...
CVE-2025-66286
An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests. Applications expect to use the WebPage::send-request signal handler to approve or reject all network requests. However, certain types of HTTP request...
EUVD-2026-17585
The MS27102A Remote Spectrum Monitor is vulnerable to an authentication bypass that allows unauthorized users to access and manipulate its management interface. Because the device provides no mechanism to enable or configure authentication, the issue is inherent to its design rather than a...
CVE-2026-3356
The CVE-2026-3356 entry concerns the MS27102A Remote Spectrum Monitor, a device that exposes an authentication bypass vulnerability. The providedConnected documents (Red Hat, ENISA EUVD, NVD/NVD-related, CISA ICS advisory, AttackersKB, CVE listing, and PT-Security) consistently describe a flaw in...
CVE-2026-3356 Missing Authentication for Critical Function vulnerability in Anritsu Remote Spectrum Monitor
The MS27102A Remote Spectrum Monitor is vulnerable to an authentication bypass that allows unauthorized users to access and manipulate its management interface. Because the device provides no mechanism to enable or configure authentication, the issue is inherent to its design rather than a...
CVE-2026-30310
In its design for automatic terminal command execution, Sixth offers two options: Execute safe commands and Execute all commands. The description for the former states that commands determined by the model to be safe will be automatically executed, whereas if the model judges a command to be...
Sixth 安全漏洞
Sixth is an artificial intelligence code assistant developed by the Nigerian company Sixth. There is a security vulnerability in Sixth, which stems from its design, making it susceptible to prompt injection attacks, potentially leading to arbitrary command execution...
NVIDIA Isaac Launchable Arbitrary Code Execution Vulnerability
NVIDIA Isaac Launchable is a one-click deployment GPU development environment designed to simplify the AI development process and accelerate experimentation and deployment. NVIDIA Isaac Launchable suffers from a security vulnerability that stems from improper design and can be exploited by remote...
EUVD-2021-22935
Malware in sbrugna...