CVE-2024-23700

PoC pour CVE-2024-23700, permettant d'obtenir silencieusement les permissions de lire/écrire les contacts, SMS, calendrier, journal d'appels et messagerie vocale, de passer des appels sortants ou de répondre aux appels entrants, de manipuler les paramètres d'appel, d'accéder et contrôler les...

PoC

PoC Репозиторий с PoC-эксплойтами и инструментами. BMCRSCDRCE Эксплойт для неаутентифицированного удалённого выполнения команд в агенте RSCD от BMC Server Automation. Эксплойт работает против серверов, затронутых CVE-2016-1542 обнаруживается с помощью Nessus. Теперь это модуль Metasploit, см...

Juniper-exploit-CVE-2023-36845

CVE-2023-36845 Description CVE-2023-36845 représente une vulnérabilité notable de manipulation de variables d'environnement PHP qui impacte les pare-feux Juniper SRX et les commutateurs EX. Bien que Juniper ait classé cette vulnérabilité comme étant de sévérité moyenne, dans cet article, nous...

CVE-2024-23700

CVE-2024-23700 - Android Companion Device 권한 상승 PoC 이 프로젝트는 Android의 Companion Device 메커니즘과 관련된 권한 상승 취약점인 CVE-2024-23700을 시연합니다. PoC는 취약한 환경에서 앱이 일반적인 권한 부여 상호 작용을 거치지 않고 일부 민감한 권한을 얻기 위해 Companion Device 연결 흐름을 악용할 수 있음을 보여줍니다. 이 저장소의 문서와 소스 코드는 학습, 보안 분석 및 허가된 환경에서의 테스트 목적으로만 사용됩니다. 합법적인 테스트 범...

CVE-2026-76413: Improper Restriction of Security Token Assignment

A vulnerability in Cisco Adaptive Security Device Manager ASDM single sign-on SSO handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An...

Vulnerability Affecting Sentio Creator Extension 'Device Manager'

The Device Manager extension shipped with Sentio Creator is affected by CVE-2026-80469. Affected versions are pre-installed in Sentio Creator releases up to and including version 2026.2. As the Device Manager extension can be updated independently of Sentio Creator, SICK recommends applying the...

GO-2023-2095 vulnerabilities

Vulnerabilities for packages: kind, metrics-server, configmap-reload-fips, smarter-device-manager-fips, kubeflow-katib...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: trivy, dex, cloudnative-pg, dbmate, k8sgpt, grafana-agent-operator, opa, kubernetes-csi-external-provisioner, k3d, restic, kwok, temporal, certificate-transparency, kaniko, kube-rbac-proxy, dagger, guac, opentelemetry-collector-contrib, grpc-health-probe,...

CLEANSTART-2026-LW63559 Security fixes in smarter-device-manager 1.20.11-r2

Package smarter-device-manager version 1.20.11-r2 fixes 1 vulnerabilities: CVE-2026-46600...

CLEANSTART-2026-JJ69031 Security fixes in smarter-device-manager-fips 1.20.11-r1

Package smarter-device-manager-fips version 1.20.11-r1 fixes 3 vulnerabilities: CVE-2026-46600, CVE-2026-33814, ghsa-5cv4-jp36-h3mw...

CLEANSTART-2026-EJ83238 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33186, CVE-2026-33814, CVE-2026-39821, CVE-2026-39824, CVE-2026-42502, CVE-2026-42506 applied in versions: 1.1.2-r0

Multiple security vulnerabilities affect the smarter-device-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

EUVD-2026-34302

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, rabbitmq-messaging-topology-operator, local-path-provisioner, dbmate, karpenter, clickhouse-operator, malcontent, nodetaint, dataplaneapi, flux-helm-controller, aws-load-balancer-controller, fluxcd-kustomize-mutating-webhook,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: tigera-operator, dbmate, percona-server-mongodb-operator, aactl, kubernetes-csi-external-attacher, juicefs-csi-driver, cosign, kapp, rancher-system-upgrade-controller, secrets-store-csi-driver-provider-azure, lvm-driver, multus-cni, grpc-health-probe,...

Exploit for CVE-2024-23700

PoC for CVE-2024-23700, allowing silently obtain permissions to...

CLEANSTART-2026-AE87452 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.20.12-r0, 1.20.12-r1, 1.20.12-r2

Multiple security vulnerabilities affect the smarter-device-manager-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

Unspecified Vulnerability in Google Android (CNVD-2026-14652)

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android, which originates from a logic error in the onStart function of CompanionDeviceManagerService.java, which can be exploited by an attacker to cause a local elevation of...

CVE-2025-48654

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48654

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48654

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...