byd-dolphin-hacking

🚗 BYD Dolphin Head Unit — Research & Reverse Engineering Reverse engineering, documentation, and tooling for the BYD Dolphin 25/26 infotainment system DiLink 3, Android 10. Everything here was discovered through ADB exploration, APK decompilation, and CAN bus probing — no proprietary documentatio...

Security update for dolphin (important)

openSUSE security update: security update for dolphin ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22257-1 Rating: important References: bsc1285432 Cross-References: CVE-2026-110236 Affected Products: openSUSE Leap 16.0...

OPENSUSE-SU-2026:22257-1 Security update for dolphin

This update for dolphin fixes the following issues: Changes in dolphin: - CVE-2026-110236: OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the path placeholder boo1285432...

Fedora 43 : dolphin (2026-2add2065d0)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2add2065d0 advisory. - CVE-2026-110236 Arbitrary command execution via crafted folder name Tenable has extracted the preceding description block directly from the Fedora security...

[SECURITY] Fedora 45 Update: dolphin-plugins-26.08.2-1.fc45

Dolphin integration for revision control systems, Dropbox, and disk images...

Fedora 44 : dolphin (2026-85f07f4f1b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-85f07f4f1b advisory. - CVE-2026-110236 Arbitrary command execution via crafted folder name Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 46 : dolphin (2026-77dc014196)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-77dc014196 advisory. Automatic update for dolphin-26.08.2-2.fc46. Changelog Fri Oct 16 2026 Than Ngo - 26.08.2-2 - Fix rhbz2553643 - CVE-2026-110236 dolphin: dolphin: Arbitrary...

CVE-2026-110236

A flaw was found in KDE Dolphin. This vulnerability allows an attacker to achieve arbitrary command execution by supplying crafted folder names containing shell metacharacters. When a victim double-clicks the folder view background, the application fails to properly escape the path parameter,...

SUSE CVE-2026-110236

KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the path placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting i...

Linux Distros Unpatched Vulnerability : CVE-2026-110236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names...

DEBIAN-CVE-2026-110236

KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the path placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting i...

CVE-2026-110236

KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the path placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting i...

UBUNTU-CVE-2026-110236

KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the path placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting i...

CVE-2026-110236

KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the path placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting i...

CVE-2026-110236

KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the path placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting i...

CVE-2026-110236

KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the path placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting i...

CVE-2026-110236 KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder Name

KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the path placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting i...

CVE-2026-110236 KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder Name

KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the path placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting i...

EUVD-2026-99020

KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the path placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting i...

CVE-2026-110236

KDE Dolphin versions 24.08.0 through 26.08.2 are vulnerable to an OS command injection (CWE-78). The vulnerability exists because the application fails to properly neutralize shell metacharacters in directory names when they are substituted into a {path} placeholder. Specifically, an attacker can...