iqoo-temp-root

vivo/iQOO 임시 Root 툴박스 언락 불필요, 펌웨어 플래싱 불필요, 임시 root재부팅 시 해제. 핵심 원리: CVE-2026-43499futex PI UAF 커널 익스플로잇 + KernelSU 임시 로드. 지원 기종App 버전 기종| 기기 코드네임| 페이로드 ---|---|--- iQOO Z10 Turbo| z10t / iqooz10t / V2452A / pd2452| preloadz10t.so 156KB iQOO Z10 Turbo Pro| V2453A / pd2453| preloadneo11.so 162KB iQO...

CVE-2026-53613

A flaw was found in util-linux. When an /etc/fstab entry is configured with the user or users option, mount8 validates the target path before performing the mount syscall, creating a Time-of-Check-Time-of-Use TOCTOU window. A local unprivileged user with write access to an ancestor directory of t...

CVE-2026-55643 Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode

Snipe-IT is an IT asset/license management system. Prior to 8.6.3, a company-scoped user in FMCS floater mode can access users whose companyid is null because broad API queries and bulk web actions do not consistently apply isCurrentUserHasAccess. The /api/v1/users and /api/v1/users/id/licenses...

ghostlock-a17

GhostLock — CVE-2026-43499 на Samsung Galaxy A17 Полная цепочка эксплуатации user-to-root для CVE-2026-43499 «GhostLock» на Samsung Galaxy A17 SM-A175F под управлением Android 16 / GKI 6.12. Цепочка начинается с публичных примитивов GhostLock и завершается usermode helper, выполняющимся как:...

CVE-2025-6934

CVE-2025-6934 Автоэксплойт ⚡ Обзор CVE-2025-6934 — это PoC-эксплойт, нацеленный на WordPress-плагин: Opal Estate Pro ≤ 1.7.5. Данный эксплойт демонстрирует несанкционированное создание учётной записи администратора. Дисклеймер: Этот PoC предназначен только для образовательных целей. Не используйт...

CVE-2026-61302

creationtimestamp| type| source ---|---|--- 2026-08-19 17:52:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70822

creationtimestamp| type| source ---|---|--- 2026-08-19 17:51:23+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70746

creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:17+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71150

creationtimestamp| type| source ---|---|--- 2026-08-19 17:48:35+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70674

creationtimestamp| type| source ---|---|--- 2026-08-19 17:22:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

MINI-VX3C-F32V-GJ35

Bulletin has no description...

CVE-2026-60961

creationtimestamp| type| source ---|---|--- 2026-08-19 17:15:56+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

MINI-6255-PM4G-WF8X

Bulletin has no description...

CVE-2026-70699

creationtimestamp| type| source ---|---|--- 2026-08-19 16:51:34+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70778

creationtimestamp| type| source ---|---|--- 2026-08-19 16:49:58+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-20320

A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...

EUVD-2026-62563

A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attacker with physical access to the USB port on an affected device to execute arbitrary code with root privileges. This vulnerability is due to insufficient boundary checks for specific data that is provided...

CVE-2026-20177 Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability

A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet IE 1000 Series Switches could allow an unauthenticated, remote attacker to cause the device manager, SSH, or API to become inaccessible.This vulnerability is due to insufficient protection against management...

MINI-FF5M-5Q28-2W6C

Bulletin has no description...

CVE-2026-76239

Stigmem before 0.9.0a11 fails to validate the deliveryaddress parameter when creating webhook subscriptions, allowing authenticated users to specify internal loopback and private network destinations. Attackers can trigger matching fact-change events to cause the Stigmem server to issue server-si...