8281 matches found
EUVD-2026-81610
vm2 before 3.11.6 fails to restrict access to os and dns builtins under the builtin: '' configuration, allowing sandbox code to read host process identity and network topology. Attackers can invoke dns.setServers to hijack the host process DNS resolver globally, redirecting all subsequent host DN...
CVE-2026-92960
vm2 (a Node.js sandboxing library) versions before 3.11.6 fail to restrict access to the os and dns builtins when configured with builtin: ['*']. This allows sandboxed code to read the host process identity and network topology . Critically, an attacker can invoke dns.setServers() to hijack the h...
CVE-2026-92960 vm2 before 3.11.6 Process-wide State Exposure via os and dns
vm2 before 3.11.6 fails to restrict access to os and dns builtins under the builtin: '' configuration, allowing sandbox code to read host process identity and network topology. Attackers can invoke dns.setServers to hijack the host process DNS resolver globally, redirecting all subsequent host DN...
MiniPlasma-Detection
MiniPlasma æ€åº CVE-2020-17103 cldflt.sys ã®ç«¶åç¶æ ãæªçšã㊠SYSTEM ã¢ã«ãŠã³ãã® windir ç°å¢å€æ°ãä¹ã£åããWER QueueReporting ã¹ã±ãžã¥ãŒã«ã¿ã¹ã¯ããªãã€ã¬ã¯ãããŠæ»æè å¶åŸ¡ã®ãã€ããªã SYSTEM ãšããŠå®è¡ããã Windows ããŒã«ã«ç¹æš©ææ Œãšã¯ã¹ããã€ã MiniPlasma ã® Sigma æ€åºã«ãŒã«ã CVE-2020-17103 㯠2020 幎㫠Google Project Zero ã® James Forshaw ã«ãã£ãŠå ±åãããMicrosoft ã«ãã£ãŠä¿®æ£ããããšãããŠããŸãã202...
needrestart-sudo-escalate-cve-2024-4890
CVE-2024-4890: needrestart Sudo æš©éææ Œ PoC å 責äºé ã©ãå°çšã®ç®¡çãããç°å¢ã§ã®ã¿äœ¿çšããŠãã ãããæç€ºçãªèš±å¯ãªãæ¬çªã·ã¹ãã ã§æªçšããªãã§ãã ããããã®PoCã¯æè²ç®çã®ã¿ã§ããèè ã¯èª€çšãäžæ£ã¢ã¯ã»ã¹ã«ã€ããŠäžå責任ãè² ããŸããã æŠèŠ CVE-2024-4890 ã¯ãneedrestartïŒããŒãžã§ã³ 3.8 以éïŒã«ãããé倧ãªè匱æ§ã§ãããææ Œããç¹æš©ã§ä»»æã®ã³ãŒãå®è¡ãå¯èœã«ããŸãããã®åé¡ã¯ãããã»ã¹ã¹ãã£ã³äžã®ç°å¢å€æ°ãšèšå®ãã¡ã€ã«ã®å®å šã§ãªãåŠçã«èµ·å ããŸãã å ·äœçã«ã¯ãsudo ä»ãã§å®è¡ããããšãneedrestart...
ghostlock-pfem10
GhostLock â PFEM10 OPPO Find X5 Pro PFEM10 åãã® CVE-2026-43499 IonStack ãšã¯ã¹ããã€ãã ã«ãŒãã« 5.10.236-android12-9-oãfutex CMPREQUEUEPI UAF â pi-tree æžã蟌ã¿ããªããã£ãã èªå·±è²¬ä»»ã§äœ¿çšããŠãã ãããããã㯠/ åèµ·åãçºçããå¯èœæ§ããããŸãããã¡ãŒã ãŠã§ã¢ãæŽæ°ããªãã§ãã ããã ãã«ã root@kitploit: ./build.sh requires Android NDK r28c ãã«ããã©ã¡ãŒã¿ã¯åºå®ã§ã -O1 / android26 ...
copy-fail-go
copy-fail-go Puerto en Go del PoC en Python de grenkoca para CVE-2026-31431 copy-fail. Esta versión compila a un binario completamente estático con cero dependencias en tiempo de ejecución: sin Python, sin pip, sin restricciones de versión de libc. Colócalo en cualquier objetivo Linux y ejecútalo...
CVE-2026-5281-CVE-2026-11057-fullchain
CVE-2026-5281+CVE-2026-11057 Android fullchain Device Pixel 7 Android 16 ARM64 Chromium version root@kitploit: commit 994c846bbd7a35241ba7c08158c13d66412a6993 HEAD - 146.0.7680.111, tag: 146.0.7680.111 Author: Roger McFarlane Date: Mon Mar 9 12:48:07 2026 -0700 Description Exploitation approach...
CVE-2026-3502---TrueConf-Client-Update-Hijacking-PoC
ð CVE-2026-3502 - TrueConf ã¯ã©ã€ã¢ã³ãæŽæ°ãã€ãžã£ãã¯ãšã¯ã¹ããã€ã â ïž èŠå ãã®ããŒã«ã¯æè²ç®çããã³èš±å¯ããããã¹ãå°çšã§ããæç€ºçãªèš±å¯ãªãã·ã¹ãã ã§äœ¿çšããªãã§ãã ããã ð 説æ CVE-2026-3502 ã®ãšã¯ã¹ããã€ã - TrueConf ã¯ã©ã€ã¢ã³ãïŒWindowsïŒã«ãããæŽåæ§æ€èšŒãªãã®æŽæ°è匱æ§ãããŒã«ã«ã® TrueConf ãµãŒããŒãå¶åŸ¡ããæ»æè ããæ£èŠã®æŽæ°ããã±ãŒãžãæªæã®ãããã®ã«çœ®ãæããæ¥ç¶äžã®ãã¹ãŠã®ã¯ã©ã€ã¢ã³ãã§ãªã¢ãŒãã³ãŒãå®è¡ãéæã§ããŸãã ð¯ åœ±é¿ æŽæ°ã³ã³ããã¹ãã§ã®ä»»æã®ã³ãŒãå®è¡ ïŒææ Œãããæš©éïŒ...
Kotaemon-CVE-2025-56526-56527-disclosure
Kotaemon CVE-2025-56526 ããã³ CVE-2025-56527 å ¬éé瀺 Kotaemon ã®æ å ±ããã«ã«ãããä¿ååã¯ãã¹ãµã€ãã¹ã¯ãªããã£ã³ã°ããlocalStorage ãžã®å¹³æèªèšŒæ å ±ã®ä¿åãšçµã¿åãããããšã§ãæªæãã PDF ã 1 åã¢ããããŒãããã ãã§å®å šãªã»ãã·ã§ã³äŸµå®³ãå¯èœã«ãªããŸãã ãšã°ãŒã¯ãã£ããµããªãŒ 圱é¿ãåãã補å / ããŒãžã§ã³ : Kotaemon = 0.11.0ïŒã³ããã 37cdc28 ãå«ãïŒ èåŒ±æ§ : CVE-2025-56526 â ãµãã¿ã€ãºãããŠããªã PDF ã³ã³ãã³ãæç»ã«ããä¿åå XSS...
djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id is the sole authorization capability (session hijack)
Impact SSE sessions were keyed solely by a client-chosen sessionid with no binding to the authenticated user â a control the WebSocket transport has but that was dropped on SSE. An attacker who learns or a victim who leaks a sessionid could connect to the message endpoint and dispatch event...
CVE-2026-61592
djust is a reactive server-side rendering library for Django providing Phoenix LiveView-style functionality with Rust-powered performance. Prior to version 1.0.7 , its SSE (Server-Sent Events) transport keyed sessions solely by a client-chosen session_id with no binding to the authenticated user ...
CVE-2026-61592 djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id is the sole authorization capability (session hijack)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, SSE sessions were keyed solely by a client-chosen sessionid with no binding to the authenticated user â a control the WebSocket transport has but that was dropped...
CVE-2026-61592 djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id is the sole authorization capability (session hijack)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, SSE sessions were keyed solely by a client-chosen sessionid with no binding to the authenticated user â a control the WebSocket transport has but that was dropped...
CVE-2026-20071
A vulnerability in the SSID bring-your-own-device BYOD onboarding workflow of Cisco ISE could allow an unauthenticated, adjacent attacker to hijack the onboarding session of another user and access protected 802.1X networks. This vulnerability is due to insufficient authentication checks that are...
CVE-2026-20071 ISE 802.1x Session Hijack Vulnerability
A vulnerability in the SSID bring-your-own-device BYOD onboarding workflow of Cisco ISE could allow an unauthenticated, adjacent attacker to hijack the onboarding session of another user and access protected 802.1X networks. This vulnerability is due to insufficient authentication checks that are...
CVE-2026-20071
Cisco ISE contains a session hijack vulnerability in its SSID bring-your-own-device (BYOD) onboarding workflow . The root cause is insufficient authentication checks performed while a user is being onboarded. An unauthenticated, adjacent attacker can exploit this by spoofing the legitimate user a...
cve-2026-32746-mitigation
CVE-2026-32746: é«åºŠãªLinuxãããã¯ãŒã¯ç·©åããŒã« ðš æè¡çå 責äºé CVE-2026-32746ã¯ãæè²ãã¢ã³ã¹ãã¬ãŒã·ã§ã³çšã®ä»®æ³çãªè匱æ§ã§ãã æ¬ããŒã«ã¯ãããŒãã§ã¯ãã¹ããŒã ãã·ããªãªã«å¯Ÿå¿ããŸããã¡ã¢ãªå®å šã§ãªãTelnetããŒã¢ã³ïŒtelnetdïŒãšæš©éææ Œã«ãããç«¶åç¶æ ãçµã¿åãããããªã¢ãŒãããã®ã«ãŒãåœä»€ãã€ã³ã¿ïŒIPïŒä¹ã£åãã«ã€ãªããã·ããªãªã§ãã ð æ©èœïŒv3.1 - æ¬çªã°ã¬ãŒãïŒ æ¬ããŒã«ã¯ã以äžã®æ©èœãåããã¢ãžã¥ãŒã«åŒã»ãã¥ãªãã£ãã¬ãŒã ã¯ãŒã¯ãžãšé²åããŸããã ð ã¢ãããã¯ããŒã«ããã¯ã·ã¹ãã : äºåãã©ã€ãç¶æ ãã£ããã£...
ksmbrace
ksmbrace ksmbd ïŒLinuxã«ãŒãã«ã®ã«ãŒãã«å SMB3ãµãŒããŒãfs/smb/server/ïŒã«ãããè匱æ§ç ç©¶ã§ããksmbdã®durableãã³ãã«ãšãã¹è§£æ±ºã®çµè·¯ã«ããããèªèšŒæžã¿æ»æè ãæªçšã§ããæ¬ é¥ãæ±ããŸãããã®ååã¯ããã®äžé£ã®ç ç©¶ã®ããŒãã§ããç«¶åç¶æ ïŒrace conditionïŒã«å ãã§ããŸãïŒæªå ¬éã®ãã€ãç¯å²ããã¯UAFãCVE-2026-64396ãd20d1c8ba576ã§ä¿®æ£æžã¿ãåç §ïŒã...
Hijack-service-binaries
Hijack-service-binaries çŸåšã®ãŠãŒã¶ãŒã倿Žå¯èœãªWindowsãµãŒãã¹ãã€ããªãç¹å®ããPowerShellã»ãã¥ãªãã£ç£æ»ããŒã«ã§ããç¹æš©ææ Œã®è¶³æãããšãªãå¯èœæ§ããããŸãã æŠèŠ ãã®ã¹ã¯ãªããã¯ããã¹ãŠã®WindowsãµãŒãã¹ïŒsystem32ããã³svchostãé€ãïŒãã¹ãã£ã³ããçŸåšã®ãŠãŒã¶ãŒããµãŒãã¹å®è¡ãã¡ã€ã«ã«å¯ŸããŠæžã蟌ã¿ã倿ŽããŸãã¯ãã«ã³ã³ãããŒã«ã®æš©éãæã£ãŠãããã©ããããã§ãã¯ããŸããå±éºãªæš©éãæ€åºãããå Žåãè匱ãªãµãŒãã¹ã«é¢ãã詳现æ å ±ãšãšãã«ãŠãŒã¶ãŒã«èŠåããŸãã ç¹åŸŽ ð ãã¹ãŠã®éã·ã¹ãã WindowsãµãŒãã¹ãã¹ãã£...