node-ipc-malware-protestware-CVE-2022-23812

CVE-2022-23812 RIAEvangelist/node-ipc es malware / protestware El módulo RIAEvangelist/node-ipc contiene protestware peacenotwar. Extracto de RIAEvangelist/node-ipc: a partir de v11.0.0 y v9.2.2 este módulo utiliza el módulo peacenotwar. Aún más importante, los commits...

BadIntent

BadIntent Introducción BadIntent es el eslabón perdido entre Burp Suite y el sistema de IPC/mensajería central de Android. BadIntent consta de dos partes: un módulo basado en Xposed que se ejecuta en Android y un complemento de Burp. Gracias a esta interacción, es posible utilizar el flujo de...

CVE-2019-11708

Cadena completa de explotación para CVE-2019-11708 & CVE-2019-9810 Esta es una cadena de explotación completa de compromiso del navegador CVE-2019-11708 & CVE-2019-9810 dirigida a Firefox en Windows de 64 bits. Utiliza CVE-2019-9810 para obtener ejecución de código tanto en el proceso de contenid...

CVE-2026-12284

Mattermost Desktop App versions =6.2 6.2.2.0 fails to validate the IPC sender in the leaveCall handler which allows a malicious or compromised Mattermost server or a user with script access to a connected server view to disconnect an active call belonging to a different connected server via the...

CVE-2026-90170 ksmbd: validate ipc response length before dereferencing its fields

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ipc response length before dereferencing its fields ipcvalidatemsg computes the expected message size by reading length fields out of the response buffer supplied by the userspace ksmbd daemon payloadsz,...

CVE-2026-12284

Mattermost Desktop App versions

EUVD-2026-81680

Mattermost Desktop App versions =6.2 6.2.2.0 fails to validate the IPC sender in the leaveCall handler which allows a malicious or compromised Mattermost server or a user with script access to a connected server view to disconnect an active call belonging to a different connected server via the...

CVE-2026-24075 Buffer Over-read in Qualcomm IPC

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions...

CVE-2026-24075

CVE-2026-24075 is a buffer over-read (memory corruption) vulnerability in Qualcomm's IPC (inter-process communication) subsystem. The root cause is improper synchronization and race conditions that occur when multiple threads issue concurrent IOCTL requests to the device control handler. The vuln...

tiandy-research

tiandy-research Este repositorio contiene los resultados de mi investigación de agosto de 2020 sobre el firmware de IPC/NVR de Tiandy estos dispositivos también se venden como OMNY. Esta "investigación" no fue exhaustiva, pero encontré múltiples métodos para recuperar la contraseña del...

UBUNTU-CVE-2026-89792

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

CVE-2026-89792

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

EUVD-2026-80314

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

CVE-2026-92299

@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources via contextBridge without requiring an active getDisplayMedia picker, allowing any script in the meeting page to enumerate screens and windows. Attackers can call the jitsi-screen-sharing-get-sources IPC route to retrieve desktop...

CVE-2026-92299 @jitsi/electron-sdk before 10.0.5 Unauthorized Screen Capture

@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources via contextBridge without requiring an active getDisplayMedia picker, allowing any script in the meeting page to enumerate screens and windows. Attackers can call the jitsi-screen-sharing-get-sources IPC route to retrieve desktop...

CVE-2026-58698

In appmicpollmsghandler of appmicipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

globalprotect-ca-cert-ipc

c2us.exe - Lanza un comando como el usuario que ejecuta la sesión de escritorio del usuario conectado. En este caso, lanza cmd.exe como SYSTEM en la sesión de escritorio del usuario sin privilegios. c2us.c - Código fuente para c2us.exe. epinject.exe - Inyector de punto de entrada, utilizado para...

CVE-2020-15215-Discord-POC

PoC de Validación de Límites ISO de Discord Electron Alcance Este repositorio es un banco de pruebas de validación de prueba de concepto para el endurecimiento de límites de Electron en arquitecturas de escritorio estilo Discord. Modela la separación renderer/proceso principal, la política del...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: transportipc: Validate the payload size before reading the handle. The handleresponse function dereferences the payload as a 4-byte handle without verifying that the declared payload size is at least 4 bytes. A malformed o...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: Intel: punitipc: fixed memory corruption. This issue was addressed by correcting the address of the pointer “&punitipcdev” when the intent was to pass the pointer itself “punitipcdev” without the ampersand. This mea...