1450 matches found
CVE-2022-26629
锁屏绕过 CVE-2022-26629 受影响的产品 SoroushPlus+ Messenger 1.0.30 漏洞类型 不当的访问控制 影响 锁屏绕过 摘要 对权限和特权不足的处理不当，允许攻击者修改并覆盖锁屏功能，从而在未经任何授权的情况下绕过锁屏。 利用 BypassLockScreen.py 自动利用 PoC 1. 将 BypassLockScreen.py 放置到你的 SoroushPlus+ 安装目录中， 2. 运行 Python3 BypassLockScreen.py。 测试环境 Windows Linux 演示...
nosferatu
nosferatu Windows NTLM/Kerberos Authentication Backdoor How it Works First, the DLL is injected into the lsass.exe process, and will begin hooking authentication WinAPI calls. The targeted functions are: NTLM: NtlmShared!MsvpPasswordValidate Kerberos: cryptdll!CDLocateCSystem Kerberos:...
Change-Lockscreen
Change-Lockscreen Change-Lockscreen es una herramienta para desencadenar autenticaciones de red como SYSTEM cambiando la imagen de la pantalla de bloqueo de Windows desde la línea de comandos para realizar ataques de escalada de privilegios como el descrito en el artículo enlazado a continuación:...
andriller
Andriller CE Community Edition Andrillerは、スマートフォン向けのフォレンジックツールを集めたソフトウェアユーティリティです。Androidデバイスから読み取り専用で、フォレンジック的に健全で、非破壊的な取得を実行します。パターン、PINコード、またはパスワードの強力なロック画面クラッキング、Android（一部のApple iOSおよびWindows）データベースからのアプリデータのカスタムデコーダー（通信のデコード用）などの機能があります。抽出とデコーダーはHTMLおよびExcel形式でレポートを生成します。 機能 自動データ抽出とデコード...
lockphish
Lockphish v2.0 Lockphish it's the first tool 07/04/2020 for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link. LockPhish Tutorial: https://www.kalilinux.in/2020/05/lockphish.html Author: The Linux Choice Who deleted his...
lockphish
Lockphish v2.0 Lockphishは、ロック画面へのフィッシング攻撃を目的とした初めてのツール（2020年4月7日）であり、Windowsの資格情報、AndroidのPIN、iPhoneのパスコードをHTTPSリンクを使用して取得するように設計されています。 LockPhish チュートリアル: https://www.kalilinux.in/2020/05/lockphish.html 著者: The Linux Choice（自身のGitHubリポジトリを削除した人物） Twitter: https://twitter.com/linuxchoice 機能:...
CVE-2025-56800
CVE-2025-56800 Reolink 桌面应用程序中的本地身份验证绕过漏洞 1. 概述 名称 : Reolink 桌面应用程序 版本 : 8.18.12 厂商 : Reolink CWE : CWE-290: 通过欺骗绕过身份验证 CVSS : 5.1 中危 向量字符串 : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 2. 摘要 Reolink 桌面应用程序（版本 8.18.12）的锁屏功能存在本地身份验证绕过漏洞。该应用程序的源代码未打包在 ASAR 归档文件中，导致密码验证等关键身份验证逻辑以明文形式暴露在客户端...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gdm (UTSA-2026-093042)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093042 advisory. A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user th...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: gnome-shell (UTSA-2026-032347)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032347 advisory. It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a lock...
TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks
Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT. "TWINLOOT is a modular, PyArmor-hardened Python implant designed to operate its entire command-and-control infrastructure inside trusted Microsoft services," Ontinue said in a...
CVE-2026-44964
In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-controlled Intent extras, including a full-screen lock-screen message, an arbitrary on-call page ID,...
CVE-2026-44964
Summary: CVE-2026-44964 affects the Datadog Android app, where OnCallNotificationActivity is declared with android:exported="true" and no permission guard. This allows any co-installed app to launch the activity with attacker-controlled Intent extras (on_call_page_content, page_id, on_call_page_i...
EUVD-2026-54570
In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-controlled Intent extras, including a full-screen lock-screen message, an arbitrary on-call page ID,...
CVE-2026-44964
In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-controlled Intent extras, including a full-screen lock-screen message, an arbitrary on-call page ID,...
CVE-2026-64745
This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A person with physical access to a locked device may be able to access contacts and photos...
EUVD-2026-49496
This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A person with physical access to a locked device may be able to access contacts and photos...
CVE-2026-64745
This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A person with physical access to a locked device may be able to access contacts and photos...
CVE-2026-64745
This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A person with physical access to a locked device may be able to access contacts and photos...
PT-2026-65277
Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Tahoe versions prior to 26.6 Description A person with physical access to a locked device may be able to access contacts and photos due to insufficient restrictions on the lock screen. Recommendatio...
