CVE-2022-20128

CVE-2022-20128 Android Debug Bridge adb は、悪意のある、または不正な adb デーモンが adb pull 操作中にディレクトリトラバーサル攻撃を仕掛けられる脆弱性がありました。 悪意のあるデバイス: ./adbdirtrav.py -lp 5111 --content "hello world" --destination-path /etc/proof 被害者: root@eedd4cb8b202:/tmp/platform-tools cat /etc/proof cat: /etc/proof: No such file or...

BootHole

BootHole 概要 このリポジトリは、BootHole脆弱性の緩和計画を管理する上で役立つスクリプトや追加のツール、情報を提供するために作成されました。 Windowsベースのプラットフォーム MicrosoftがBootHole DBXアップデートで失効させた署名済み実行可能ファイルをEFIシステムパーティションで確認するPowershellスクリプトを作成しました。 Linuxベースのプラットフォーム 上記のWindows Powershellスクリプトと同様に、BootHole DBXアップデートで失効した署名済み実行可能ファイルを確認するLinux...

Exploit for Use After Free in Linux Linux_Kernel

Mi 8e5 Unlock Toolkit Automated bootloader unlock assistant f...

PT-2025-28925

Name of the Vulnerable Software and Affected Versions: Jenkins Sensedia Api Platform Tools Plugin version 1.0 Description: The Jenkins Sensedia Api Platform Tools Plugin stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller. This...

CVE-2025-53674: Plaintext Storage of a Password

Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture it...

CVE-2025-53673: Missing Encryption of Sensitive Data

Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

A Spy Wants to Connect With You on LinkedIn

Russia, North Korea, Iran, and China have been caught using fake profiles to gather information. But the platform’s tools to weed them out only go so far...

android-tools: Multiple Vulnerabilities

Background android-tools contains Android platform tools adb, fastboot, and mkbootimg. Description Multiple vulnerabilities have been discovered in android-tools. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

CVE-2014-1909: Undefined Security Weakness

Integer signedness error in system/core/adb/adbclient.c in Android Debug Bridge ADB for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow...