SharpNoPSExec

SharpNoPSExec Exécution de commandes sans fichier pour le mouvement latéral. SharpNoPSExec interrogera tous les services et en choisira un au hasard dont le type de démarrage est désactivé ou manuel, l'état actuel arrêté et disposant des privilèges LocalSystem pour les réutiliser. Une fois le...

CVE-2020-0001

CVE-2020-0001 POC для запуска системного компонента в процессе недоверенного приложения Блог https://zachinio.com/blogs/cve-2020-0001 Как использовать Запустите приложение, убедитесь, что процесс "com.android.settings" не существует, и нажмите кнопку "start service". Запустите приложение настроек...

DriverJack

DriverJack Введение DriverJack — это инструмент, предназначенный для загрузки уязвимого драйвера с использованием малоизвестных техник NTFS. Эти методы обходят регистрацию службы драйвера в системе за счёт перехвата существующей службы, а также подделывают путь к образу, отображаемый в событии...

CVE-2026-53935

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

CVE-2026-53935 CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

CVE-2026-53935

Summary: CVE-2026-53935 affects Cilium versions prior to 1.17.16, 1.18.2–1.18.9, and 1.19.0–1.19.3. An attacker who can create a CiliumLocalRedirectPolicy may specify arbitrary ClusterIPs via addressMatcher, enabling cross-namespace traffic hijacking to Services and bypassing serviceMatcher names...

EUVD-2022-47497

Malicious code in bioql PyPI...

EUVD-2023-45813

Malicious code in bioql PyPI...

EUVD-2023-45810

Malicious code in bioql PyPI...

CVE-2023-41294

The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...

CVE-2023-41297

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...

CVE-2022-34894

In JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of untrusted services...

CVE-2022-44555

The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable...

CVE-2023-41297

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...

CVE-2023-41297

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...

CVE-2023-41294

The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...

CVE-2023-41294

The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...

Design/Logic Flaw

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...

Spoofing

The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...

CVE-2023-41297

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...