DriverJack

DriverJack مقدمة DriverJack هي أداة مصممة لتحميل برنامج تشغيل ضعيف عبر استغلال تقنيات NTFS غير معروفة. تتجاوز هذه الطريقة تسجيل خدمة برنامج تشغيل على النظام من خلال اختطاف خدمة قائمة، كما تزوّر مسار الصورة المعروض في حدث تحميل برنامج التشغيل. لمزيد من التمويه لوجود برنامج تشغيل ضعيف، يستغل الهجوم...

SharpNoPSExec

SharpNoPSExec File less command execution for lateral movement. SharpNoPSExec will query all services and randomly pick one with a start type disable or manual, the current status stopped and with LocalSystem privileges to reuse them. Once it select the service it will save its current state,...

CVE-2020-0001

CVE-2020-0001 POC per eseguire un componente di sistema in un processo di un'app non attendibile Blog https://zachinio.com/blogs/cve-2020-0001 Come usare Esegui l'app, assicurati che il processo "com.android.settings" non esista e fai clic sul pulsante "avvia servizio". Avvia l'app delle...

CVE-2026-53935

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

CVE-2026-53935

Summary: CVE-2026-53935 affects Cilium versions prior to 1.17.16, 1.18.2–1.18.9, and 1.19.0–1.19.3. An attacker who can create a CiliumLocalRedirectPolicy may specify arbitrary ClusterIPs via addressMatcher, enabling cross-namespace traffic hijacking to Services and bypassing serviceMatcher names...

CVE-2026-53935 CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

EUVD-2023-45813

Malicious code in bioql PyPI...

EUVD-2022-47497

Malicious code in bioql PyPI...

EUVD-2023-45810

Malicious code in bioql PyPI...

CVE-2023-41294

The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...

CVE-2023-41297

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...

CVE-2022-34894

In JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of untrusted services...

CVE-2022-44555

The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable...

CVE-2023-41297

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...

CVE-2023-41297

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...

CVE-2023-41294

The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...

CVE-2023-41294

The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...

Spoofing

The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...

Design/Logic Flaw

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...

CVE-2023-41297

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...