40 matches found
CVE-2020-0001
CVE-2020-0001 POC para executar componente do sistema em um processo de aplicativo não confiável Blog https://zachinio.com/blogs/cve-2020-0001 Como usar Execute o aplicativo, certifique-se de que o processo "com.android.settings" não existe e clique no botão "start service". Inicie o aplicativo d...
DriverJack
DriverJack Introdução DriverJack é uma ferramenta projetada para carregar um driver vulnerável abusando de técnicas menos conhecidas do NTFS. Esses métodos contornam o registro de um Serviço de Driver no sistema sequestrando um serviço existente e também falsificam o caminho da imagem apresentado...
SharpNoPSExec
SharpNoPSExec Dateilose Befehlsausführung für laterale Bewegung. SharpNoPSExec fragt alle Dienste ab und wählt zufällig einen mit dem Starttyp deaktiviert oder manuell, dem aktuellen Status gestoppt und mit LocalSystem-Berechtigungen aus, um diese wiederzuverwenden. Sobald es den Dienst ausgewähl...
CVE-2026-53935
Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...
CVE-2026-53935
Summary: CVE-2026-53935 affects Cilium versions prior to 1.17.16, 1.18.2–1.18.9, and 1.19.0–1.19.3. An attacker who can create a CiliumLocalRedirectPolicy may specify arbitrary ClusterIPs via addressMatcher, enabling cross-namespace traffic hijacking to Services and bypassing serviceMatcher names...
CVE-2026-53935 CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation
Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...
EUVD-2023-45813
Malicious code in bioql PyPI...
EUVD-2022-47497
Malicious code in bioql PyPI...
EUVD-2023-45810
Malicious code in bioql PyPI...
CVE-2023-41294
The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...
CVE-2023-41297
Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...
CVE-2022-34894
In JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of untrusted services...
CVE-2022-44555
The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable...
CVE-2023-41297
Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...
CVE-2023-41297
Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...
CVE-2023-41294
The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...
CVE-2023-41294
The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...
Spoofing
The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...