PoCForCVE-2015-1528

这个PoC分为三个部分： mediaserver 文件夹帮助从普通应用向 mediaserver 注入代码。 surfaceflinger 文件夹帮助在获得 mediaserver 权限后向 surfaceflinger 注入代码。 systemserver 文件夹帮助在获得 surfaceflinger 权限后向 systemserver 注入代码。 bbshell 文件夹帮助向 mediaserver 注入 busybox。 PoC 包含许多硬编码，我在 Nexus 5 Android 5.0 LRX21O 上进行了测试，你可能需要调整这些硬编码以适应你的情况。...

AppArmor.d

apparmor.d 全套 AppArmor 配置文件 !WARNING 该项目仍处于早期开发阶段。非常欢迎提供帮助；请参阅文档网站，包括其开发部分。 描述 AppArmor.d 是一套包含 1500 多个 AppArmor 配置文件的集合，其目标是限制大多数基于 Linux 的应用程序和进程。 目的 限制所有 root 进程，例如所有 systemd 工具、bluetooth、dbus、 polkit、NetworkManager、OpenVPN、GDM、rtkit、colord 限制所有桌面环境 限制所有用户服务，例如 Pipewire、Gvfsd、dbus、xdg、xwayland...

CVE-2026-21901

A NULL Pointer Dereference vulnerability in the management daemon mgd of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker setting or deactivating a specific SSH configuration parameter to create a Denial of Service DoS. A local high-privileged user configuri...

CVE-2026-21901

A NULL Pointer Dereference vulnerability in the management daemon mgd of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker setting or deactivating a specific SSH configuration parameter to create a Denial of Service DoS. A local high-privileged user configuri...

CVE-2021-47787

TotalAV 5.15.69 contains an unquoted service path vulnerability in multiple system services running with LocalSystem privileges. Attackers can place malicious executables in specific unquoted path segments to potentially gain SYSTEM-level access by exploiting the service path configuration...

EUVD-2008-5394

Malware in sbrugna...

EUVD-2009-2671

Malware in sbrugna...

EUVD-2019-5346

Malware in sbrugna...

EUVD-2017-11505

Malware in sbrugna...

EUVD-2012-5825

Malware in sbrugna...

EUVD-2018-10057

Malware in sbrugna...

EUVD-2018-9743

Malware in sbrugna...

EUVD-2022-44781

Malicious code in bioql PyPI...

EUVD-2023-34103

Malicious code in bioql PyPI...

EUVD-2023-25421

Malicious code in bioql PyPI...

CVE-2023-21253

In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-2637

Rockwell Automation's FactoryTalk System Services uses a hard-coded cryptographic key to generate administrator cookies. Hard-coded cryptographic key may lead to privilege escalation. This vulnerability may allow a local, authenticated non-admin user to generate an invalid administrator cookie...

CVE-2022-41589

The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services and device availability...

CVE-2020-28344

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. System services may crash because of the lack of a NULL parameter check. The LG ID is LVE-SMP-200024 November 2020...

The vulnerability of the FactoryTalk System Services system service in the FactoryTalk Policy Manager software for manufacturing process control, related to access control deficiencies, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the FactoryTalk System Services system service in the FactoryTalk Policy Manager software for manufacturing process management is related to deficiencies in access control for the backup copy folder. Exploiting this vulnerability could allow an intruder operating remotely to...