androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

CVE

CVE STAR Labs 팀이 직접 발견하거나 다른 경로를 통해 찾은 다양한 CVE에 대한 개념 증명PoC 익스플로잇 스크립트 모음입니다. CVE-2026-53264 대상: Linux Kernel 버전: CentOS 9 커널 버전 5.14.0-721 익스플로잇 작성자: Lee Jia Jie CVE-2025-29824 대상: Windows Common Log File System Driver 버전: Windows 11 23H2 익스플로잇 작성자: Ong How Chong CVE-2024-26230 대상: Windows...

asterisk

AsteriskR 오픈소스 PBX By Mark Spencer and the Asterisk.org developer community. Copyright C 2001-2025 Sangoma Technologies Corporation and other copyright holders. 보안 Asterisk 서버를 구성하고 실행하기 전에 보안 정보 문서의 내용을 반드시 읽고 완전히 이해해야 합니다. 자세한 내용은 중요한 보안 고려 사항을 참조하십시오. Asterisk란 무엇인가? Asterisk는 오픈소스 PBX 및 전화 통신...

ColorOS-CVE-2025-10184

信息来源 漏洞原理及解决方案技术原理 취약점 설명 유형: 데이터베이스 인젝션 공격 1=1 AND 효과: 임의의 앱에서 SMS 데이터 읽기 가능. 권한 불필요, 사용자 상호작용 불필요, 무감각 읽기 영향: 기기의 모든 SMS 정보, SMS 인증 코드 유출 대상: OPPO 및 그 하위 브랜드OnePlus, realme 영향 범위: maoyixuan이 제출한 기기 목록에 따르면, 2017년 출시된 ColorOS 6.0.1에 취약점이 존재하며, 이 취약점은 OPPO의 OEM 역사를 따라온 것으로 보입니다 수정 상황: 10월 4일부터...

CVE-2025-10184_PoC

CVE‑2025‑10184 PoC용 APK 빌드 이것은 CVE‑2025‑10184 의 PoC APK 빌드입니다. 이 취약점은 com..providers.telephony에 존재하며, SMS 읽기 권한이 없는 임의의 앱이 SMS를 읽을 수 있게 허용합니다. 소스 코드 이 소스 코드와 더 자세한 내용은 Rapid7의 문서에서 확인할 수 있습니다:...

The vulnerability of the Windows operating system’s Telephony Service allows attackers to escalate their privileges.

The vulnerability of the Windows operating system’s Telephony Service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Operating System’s Telephony Service allows attackers to exploit their privileges.

The vulnerability of the Windows Operating System’s Telephony Service is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-62727

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62727

A race condition in Windows Telephony Service allows a locally authenticated low-privilege attacker to elevate privileges to SYSTEM. CVSS 3.1 base score 7.0 (HIGH). Microsoft has published an update guide; apply the patch from the MSRC link. No exploitation details or in-the-wild activity are pro...

CVE-2026-62727 Windows Telephony Service Elevation of Privilege Vulnerability

...

EUVD-2026-63093

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62727 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62727: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70725

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-70722

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

EUVD-2026-61680

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-61677

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

CVE-2026-70725: Improper Access Control

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-70722: Improper Access Control

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

PT-2026-77724

Name of the Vulnerable Software and Affected Versions Oracle Advanced Inbound Telephony versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead ...