zero-touch-containment

zero-touch-containment Antigena Darktrace → Aruba ClearPass CoA bridge — model-driven, real-time user/device quarantine. Zero SOC clicks between detection and containment. Sanitized reference implementation of a production NDR↔NAC integration pattern operated at financial-sector scale...

PoC_iOS12

PoCiOS12 PoC Exploit iOS 12 to iOS 12.1 CVE-2018-4431 Kernel is available for: iPhone 5s and later, iPad Air and later and iPod Touch 6th generation...

paniclock

PanicLock is a macOS menu bar utility that instantly disables Touch ID and locks the screen with a single click or closing your laptop lid. PanicLock fills a gap macOS leaves open: there is no built-in way to instantly disable Touch ID when it matters. Biometrics are convenient day-to-day, and...

secretive

Secretive Secretive is an app for protecting and managing SSH keys with the Secure Enclave. Why? Safer Storage The most common setup for SSH keys is just keeping them on disk, guarded by proper permissions. This is fine in most cases, but it's not super hard for malicious users or malware to copy...

BrowserBox

BrowserBox — Remote Browser Isolation Bring the web to any system...safely. A full remote browser. Clientless access. Native performance. Self-host on Windows, macOS or Linux, or create cloud browser sessions through the API. Start a 7-Day Paid Evaluation · Buy a Commercial License · Talk to Sale...

victorian_machinery

Victorian Machinery Victorian Machinery is a proof of concept exploit for CVE-2022-30525. The vulnerability is an unauthenticated and remote command injection vulnerability affecting Zyxel firewall's that support zero touch provisioning. Zyxel pushed a fix for this issue on April 28, 2022. The...

CVE-2019-11224

Modero AMX Code Execution CVE-2019-11224 This repo contains a few sources about CVE-2019–11224 https://link.medium.com/zukA0oCnV8 because I noticed that the link no longer works on the official NIST website. Modero AMX devices are essentially touch panel devices for meeting rooms, they can be...

PoC-ubuntutouch-pin-privesc

UPDATE 09.09.2022 I got new CVE for this vulnerability: CVE-2022-40297. Proof of Concept: Privilege escalation in Ubuntu Touch 16.04 - by Passcode Bruteforce Ubuntu Touch allows you to "protect" devices with a 4-digit passcode. Such a code was set in a demonstration device. The problem is that th...

ESPTouchCatcher

eWeLink mobile Application - Incorrect Access Control Vulnerability CVE-2020-12702 Weak encryption in the Quick Pairing mode in the eWeLink mobile application Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier allows physically proximate attackers to eavesdrop on Wi-Fi...

CVE-2021-4034-touch

CVE-2021-4034-touch touch creates file...

PhantomTac Attack Tricks Robots Into Dropping or Crushing Objects

Researchers demonstrated PhantomTac, an attack using hidden magnetic tags to trick robotic touch sensors and make robots drop…...

CLSA-2025-1758010922 Fix of 49 CVEs

CVE-url: https://ubuntu.com/security/CVE-2025-38000 - schhfsc: Fix qlen accounting bug when using peek in hfscenqueue CVE-url: https://ubuntu.com/security/CVE-2024-57996 // CVE-url: https://ubuntu.com/security/CVE-2025-37752 - netsched: schsfq: move the limit validation Focal update: v5.4.285...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: mms114 – fixed the touch indexing for MMS134S and MMS136. The MMS134S and MMS136 touch controllers have an event size of 6 bytes, rather than 8 bytes. When mms114readreg reads the touch data packet from the device into the...

CVE-2026-101967 Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used

An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated attacker on the management LAN to execute commands as root via crafted DHCP response...

CVE-2026-102781

Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider 5.4.6 - modOsTouchSliderHelper::getAjax, wired through Joomla’s core comajax dispatcher, is the single handler behind every data-management operation this module exposes. No call to JFactory::getUser,...

CVE-2026-102781 Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6

Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider 5.4.6 - modOsTouchSliderHelper::getAjax, wired through Joomla’s core comajax dispatcher, is the single handler behind every data-management operation this module exposes. No call to JFactory::getUser,...

CVE-2026-102781

The OrdaSoft Touch Slider Joomla extension versions prior to 5.4.6 is vulnerable to unauthenticated destructive CRUD operations. The root cause is a lack of access control, authentication checks (missing JFactory::getUser()), and CSRF token verification within the modOsTouchSliderHelper::getAjax(...

EUVD-2026-94215

Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider 5.4.6 - modOsTouchSliderHelper::getAjax, wired through Joomla’s core comajax dispatcher, is the single handler behind every data-management operation this module exposes. No call to JFactory::getUser,...

CVE-2026-102781 Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6

Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider 5.4.6 - modOsTouchSliderHelper::getAjax, wired through Joomla’s core comajax dispatcher, is the single handler behind every data-management operation this module exposes. No call to JFactory::getUser,...

CVE-2026-102781: Improper Access Control

Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider 5.4.6 - modOsTouchSliderHelper::getAjax, wired through Joomla’s core comajax dispatcher, is the single handler behind every data-management operation this module exposes. No call to JFactory::getUser,...