unicorn-bios

unicorn-bios About Basic BIOS emulator/debugger for Unicorn Engine. Written to debug the XEOS Operating System boot sequence. Usage: Usage: unicorn-bios OPTIONS BOOTIMG Options: --help / -h: Displays help. --memory / -m: The amount of memory to allocate for the virtual machine in megabytes...

CVE-2026-73296

🚨 CVE-2026-73296 - UFO-Vuln 💥 Unauthenticated Mobile MCP access can expose Android screen data and provide remote UI-control capabilities through ADB. ⚠️ Security Notice This repository is intended for authorized security research, vulnerability validation, defensive testing, and controlled...

CVE-2025-69443

Remote Code Execution in coleam00 Archon 0.1.0. A crafted HTML page, when accessed by a victim, can execute commands, run prompts on behalf of the user, control the Archon UI features, and steal all Archon information available on the UI including API keys...

CVE-2025-69443

Remote Code Execution in coleam00 Archon 0.1.0. A crafted HTML page, when accessed by a victim, can execute commands, run prompts on behalf of the user, control the Archon UI features, and steal all Archon information available on the UI including API keys...

CVE-2025-69443: Improper Control of Generation of Code

Remote Code Execution in coleam00 Archon 0.1.0. A crafted HTML page, when accessed by a victim, can execute commands, run prompts on behalf of the user, control the Archon UI features, and steal all Archon information available on the UI including API keys...

CVE-2026-27476

RustFly 2.0.0 contains a command injection vulnerability in its remote UI control mechanism that accepts hex-encoded instructions over UDP port 5005 without proper sanitization. Attackers can send crafted hex-encoded payloads containing system commands to execute arbitrary operations on the targe...

CVE-2026-27476

RustFly 2.0.0 is affected by a command-injection vulnerability in its remote UI control that accepts hex-encoded instructions over UDP port 5005 without proper sanitization. The flaw allows an attacker to send crafted hex payloads to execute arbitrary commands on the target, potentially enabling ...

CVE-2026-27476: Improper Neutralization of Special Elements used in an OS Command

RustFly 2.0.0 contains a command injection vulnerability in its remote UI control mechanism that accepts hex-encoded instructions over UDP port 5005 without proper sanitization. Attackers can send crafted hex-encoded payloads containing system commands to execute arbitrary operations on the targe...

PT-2026-20937

Name of the Vulnerable Software and Affected Versions RustFly version 2.0.0 Description RustFly 2.0.0 contains a command injection issue in its remote UI control mechanism. The software accepts hex-encoded instructions over UDP port 5005 without proper sanitization. Attackers can send crafted...

EUVD-2019-2536

Malware in sbrugna...

CVE-2019-14761

An issue was discovered in KaiOS 2.5. The pre-installed Note application is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Note application. At a bare minimum, this allows an attacker to take control over the Note application's UI e.g.,...

Design/Logic Flaw

An issue was discovered in KaiOS 2.5 and 2.5.1. The pre-installed Contacts application is vulnerable to HTML and JavaScript injection attacks. An attacker can send a vCard file to the victim that will inject HTML into the Contacts application assuming the victim chooses to import the file. At a...

Design/Logic Flaw

An issue was discovered in KaiOS 2.5. The pre-installed Note application is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Note application. At a bare minimum, this allows an attacker to take control over the Note application's UI e.g.,...

Design/Logic Flaw

An issue was discovered in KaiOS 2.5. The pre-installed Recorder application is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Recorder application. At a bare minimum, this allows an attacker to take control over the Recorder application's...

CVE-2019-14756

An issue was discovered in KaiOS 1.0, 2.5, and 2.5.12.5. The pre-installed Email application is vulnerable to HTML and JavaScript injection attacks. An attacker can send a specially crafted email to the victim that will inject HTML into the email application's UI as soon as the email is opened. A...

PT-2020-9599

Name of the Vulnerable Software and Affected Versions KaiOS version 2.5 Description An issue was discovered in the pre-installed Note application, which is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Note application, allowing them to...

PT-2020-9597

Name of the Vulnerable Software and Affected Versions KaiOS versions 1.0 through 2.5.1 Description The pre-installed Radio application in KaiOS is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Radio application, allowing them to take...

PT-2020-9596

Name of the Vulnerable Software and Affected Versions KaiOS versions 2.5 through 2.5.1 Description An issue was discovered in the pre-installed File Manager application, which is vulnerable to HTML and JavaScript injection attacks. An attacker can send a file via email to the victim that will...

PT-2020-9594

Name of the Vulnerable Software and Affected Versions: KaiOS versions 1.0 through 2.5.12.5 Description: An issue was discovered in the pre-installed Email application, which is vulnerable to HTML and JavaScript injection attacks. An attacker can send a specially crafted email to the victim that...

CVE-2019-14756: Improper Neutralization of Input During Web Page Generation

An issue was discovered in KaiOS 1.0, 2.5, and 2.5.12.5. The pre-installed Email application is vulnerable to HTML and JavaScript injection attacks. An attacker can send a specially crafted email to the victim that will inject HTML into the email application's UI as soon as the email is opened. A...