SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

SOC336 - Windows OLE Zero-Click RCE Exploitation erkannt CVE-2025-21298 – Walkthrough 🔎 Inhaltsverzeichnis 1. Situation...

CVE-2026-52103

SimpleX Chat versions before v6.5 are affected by a zero-click remote code execution vulnerability in the /Terminal/Notification.hs component. An attacker can send a crafted payload in a text message to execute arbitrary commands in the context of the application without any user interaction. The...

EUVD-2026-66751

A zero-click remote code execution RCE vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in the context of the application without user interaction via sending a crafted payload in a text message...

cisco-CVE-2023-31488

Informazioni Ricercatore di sicurezza: ly1g3, ly1g3attuta.io Impronta GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Panoramica: Da email a RCE a zero click come root - Remote Code Execution/Memory Corruption/ROP-chain CVE: CVE-2023-31488 Cronologia:...

CVE-2025-48593

CVE-2025-48593 „Ein einziges bösartiges Paket kann Ihr Gerät übernehmen.“ — Android-Sicherheitsteam, Nov. 2025 Zero-Click-Remote-Codeausführung im Android-System Bluetooth-Subsystem ⚠️ Wichtige Klarstellung zum Umfang aktualisiert April 2026 Standard-Smartphones und -Tablets sind NICHT verwundbar...

msdt-CVE-2022-30190

msdt-follina-office CVE-2022-30190- Una vulnerabilità RCE Zero-Click in MSDT...

five-nights-at-follina-s

Cinque Notti da Follina Un progetto di cybersecurity della Fullstack Academy che esamina l'intero ciclo della vulnerabilità Follina CVE-2022-30190, dallo sfruttamento alla rilevazione e difesa. Team: Brian Aldrich YoungWa Kim Jay O'Neill Binyang Jeffrey Xu Questo set di strumenti presuppone che t...

-BuL

DEDSECBKIF DEDSECBKIF è uno strumento di iniezione di tasti per Android, Linux e iOS. Con l'aiuto di CVE-2023-45866, concede agli utenti un controllo senza precedenti sui sistemi target, abilitando varie funzioni dall'iniezione di tasti a manipolazioni avanzate del sistema. DESCRIZIONE DEDSECBKIF...

CVE-2025-61922-PoC

CVE-2025-61922 Exploit: PrestaShop Checkout Account Takeover Ein einfaches, lehrreiches Proof-of-Concept-Skript, das die Zero-Click-Kontoübernahme-Schwachstelle im PrestaShop Checkout-Modul CVE-2025-61922 demonstriert. ⚠️ Rechtlicher & ethischer Hinweis: Verantwortungsvoll nutzen Dieses Tool dient...

CVE-2026-0073

0-Click RCE su Android Vulnerabilità critica CVE‑2026‑0073 nell'ADB di Android, un difetto di bypass dell'autenticazione nella verifica del certificato TLS del daemon adbd, in particolare nella funzione adbdtlsverifycert la verifica del certificato TLS fa sì che il debug senza fili Wireless...

zero-click-exploit-analysis

Zero-Click, Vecchi Trucchi Anatomia della catena di exploit zero-click di WhatsApp/ImageIO del 2025 CVE-2025-55177 + CVE-2025-43300. Documento di ricerca più un compagno web interattivo con guide dettagliate delle CVE, differenze delle patch e laboratori pratici su heap/stack. Sito live:...

CVE-2026-0049

CVE-2026-0049 — Android DNG zero-click DoS dngsdk MapTable add-overflow Materiale completo di ricerca e PoC. Analisi narrativa: 🇮🇹BLOG.md · 🇬🇧BLOG.en.md. Bug : overflow di interi unsigned su fAreaSpec.Plane + fAreaSpec.Planes in dngopcodeMapTable::ProcessArea dngsdk/source/dngmiscopcodes.cpp:388...

CVE-2024-38063

CVE-2024-38063 – Windows IPv6-Stack-Sicherheitslücke Analyse & PoC -red Technische Analyse und Proof-of-Concept PoC für CVE-2024-38063 , eine kritische Remote-Codeausführungs-Sicherheitslücke RCE im Windows-IPv6-Stack tcpip.sys. Entdeckt von KunLun Lab, ist dieser Fehler zero-click , d.h. er kann...

aisecplus-week01-danielossai

🔐 AISec Plus — Settimana 1: Mappa la minaccia Ricercatore: Daniel Ossai Repo: aisecplus-week01-danielossai Inviato: Settimana 1 · AISec Plus Bootcamp 📌 Nome e data dell'incidente EchoLeak CVE-2025-32711 Scoperto: gennaio 2025 · Divulgato: giugno 2025 · Corretto: giugno 2025 📝 Cosa è successo I...

CVE-2026-73031

telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...

Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client

Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter's. The flaw sat in the annotation tool, the feature that lets participants draw and type on a shared screen, and it asked nothing of the...

CVE-2026-73031

Telegram-search is affected by a stored XSS in MessageList.vue, where the highlightKeyword function passes raw message content to v-html without escaping. This allows an attacker to craft HTML-bearing messages in a shared Telegram group, enabling stored, cross-user JavaScript execution when users...

EUVD-2026-56889

telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...

CVE-2026-73031 telegram-search Stored XSS via v-html in MessageList.vue

telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...

CVE-2026-73031 telegram-search Stored XSS via v-html in MessageList.vue

telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...