CVE-2012-1803

CVE-2012-1803 Vulnérabilité critique dans les dispositifs Siemens RuggedCom ROS permettant aux attaquants de dériver un mot de passe de compte d'usine caché à partir de l'adresse MAC de l'appareil et d'obtenir un accès administratif non autorisé via les interfaces TELNET, rsh ou série. Affecte RO...

CVE-2026-98302

In the Linux kernel, the following vulnerability has been resolved: net: fddi: skfp: fix NULL deref when setting the MAC address while down skfpctlsetmacaddress calls ResetAdapter unconditionally, without checking netifrunning. ResetAdapter first calls cardstop, which sets smc-hw.hwstate to...

CVE-2026-0101-BLE-Address-Spoofing-via-Weak-Resolvable-Private-Address

CVE-2026-0101 – Usurpation d'adresse BLE via une adresse privée résoluble faible Code du programme simulation Python avec bleak bleperipheralsim.py - Simulated BLE peripheral with weak RPA verification import asyncio, random, hashlib from bleak import BleakServer, BleakScanner Simplified - we'll...

CVE-1999-0524-ICMP-Timestamp-and-Address-Mask-Request-Exploit

CVE-1999-0524 - Exploitation des requêtes ICMP Timestamp et Address Mask Description Cet outil est conçu pour cibler CVE-1999-0524, une vulnérabilité du protocole ICMP, qui permet à des hôtes arbitraires d'envoyer des requêtes ICMP Timestamp et Address Mask à un système cible. Cela peut exposer d...

KyoceraCredsDump

KyoceraCredsDump - CVE-2022-1026 بناءً على الاستغلال الأصلي من Aaron Herndon، @ac3lives Rapid7 - https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ شكر لـ Aaron Herndon / https://twitter.com/ac3lives / https://github.com/ac3lives/kyocera-cve-2022-102...

CLEANSTART-2026-EX19348 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...

CLEANSTART-2026-HI32575 When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will...

Security vulnerability affects the temporal-server package. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the...

CLEANSTART-2026-OD21402 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322

Security vulnerability affects the temporal-server package. Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322...

PT-2026-106884

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106990

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

PT-2026-106919

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Browser component allows a remote attacker to spoof the address bar by using a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-107010

UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

Cisco ASA Improper Enforcement of Message Integrity During Transmission in a Communication Channel (CVE-2021-34793)

A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service DoS vulnerability. This...

PT-2026-106899

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in Compositing allows a remote attacker who has compromised the renderer process to spoof the address bar by using a crafted HTML page. Recommendations Update...

cormem-read-poc

إخلاء مسؤولية : هذا المشروع لأغراض البحث الأمني والتعليمي فقط. استخدمه فقط على أنظمة تمتلكها أو لديك إذن صريح لاختبارها. قد يكون الاستخدام غير المصرح به غير قانوني في بلدك. cordrvexploit — CVE-2026-38194 الثغرة الأمنية توضح هذه الأداة الثغرة CVE-2026-38194، وهي ثغرة في Teledyne Digital Imaging...

weakrng-sweep

balayage weak-rng classe CVE-2026-71851 Outil de recherche : énumère les schémas PRNG x graines uint32, dérive des portefeuilles BIP39, vérifie l'appartenance à un ensemble d'adresses victimes recherche défensive, style illbloom. Schémas : 0-10 illbloom : MT19937/glibc/Java/LCG/xorshift, 11-13...

CVE-2023-4281

CVE ID: CVE-2023-4281 Vulnerability Type: انتحال عنوان IP Description: تقوم إضافة Activity Log باسترداد عناوين IP الخاصة بالعملاء من ترويسات يحتمل أن تكون غير موثوقة، مما يسمح للمهاجم بالتلاعب بقيمتها. قد يُستخدم هذا لإخفاء مصدر حركة المرور الخبيثة. Steps to reproduce: شغّل الكود التالي في متصفح...

C-PoC-for-CVE-2024-21306

تثبيت التبعيات من apt sudo apt install -y bluez-tools bluez-hcidump libbluetooth-dev git gcc python3-pip python3-setuptools python3-pydbus تثبيت pybluez من المصدر git clone https://github.com/pybluez/pybluez.git cd pybluez sudo python3 setup.py install بناء bdaddr من مصدر bluez cd / git clone...

CVE-2026-43499-OnePlus15

CVE-2026-43499 — OnePlus 15 LPE PoC تعليمي تحذير: هذا المستودع مُقدم لأغراض تعليمية وبحثية فقط. لا يتم توزيع أي ملفات ثنائية أو إصدارات مبنية مسبقًا. يجب عليك بناء كل شيء من المصدر. تصعيد الامتيازات المحلي لنظام Android 16 على OnePlus 15. نسخة معدلة Fork من x-spy/CVE-2026-43499-popsicle مع إصلاح...

CVE-2026-105689

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, app.util.ssrf/blocked-address? relies on Java InetAddress predicates that do not classify NAT64, 6to4, or Teredo addresses and applies additional CIDR checks only to IPv4 values. Exploitation requires routing through a NAT...