2788 matches found
ConscryptTrustUserCerts
Magisk - Conscrypt Trust User Certs This module makes all installed user certificates part of the APEX module com.android.conscrypt certificate store in Android 14, so that they will automatically be used when building the trust chain. Installation 1. Install Magisk 2. Zip files zip -r...
CVE-2025-5777-TrendMicro-ApexCentral-RCE
🚨 CVE-2025-5777 – Trend Micro Apex Central Auth Bypass + RCE 🔎 Overview CVE-2025-5777 is a critical authentication bypass and remote code execution RCE vulnerability discovered in Trend Micro Apex Central. It allows unauthenticated attackers to execute arbitrary commands on the system by abusing ...
APEX
APEX ранее AzurePwn — Azure Post Exploitation Framework Попытка упростить задачи пост-эксплуатации, когда у нас есть определённые учётные данные для учётной записи Azure. Честно говоря, здесь нет ничего нового или выдающегося. Просто мой старый ленивый зад делает некоторые сокращения, чтобы мне н...
rtx-cve-2023-45779
This repository is provided AS IS to accompanya Meta Red Team X vulnerability disclosure. It is not an official Meta project and will not be supported like one. A set of scripts and artifacts that demonstrate detection and exploitation of Android devices that ship APEXes signed with test keys fro...
apex
Pensar Apex AI-powered penetration testing using autonomous agents — directly in your terminal. Run blackbox and whitebox pentests that explore, reason, and surface real vulnerabilities. Want to run from the cloud or integrate it with your CI/CD? See Pensar Console. Use Cases Developers Run...
Chaining Skills to Hijack LLM Agents
LLM agents use skills to improve performance on specialized tasks. To complete a user request, an agent may invoke several skills in sequence, allowing information produced under one skill to guide the next. Because skills may come from open-source repositories, this handoff can also carry...
EUVD-2026-84985
OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr...
EUVD-2026-84984
OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 uses an administrator password-reset unlock-code design that lacks a per-device secret or other server-side cryptographic material. An attacker with physical-console access and access to the privileged password-reset workflow can forge a...
EUVD-2026-84983
OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An unauthenticated remote attacker can spoof a loopback address to bypass local-connection-only security controls exposed on the...
EUVD-2026-84982
OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotated. An unauthenticated remote attacker can use the account to authenticate to the password-reset workflow. The account...
CVE-2026-92930
OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 uses an administrator password-reset unlock-code design that lacks a per-device secret or other server-side cryptographic material. An attacker with physical-console access and access to the privileged password-reset workflow can forge a...
CVE-2026-94367
OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr...
CVE-2026-92929
OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An unauthenticated remote attacker can spoof a loopback address to bypass local-connection-only security controls exposed on the...
CVE-2026-92928
OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotated. An unauthenticated remote attacker can use the account to authenticate to the password-reset workflow. The account...
CVE-2026-92928: Use of Hard-coded Credentials
OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotated. An unauthenticated remote attacker can use the account to authenticate to the password-reset workflow. The account...
CVE-2026-92930: Use of Insufficiently Random Values
OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 uses an administrator password-reset unlock-code design that lacks a per-device secret or other server-side cryptographic material. An attacker with physical-console access and access to the privileged password-reset workflow can forge a...
CVE-2026-94367: Improper Neutralization of Special Elements used in an OS Command
OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr...
CVE-2026-92929: Authentication Bypass by Spoofing
OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address. An unauthenticated remote attacker can spoof a loopback address to bypass local-connection-only security controls exposed on the...
CVE-2026-94367
OpenEye Apex Network Video Recorder (NVR) firmware version 3.2.9.376 is vulnerable to an OS command injection in the recbackup component. An authenticated administrator can provide crafted backup-area configuration input that is passed to a shell command, enabling the execution of arbitrary comma...
CVE-2026-94367
OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr...