CVE-2026-21129

Versions of Samsung Checkout prior to version 5.1.03.1 are vulnerable to a flaw in the GuestCreditCardRegisterActivity component. Due to improper input validation , a local attacker can launch an arbitrary activity with Samsung Checkout privileges. No specific exploit information or remediation s...

CVE-2026-21128

Improper input validation in the CreditCardRegisterActivity component of Samsung Checkout (prior to version 5.1.03.1 ) allows a local attacker to launch an arbitrary activity with Samsung Checkout privileges . No specific exploit code or in-the-wild exploitation details are provided in the docume...

EUVD-2026-97189

Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...

CVE-2026-21125

A vulnerability exists in libsimba.heifdec.media.samsung.so due to improper input validation when parsing sheifd . This flaw allows local attackers to potentially achieve arbitrary code execution . The issue affects devices running versions prior to the SMR Oct-2026 Release 1 . Samsung has addres...

EUVD-2026-97188

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...

CVE-2026-21124

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...

EUVD-2026-97186

Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...

CVE-2026-21122

An out-of-bounds write vulnerability exists in libsamsungtts.so on Samsung Mobile devices prior to the SMR Oct-2026 Release 1 . This flaw allows local attackers to execute arbitrary code . Exploitation can occur locally, and the vulnerability is categorized under a broader set of Android security...

CVE-2026-21122

Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...

EUVD-2026-97184

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege...

CVE-2026-21120

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege...

CVE-2026-21114

An out-of-bounds write vulnerability exists in libsmkvextractor.so on devices prior to the SMR Oct-2026 Release 1 . This flaw allows local attackers to execute arbitrary code on the affected system. While the NCSC advisory notes broad vulnerabilities in Android, this specific CVE is identified as...

CVE-2026-21114

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...

EUVD-2026-97178

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...

CVE-2026-87690 Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution

The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability CWE-22. The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the loc...

EUVD-2026-97177

The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability CWE-22. The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the loc...

CVE-2026-87690

The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is vulnerable to a relative path traversal (CWE-22). The module fails to sanitize file names from a Meterpreter directory listing—controlled by a hostile iOS device—when interpolating them into a local destination path fo...

Follina-CVE-and-CVE-2021-40444

Exploiting Follina CVE and CVE-2021-40444 Vulnerabilities Table of Contents 1. Introduction 2. Prerequisites 3. Setup and Installation 4. Usage 5. Detailed Explanation 6. Commands 7. Disclaimer Introduction This repository contains scripts and resources for exploiting the Follina CVE and...

CVE-2026-85706

CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read For authorized penetration testing and Red Team operations only. Unauthorized use constitutes a criminal offense. See Legal Notice. Overview CVE-2026-85706 is a CVSS 10.0 path traversal vulnerability in GitLab Community and Enterprise...

flatpak: Flatpak: Arbitrary code execution via missing symlink protection

A flaw was found in Flatpak. A malicious sandboxed application can exploit missing symlink protection during the creation and bind-mounting of app data directories. By manipulating attacker-controlled path components, a malicious symlink can redirect these directories to arbitrary locations on th...