ARC-Browser-Address-Bar-Spoofing-PoC

ARC Browser アドレスバースプーフィング - iOS/iPadOS CVE-2024-25733 ARC Browser アドレスバースプーフィング PoC - iOS/iPadOS エクスプロイト PoC Proof of Concept function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random 1000; while randomPort === 0 || randomPort === 443; document.location =...

CVE-2024-42642

CVE-2024-42642 はじめに 対象となるデバイスは、MX500シリーズSSDです。これらのSSDは、Sillicon-Motion SM2259 コントローラによって制御されています（初期のバッチでは旧コントローラの Sillicon-Motion SM2258 が搭載されていましたが、このドキュメントの主な焦点は新しい方です）。 SM2259 は、ARCアーキテクチャベースの32ビット・リトルエンディアンCPUを搭載した4チャンネルSATA 6Gb/sマイクロコントローラです。 このドキュメントの時点で適用可能な最新ファームウェアである M3CR046...

idb

Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...

CVE-2023-31443

CVE-2023-31443 nordugrid-arc-wn 6.14.0 DoS/LPE。 推奨される説明 NorduGrid nordugrid-arc-wn 6.14.0 には、パストラバーサル攻撃に対して脆弱な arc-job-cgroup SUID バイナリがあります。 競合状態と組み合わせることで、攻撃者は root ユーザーが書き込み可能な任意のファイルに ppid を書き込むことができます。 脆弱性タイプ ディレクトリトラバーサル 製品のベンダー NorduGrid 影響を受ける製品コードベース nordugrid-arc-wn - 6.14.0 影響を受けるコンポーネ...

CVE-2026-100895 Trusted Domain Project OpenARC libopenarc arc-canon.c arc_parse_canon_t null pointer dereference

A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arcparsecanont in the library libopenarc/arc-canon.c of the component libopenarc. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploi...

CVE-2026-100895 Trusted Domain Project OpenARC libopenarc arc-canon.c arc_parse_canon_t null pointer dereference

A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arcparsecanont in the library libopenarc/arc-canon.c of the component libopenarc. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploi...

CVE-2026-100895 Trusted Domain Project OpenARC libopenarc arc-canon.c arc_parse_canon_t null pointer dereference

A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arcparsecanont in the library libopenarc/arc-canon.c of the component libopenarc. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploi...

CVE-2026-100895

A null pointer dereference vulnerability exists in the Trusted Domain Project OpenARC library, specifically within the arc_parse_canon_t function in libopenarc/arc-canon.c. This flaw impacts versions up to 1.0.0.Beta1 and can be triggered via a remote attack . Public exploits are available for th...

EUVD-2026-86265

NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvgpathArcTo when parsing SVG arc commands. A specially crafted SVG document containing extreme arc radius values can cause intermediate arc calculations to produce a NaN delta angle. The function subsequently...

CVE-2026-94183

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar,...

CVE-2026-94181

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a element that triggers requestFullscreen without displaying the fullscreen notification...

CVE-2026-94183 Address bar spoofing risk in affected Android versions of Arc Search

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar,...

CVE-2026-94183 Address bar spoofing risk in affected Android versions of Arc Search

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar,...

CVE-2026-94183

Arc Search for Android versions prior to 1.12.10 are vulnerable to a UI spoofing risk. The application fails to display a fullscreen notification when a webpage enters fullscreen mode while the app is running in the background. A remote attacker can exploit this by using a specially crafted websi...

EUVD-2026-85570

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar,...

CVE-2026-94181 Address Bar Spoof Risk; Missing Fullscreen Notification via Select Element

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a element that triggers requestFullscreen without displaying the fullscreen notification...

EUVD-2026-85565

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a element that triggers requestFullscreen without displaying the fullscreen notification...

CVE-2026-94181 Address Bar Spoof Risk; Missing Fullscreen Notification via Select Element

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a element that triggers requestFullscreen without displaying the fullscreen notification...

CVE-2026-94181

Affected versions of the Arc browser are susceptible to an address bar spoofing issue. An attacker can spoof the browser address bar by utilizing a element that triggers requestFullscreen without displaying the standard fullscreen notification. Exploitation details are not provided in the docume...

PT-2026-97533

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar,...