idb

Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...

ARC-Browser-Address-Bar-Spoofing-PoC

ARC Browser アドレスバースプーフィング - iOS/iPadOS CVE-2024-25733 ARC Browser アドレスバースプーフィング PoC - iOS/iPadOS エクスプロイト PoC Proof of Concept root@kitploit: function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random 1000; while randomPort === 0 || randomPort === 443;...

CVE-2024-42642

CVE-2024-42642 はじめに 対象となるデバイスは、MX500シリーズSSDです。これらのSSDは、Sillicon-Motion SM2259 コントローラによって制御されています（初期のバッチでは旧コントローラの Sillicon-Motion SM2258 が搭載されていましたが、このドキュメントの主な焦点は新しい方です）。 SM2259 は、ARCアーキテクチャベースの32ビット・リトルエンディアンCPUを搭載した4チャンネルSATA 6Gb/sマイクロコントローラです。 このドキュメントの時点で適用可能な最新ファームウェアである M3CR046...

CVE-2023-31443

CVE-2023-31443 nordugrid-arc-wn 6.14.0 DoS/LPE。 推奨される説明 NorduGrid nordugrid-arc-wn 6.14.0 には、パストラバーサル攻撃に対して脆弱な arc-job-cgroup SUID バイナリがあります。 競合状態と組み合わせることで、攻撃者は root ユーザーが書き込み可能な任意のファイルに ppid を書き込むことができます。 脆弱性タイプ ディレクトリトラバーサル 製品のベンダー NorduGrid 影響を受ける製品コードベース nordugrid-arc-wn - 6.14.0 影響を受けるコンポーネ...

EUVD-2026-86265

NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvgpathArcTo when parsing SVG arc commands. A specially crafted SVG document containing extreme arc radius values can cause intermediate arc calculations to produce a NaN delta angle. The function subsequently...

CVE-2026-94183

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar,...

CVE-2026-94181

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a element that triggers requestFullscreen without displaying the fullscreen notification...

EUVD-2026-85570

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar,...

CVE-2026-94183

Arc Search for Android versions prior to 1.12.10 are vulnerable to a UI spoofing risk. The application fails to display a fullscreen notification when a webpage enters fullscreen mode while the app is running in the background. A remote attacker can exploit this by using a specially crafted websi...

EUVD-2026-85565

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a element that triggers requestFullscreen without displaying the fullscreen notification...

CVE-2026-94181

Affected versions of the Arc browser are susceptible to an address bar spoofing issue. An attacker can spoof the browser address bar by utilizing a element that triggers requestFullscreen without displaying the standard fullscreen notification. Exploitation details are not provided in the docume...

EUVD-2026-82586

Azure Arc Elevation of Privilege Vulnerability...

EUVD-2026-82583

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70009

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69399

Azure Arc Elevation of Privilege Vulnerability...

CVE-2026-69399

Azure Arc is affected by an Elevation of Privilege vulnerability (CVE-2026-69399) rated CRITICAL with a CVSS 3.1 score of 10.0 . The attack vector is network-based , requires no privileges and no user interaction , and has changed scope with high impact on confidentiality, integrity, and availabi...

CVE-2026-70009

Azure Arc is affected by a path traversal vulnerability caused by improper limitation of a pathname to a restricted directory. An unauthenticated attacker can exploit this over the network to elevate privileges , achieving high integrity impact with low confidentiality impact and no availability ...

Azure Arc Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69399: Unintended Proxy or Intermediary

Azure Arc Elevation of Privilege Vulnerability...

CVE-2026-70009: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...