CVE-2024-23700

CVE-2024-23700 - PoC zur Privilegieneskalation bei Android Companion Device Dieses Projekt demonstriert CVE-2024-23700, eine Schwachstelle zur Privilegieneskalation im Zusammenhang mit dem Companion-Device-Mechanismus unter Android. Der PoC zeigt, wie eine App den Kopplungsablauf eines...

CVE-2024-20154

CVE-2024-20154: NB-IoT SIB1-NB Stack Overflow im MediaTek MT6769 Baseband Classification: CWE-121 — Stack-basierter Pufferüberlauf Severity: Kritisch MediaTek Bulletin · 8.8 Hoch, Angriffsvektor: Angrenzend CISA-ADP Type: Remote Code Execution — keine Benutzerinteraktion, keine vorherige Verbindu...

MEC

Masked Extension Control MEC Masked Extension Control MEC è un programma che fa sì che Windows si affidi ai numeri magici, e non solo alle estensioni, per scegliere il programma che verrà utilizzato per aprire il file. Questo è molto più sicuro per il tuo sistema, poiché molti attacchi iniziano...

kernel: sctp: purge outqueue on stale COOKIE-ECHO handling

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...

Project-Pwnag0dchi

Progetto Pwnag0dchi Creato perché molte persone chiedevano informazioni sui plugin personalizzati e le configurazioni che uso. Seguendo questa guida, il tuo Pwnagotchi avrà un aspetto esattamente come quello che vedi sui miei social e video YouTube in circa 5 minuti massimi. Troverai anche una...

CVE-2019-6203-PoC

CVE-2019-6203-PoC सभी Apple डिवाइसों में एक PEAP बग है जो एक हमलावर को किसी भी Apple डिवाइस iOS, macOS या tvOS को एक दुर्भावनापूर्ण एक्सेस पॉइंट से जुड़ने के लिए मजबूर करने की अनुमति देता है। यह CVE-2019-6203 के लिए एक PoC है, जो iOS 12.2, macOS 10.14.4 पर काम करता है, Kali Linux पर परीक्षण किया...

CVE-2023-38831

Posiziona il file esca e il file script maligno nella directory corrente; si consiglia che il file esca sia un'immagine .png, .jpg o un documento .pdf 2. Esegui python gen-CVE2023-38831.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar per generare il tuo exploit...

NPM: mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)

NPM: mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment RFC 9260 violation vulnerability discovered by ? in WordPress Npm mediasoup versions = 3.20.0, = 3.20.5...

EUVD-2026-65694

mediasoup is a WebRTC video conferencing system. From version 3.20.0 until 3.20.6 for the npm package and from 0.22.0 until 0.22.5 for the Rust crate, mediasoup's built-in SCTP stack authenticates state cookies using only the hardcoded msworker and 0xAD81 magic values instead of a per-instance...

CVE-2026-55663

mediasoup , a WebRTC video conferencing system, contains a flaw in its built-in SCTP stack where state cookies are authenticated using only hardcoded magic values (msworker and 0xAD81) instead of a per-instance secret with HMAC, violating RFC 9260 §5.1.3. An on-path attacker targeting PlainTransp...

CVE-2026-55663 mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)

mediasoup is a WebRTC video conferencing system. From version 3.20.0 until 3.20.6 for the npm package and from 0.22.0 until 0.22.5 for the Rust crate, mediasoup's built-in SCTP stack authenticates state cookies using only the hardcoded msworker and 0xAD81 magic values instead of a per-instance...

Enumprotections_BOF

Enumprotections BOF Questo BOF può essere utilizzato per enumerare i processi di sistema e identificare il livello di protezione di ciascuno di essi. Vengono restituite anche informazioni aggiuntive, come la relazione con i servizi, l'utente, la sessione e il percorso. Queste informazioni,...

CVE-2026-74650

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in WMMparamhandler WMMparamhandler copies a fixed-size WMM parameter element out of a received information element without checking that the element is long enough, causing an out-of-bounds read f...

CVE-2026-74650 staging: rtl8723bs: fix OOB read in WMM_param_handler()

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in WMMparamhandler WMMparamhandler copies a fixed-size WMM parameter element out of a received information element without checking that the element is long enough, causing an out-of-bounds read f...

EUVD-2026-64587

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in WMMparamhandler WMMparamhandler copies a fixed-size WMM parameter element out of a received information element without checking that the element is long enough, causing an out-of-bounds read f...

CVE-2026-68469

A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. During Wi-Fi association, if a power-save sleep event occurs while an association command is in flight, the driver can incorrectly set the power-save state. This prevents the necessary sleep confirmation, leading to Wi-Fi scan requests...

CVE-2026-44472 Saleor: Account pre-hijacking vulnerability due to unverified anonymous order merge

Saleor is an e-commerce platform. From 2.10.0rc1 until 3.21.67, 3.22.63, and 3.23.22, the account activation flow treats email verification as sufficient proof of account ownership and automatically associates anonymous commerce data with the newly activated account. An attacker can use...

MAL-2026-14123 Malicious code in @oyo_tech/oyochat_user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2211869e361bf0cd90956a5c1dae972927c25c1d52e5ed4729cddc7b67fe682e @oyotech/[email protected] is a dependency-confusion probe. package.json declares a preinstall script that runs node -e...

CVE-2026-74345

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix endpoint/socket association handling Disassociating a socket from an endpoint via siwsocketdisassoc may release the last reference on that endpoint and free it. Therefore, don't clear the endpoints socket pointer...

CVE-2026-68469

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix permanently busy scans after multiple roam iterations In order for the firmware to sleep, the driver has to confirm a previously received sleep request. The normal sequence of evets goes like this: EVENTSLEEP -...