1968 matches found
frida
frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...
Damn-Vulnerable-Android-Components
可恶的易受攻击的安卓组件 - DVAC 筛子重生！ 可恶的易受攻击的安卓组件（DVAC）是一款教育性安卓应用，专门暴露和演示与各种安卓组件（如 Activity、Intent、Content Provider 和 Broadcast Receiver）相关的漏洞。它被设计成一个密码管理器应用，用于安全地管理和存储密码（笑）。 受 Sieve 应用程序开创性工作的启发（该应用专注于类似漏洞，但已过时且与新版本安卓不兼容），DVAC 旨在填补空白，为学习安卓安全提供现代、最新的平台。DVAC...
Android-Passive-Location-Tracker
Android-Passive-Location-Tracker 无需明确请求任何位置权限的位置追踪应用！利用CVE-2018-15835，该漏洞利用Android操作系统通过广播意图泄露信息。...
CVE-2026-57128
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the SSE server in src/praisonai-agents/praisonaiagents/server/server.py does not consult ServerConfig.authtoken before handling /publish, /events, or /info requests. A network client that can reach the server can broadcast...
CVE-2026-57128
PraisonAI (praisonaiagents
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: tipc: Fixed the underflow of bcackers when duplicate GRPACKMSG messages occur. The GRPACKMSG handler in tipcgroupprotorcv currently decrements bcackers for every inbound group ACK, even when the same member has already acknowledg...
kernel: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend
A flaw was found in the Bluetooth subsystem of the Linux kernel, specifically within the hcisync component. This vulnerability occurs when the hciadvbcastannoucement function attempts to prepend Broadcast Announcement service data to an existing advertising payload that is already at its maximum...
EUVD-2026-76495
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix OOB read in eirgetservicedata eirgetservicedata walks the advertising data for a Service Data field with a matching UUID. On a mismatch it advances: eir += dlen; eirlen -= dlen; eirgetdata reports dlen as the...
CVE-2026-89583 Bluetooth: eir: Fix OOB read in eir_get_service_data()
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix OOB read in eirgetservicedata eirgetservicedata walks the advertising data for a Service Data field with a matching UUID. On a mismatch it advances: eir += dlen; eirlen -= dlen; eirgetdata reports dlen as the...
asus-cmd
ASUS Router infosvr UDP Broadcast root Command Execution Varios modelos de routers de ASUS incluyen un servicio llamado infosvr que escucha en el puerto de broadcast UDP 9999 en la interfaz LAN o WLAN. Lo utiliza una de las herramientas de ASUS para facilitar la configuración del router localizan...
EUVD-2026-76005
WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same network can spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection with the...
CVE-2026-89178
WeenyGenius , a computer lab management system by Howyar Technologies , suffers from an Origin Validation Error that allows unauthenticated attackers on the same network to spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection wit...
wificurse
Este programa escucha las balizas enviadas por puntos de acceso inalámbricos dentro del rango de su estación inalámbrica. Una vez recibidas, el programa extrae el BSSID del AP y transmite paquetes de desautenticación usando la dirección MAC de difusión. Esto provoca la desconexión de todos los...
CVE-2025-63353
CVE-2025-63353 PoC - FiberHome HG6145F1 Predictable Default Wi-Fi PSK Educational research toolkit and multi-language PoC for CVE-2025-63353 , a critical predictable-default-PSK vulnerability affecting FiberHome HG6145F1 RP4423 GPON ONT devices. Summary The factory default Wi-Fi pre-shared key on...
CVE-2026-21106
Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings...
EUVD-2026-74647
Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings...
CVE-2026-86994
n8n , an open-source workflow automation platform, contained a missing userId filter that allowed cross-user information disclosure. The /rest/active-workflows endpoint returned every active workflow ID on the instance to any authenticated member regardless of sharing permissions, and lifecycle p...
CVE-2026-69735
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...