CVE-2026-21125

A vulnerability exists in libsimba.heifdec.media.samsung.so due to improper input validation when parsing sheifd . This flaw allows local attackers to potentially achieve arbitrary code execution . The issue affects devices running versions prior to the SMR Oct-2026 Release 1 . Samsung has addres...

CVE-2026-21125

Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...

CVE-2026-21124

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...

EUVD-2026-97188

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...

CVE-2026-21124

A vulnerability exists in the libsimba.heifdec.media.samsung.so component on Samsung Mobile devices. Due to improper input validation when retrieving a cover image, a local attacker could potentially achieve arbitrary code execution . This issue affects versions prior to the SMR Oct-2026 Release ...

CVE-2026-21122

An out-of-bounds write vulnerability exists in libsamsungtts.so on Samsung Mobile devices prior to the SMR Oct-2026 Release 1 . This flaw allows local attackers to execute arbitrary code . Exploitation can occur locally, and the vulnerability is categorized under a broader set of Android security...

CVE-2026-21122

Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...

EUVD-2026-97186

Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...

CVE-2026-21120

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege...

EUVD-2026-97184

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege...

CVE-2026-21120

A Use after free vulnerability exists in the WSM service on devices running software prior to SMR Oct-2026 Release 1 . This flaw allows local attackers to potentially achieve arbitrary code execution with system privilege . While the NCSC notes broader Android vulnerabilities, this specific CVE i...

CVE-2026-21114

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...

EUVD-2026-97178

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...

CVE-2026-21114

An out-of-bounds write vulnerability exists in libsmkvextractor.so on devices prior to the SMR Oct-2026 Release 1 . This flaw allows local attackers to execute arbitrary code on the affected system. While the NCSC advisory notes broad vulnerabilities in Android, this specific CVE is identified as...

CVE-2026-44403-WingFTP-v8.1.2-POC-Exploit

Wing FTP Server v8.1.2 contains a Remote Code Execution RCE vulnerability in the session serialization mechanism. An authenticated administrator can inject arbitrary Lua code through the domain admin mydirectory basefolder field, which gets executed server-side via loadfile. This is a separate...

CVE-2026-87690 Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution

The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability CWE-22. The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the loc...

EUVD-2026-97177

The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability CWE-22. The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the loc...

CVE-2026-87690

The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is vulnerable to a relative path traversal (CWE-22). The module fails to sanitize file names from a Meterpreter directory listing—controlled by a hostile iOS device—when interpolating them into a local destination path fo...

CVE-2025-53690-Analysis

CVE-2025-53690: Sitecore ViewState Deserialization Vulnerability Analysis Overview CVE-2025-53690 is a critical ViewState deserialization vulnerability discovered in the Sitecore product suite, allowing remote code execution by exploiting exposed ASP.NET machine keys. Basic Information CVE ID :...

CVE-2023-6933

Introduction to CVE-2023-6933 Vulnerability Description The "Better Search Replace" plugin for WordPress exhibits a critical vulnerability known as PHP Object Injection. This security flaw is present in all versions up to and including 1.4.4. It arises from the deserialization of untrusted input,...