CVE-2024-23700

PoC for CVE-2024-23700, 취약점을 통해 사용자 상호작용 없이 연락처, SMS, 캘린더, 통화 기록 및 음성사서함에 대한 읽기/쓰기 권한을 조용히 획득하고, 발신 전화 걸기 또는 수신 전화 받기, 통화 설정 조작, 다른 앱이 보낸 알림 접근 및 제어, 주변 기기 제어, 오디오 녹음을 위한 마이크 접근, 기기 식별자 접근, 백그라운드 제한 우회가 가능합니다. 이는 악성 앱이 사용자 상호작용 없이 컴패니언 디바이스companion device 연결을 설정할 수 있게 하는 권한 상승 취약점을 통해 이루어집니다...

PoC

PoC 개념 증명PoC 익스플로잇과 도구를 위한 저장소입니다. BMCRSCDRCE BMC Server Automation의 RSCD 에이전트를 위한 인증되지 않은 원격 명령 실행 익스플로잇입니다. 이 익스플로잇은 CVE-2016-1542의 영향을 받는 서버에서 작동합니다Nessus로 탐지됨. 이제 Metasploit 모듈입니다. exploits/multi/misc/bmcserverautomationrscdnshrce를 참조하세요. 이 익스플로잇은 Nessus가 패킷을 기록하고 이를/정크를 Nessus로 다시 보내는 Python...

Juniper-exploit-CVE-2023-36845

CVE-2023-36845 Описание CVE-2023-36845 представляет собой заметную уязвимость манипуляции переменными окружения PHP, которая затрагивает межсетевые экраны Juniper SRX и коммутаторы EX. Хотя Juniper классифицировал эту уязвимость как среднюю по серьезности, в данной статье мы объясним, как эту...

CVE-2024-23700

CVE-2024-23700 - Android Companion Device 権限昇格 PoC このプロジェクトは、Android の Companion Device メカニズムに関連する権限昇格の脆弱性である CVE-2024-23700 を実証するものです。PoC は、影響を受ける環境において、アプリが通常の権限付与インタラクションを経由せずに、コンパニオン デバイスのペアリングフローを悪用して機密権限を取得できることを示しています。...

GO-2023-2095 vulnerabilities

Vulnerabilities for packages: metrics-server, kubeflow-katib, kind, smarter-device-manager-fips, configmap-reload-fips...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: tflint, osv-scanner, cloudnative-pg, k8sgpt-operator, kargo, dbmate, kubernetes-csi-external-provisioner, terraform-provider-google, ksops, restic, kubernetes-csi-driver-hostpath, guac, sops, terraform-docs, opa, grpc-health-probe, dex, kaniko, melange, k3d, ferretdb...

CLEANSTART-2026-JJ69031 Security fixes in smarter-device-manager-fips 1.20.11-r1

Package smarter-device-manager-fips version 1.20.11-r1 fixes 3 vulnerabilities: CVE-2026-46600, CVE-2026-33814, ghsa-5cv4-jp36-h3mw...

CLEANSTART-2026-LW63559 Security fixes in smarter-device-manager 1.20.11-r2

Package smarter-device-manager version 1.20.11-r2 fixes 1 vulnerabilities: CVE-2026-46600...

CLEANSTART-2026-EJ83238 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33186, CVE-2026-33814, CVE-2026-39821, CVE-2026-39824, CVE-2026-42502, CVE-2026-42506 applied in versions: 1.1.2-r0

Multiple security vulnerabilities affect the smarter-device-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

EUVD-2026-34302

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, stakater-reloader, osv-scanner, flux-helm-controller, flux-notification-controller, dbmate, clickhouse-operator, kubewatch, secrets-store-csi-driver-provider-aws, victoriametrics-cluster, grafana-operator, aws-network-policy-agent,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, helm-set-status, influx, verticadb-operator, k3d, act, kserve-rest-proxy, delve, s5cmd, cluster-api-provider-vsphere, kind, docker-credential-acr-env, weaviate, secrets-store-csi-driver, gitsign, dynamic-localpv-provisioner, nri-redis,...

Exploit for CVE-2024-23700

PoC for CVE-2024-23700, allowing silently obtain permissions to...

CLEANSTART-2026-AE87452 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.20.12-r0, 1.20.12-r1, 1.20.12-r2

Multiple security vulnerabilities affect the smarter-device-manager-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

Unspecified Vulnerability in Google Android (CNVD-2026-14652)

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android, which originates from a logic error in the onStart function of CompanionDeviceManagerService.java, which can be exploited by an attacker to cause a local elevation of...

CVE-2025-48654

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48654

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48654

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48654

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48654

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...