Juniper-exploit-CVE-2023-36845

CVE-2023-36845 Description CVE-2023-36845 represents a notable PHP environment variable manipulation vulnerability that impacts Juniper SRX firewalls and EX switches. While Juniper has categorized this vulnerability as being of medium severity, in this article, we will elucidate how this singular...

CVE-2024-23700

PoC for CVE-2024-23700, allowing silently obtain permissions to read/write contacts, SMS, calendar, call log and voicemail, make outgoing calls or answer incoming calls, manipulate call settings, access & control notifications sent by other apps, control nearby devices, access microphone to recor...

PoC

PoC Repo for proof of concept exploits and tools. BMCRSCDRCE Unauthenticated remote command execution exploit for BMC Server Automation's RSCD agent. The exploit works against servers affected by CVE-2016-1542 detected by Nessus. This is now a Metasploit module, see...

CVE-2024-23700

CVE-2024-23700 - Android Companion Device Privilege Escalation PoC This project demonstrates CVE-2024-23700, a privilege escalation vulnerability related to the Companion Device mechanism on Android. The PoC shows how an app can exploit the companion device association flow to obtain certain...

Fast-xml-parser vulnerabilities affect Sentio Creator Extension 'Device Manager'

Multiple vulnerabilities in the third-party component fast-xml-parser affect the Device Manager Extension in Sentio Creator. The extension is maintained and updated independently from SICK Sentio Creator, but successful exploitation of these vulnerabilities could impact the security of the Sentio...

CVE-2026-76413: Improper Restriction of Security Token Assignment

A vulnerability in Cisco Adaptive Security Device Manager ASDM single sign-on SSO handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An...

Before You Patch. Why Patch Reliability Matters for Confident Deployment

Executive Summary Microsoft’s September 2026 security updates,KB5124008 and KB5124012 , have been linked to USB audio failures on some Windows systems, highlighting the operational risk that can accompany security patching. Qualys TruRisk Eliminate classified both updates as Low Reliability ,...

Vulnerability Affecting Sentio Creator Extension 'Device Manager'

The Device Manager extension shipped with Sentio Creator is affected by CVE-2026-80469. Affected versions are pre-installed in Sentio Creator releases up to and including version 2026.2. As the Device Manager extension can be updated independently of Sentio Creator, SICK recommends applying the...

GO-2023-2095 vulnerabilities

Vulnerabilities for packages: kind, configmap-reload-fips, kubeflow-katib, metrics-server, smarter-device-manager-fips...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: spicedb, kubernetes-csi-driver-hostpath, cert-manager-cmctl, opentelemetry-collector-contrib, spegel, terragrunt, zot, terraform-provider-google, spire-server, kubernetes-csi-external-provisioner, dex, sops, zarf, grpc-health-probe, kwok, k8sgpt, terraform-docs,...

CLEANSTART-2026-JJ69031 Security fixes in smarter-device-manager-fips 1.20.11-r1

Package smarter-device-manager-fips version 1.20.11-r1 fixes 3 vulnerabilities: CVE-2026-46600, CVE-2026-33814, ghsa-5cv4-jp36-h3mw...

CLEANSTART-2026-LW63559 Security fixes in smarter-device-manager 1.20.11-r2

Package smarter-device-manager version 1.20.11-r2 fixes 1 vulnerabilities: CVE-2026-46600...

Juniper Web Device Manager - Cross-Site Scripting Detection

Juniper Web Device Manager J-Web in Junos OS contains a cross-site scripting vulnerability. This can allow an unauthenticated attacker to run malicious scripts reflected off J-Web to the victim's browser in the context of their session within J-Web, which can allow the attacker to steal...

CLEANSTART-2026-EJ83238 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33186, CVE-2026-33814, CVE-2026-39821, CVE-2026-39824, CVE-2026-42502, CVE-2026-42506 applied in versions: 1.1.2-r0

Multiple security vulnerabilities affect the smarter-device-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

EUVD-2026-34302

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: tailscale, metacontroller, pluto, supercronic, oras, mariadb-operator, aws-load-balancer-controller, spire-server, nodetaint, local-path-provisioner, actions-runner-controller, flux-notification-controller, smokescreen, karpenter, flux-helm-controller,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: migrate, kbld, harbor-cli, oauth2-proxy, terraform-provider-tls, php-fpmexporter, spire-server, timestamp-authority, envoy-gateway, terraform-provider-time, grpc-health-probe, logstash-exporter, dapr, rabbitmq-messaging-topology-operator, maru, sbom-convert, dgraph,...

Exploit for CVE-2024-23700

PoC for CVE-2024-23700, allowing silently obtain permissions to...

CLEANSTART-2026-AE87452 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.20.12-r0, 1.20.12-r1, 1.20.12-r2

Multiple security vulnerabilities affect the smarter-device-manager-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

Unspecified Vulnerability in Google Android (CNVD-2026-14652)

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android, which originates from a logic error in the onStart function of CompanionDeviceManagerService.java, which can be exploited by an attacker to cause a local elevation of...