CVE-2025-67159

CVE-2025-67159 — Vatilon-based IP Cameras Summary Vatilon-based IP camera firmware contains an authentication bypass and plaintext credential exposure vulnerability in the /cgi-bin/web.cgi API. The web interface processes requests containing username and password parameters in plaintext without...

CVE-2026-30039

CVE-2026-30039 Security advisory materials for CVE-2026-30039, a symlink-based archive extraction issue in rarfile affecting versions 4.2 and earlier. English advisory | 中文版本 Overview rarfile extracts symbolic links from attacker-controlled RAR archives without validating whether the embedded...

CVE-2020-35846

CVE-2020-35846 - Leak Cockpit Usernames PoC John Hammond | Sunday, July 25th, 2021 Proof-of-concept Python script to leak Cockpit usernames with CVE-2020-35846...

CVE-2025-45467

CVE-2025-45467: Insecure Firmware Verification in Unitree Go1 Summary A critical vulnerability CVE-2025-45467 has been discovered in Unitree Go1 robotic dog all firmware versions ≤ Go120220511, where the firmware update mechanism relies solely on insecure MD5 hash checks for integrity verificatio...

CVE-2024-42049-PoC

CVE-2024-42049-PoC CVE Details https://nvd.nist.gov/vuln/detail/CVE-2024-42049 TightVNC Server for Windows before 2.8.84 allows attackers to connect to the control pipe via a network connection. PoC Details article: https://izvd.eu/research/exploiting-cve-2024-42049 tested on: 2.7.10, 2.8.81; mos...

CVE-2026-49881

creationtimestamp| type| source ---|---|--- 2026-09-09 04:48:08+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909 2026-09-09 05:00:05+00:00| seen| https://t.me/GithubRedTeam/101738 2026-09-09 08:00:05+00:00| seen|...

EUVD-2026-74649

Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information...

CVE-2026-21108

Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information...

CVE-2026-21105

An improper access control flaw in Samsung's Collection app on Android 15 (prior to version 1.0.1.14) and Android 16 (prior to version 2.0.02.7) allows local attackers to access sensitive information without requiring privileges or user interaction. The vulnerability is rated CVSS 4.0 5.9 (MEDIUM...

CVE-2026-21099

CVE-2026-21099 is an improper access control vulnerability in SettingsProvider on Samsung mobile devices. A local attacker with no privileges required and no user interaction can access sensitive information on the vulnerable system. The CVSS 4.0 base score is 5.1 (MEDIUM) , reflecting the local ...

CVE-2021-41277

CVE-2021-41277 Usage 1. show help info root@kitploit: /CVE-2021-41277 ❯ go run main.go -h Usage of main: -f string File containing list of targets to verfity -o string File to write output to optional -s Show VulnInfo output -t int Number of concurrent goroutines for resolving default 10 -u strin...

extractTVpasswords

Extract password from TeamViewer memory using Frida CVE-2018-14333 Hi there, in this article we want to tell about our little research about password security in TeamViewer. The method can help during the pentest time for post exploitation to get access to another machine using TeamViewer...

gitlab-component

gitlab-component Getting started To make it easy for you to get started with GitLab, here's a list of recommended next steps. Already a pro? Just edit this README.md and make it your own. Want to make it easy? Use the template at the bottom! Add your files Create or upload files Add files using t...

CVE-2018-7690

CVE-2018-7690 The SSC REST API contains Insecure Direct Object Reference IDOR vulnerabilities that allow authenticated users access to arbitrary details of the Local and LDAP users via POST method and to arbitrary details of other user's Fortify projects via GET method. Exploit-DB publication at...

CVE-2024-57484

CVE-2024-57484 Directory listing vulnerability was found in the FoxyProxy extension. This issue allows unauthorized users to view the structure and content of the extension internal files including log.js,commands.js,schema.json,authentication.js and location.js along with their last-modified...

CVE-2020-24227

CVE-2020-24227 Playground Sessions - Storing User Credentials in Plaintext Playground Sessions v2.5.582 and earlier for Windows, stores the user credentials in plain text allowing anyone with access to C:\Users\AppData\Roaming\Playground\Local StoreSharedObjects\Playground.swf\UserProfiles.sol to...

CVE-2026-12855

creationtimestamp| type| source ---|---|--- 2026-09-09 04:30:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mv2pbpue7o24 2026-09-09 04:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117239200044346852 2026-09-09 05:03:46+00:00| seen|...

mbadanoiu

Welcome to the Weekend Retreat of Matei "Mal" Badanoiu This GitHub is used to post my CVEs and Security Research during my free time/weekends. All materials present in this GitHub profile are meant for security research and etichal hacking. I do not condone malicious behavoiur such as hacking...

CVE-2026-19651

creationtimestamp| type| source ---|---|--- 2026-09-09 04:25:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mv2oyduhsy2t...

glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...