CVE-2022-27254

CVE-2022-27254 本田遥控无钥匙系统漏洞CVE-2022-27254的PoC 免责声明： 仅供教育目的。 请注意，此漏洞的发现者是 Ayyappan Rajesh，马萨诸塞大学达特茅斯分校的学生，以及 HackingIntoYourHeart。 本仓库中提及的其他人员均因所提供的支持而获得认可，但未在与本发现相关的任何研究中发挥积极作用。如果要在别处发布这些发现，请勿在未经明确批准的情况下将其与任何其他个人、公司或机构关联。 摘要： 这是 CVE-2022-27254...

CVE-2026-104112 Missing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memory

A missing release of resources in the illumos name service cache daemon nscd allows a local user to exhaust kernel memory. The nscd door server procedure, switcher in usr/src/cmd/nscd/nscdfrontend.c, does not close file descriptors that are passed with a door call but not used by the request, and...

CVE-2026-104112

The illumos name service cache daemon (nscd ) is vulnerable to a kernel memory exhaustion flaw due to a missing release of file descriptors . Specifically, the switcher() procedure in usr/src/cmd/nscd/nscd_frontend.c fails to close descriptors passed via a door call that are not used by the reque...

CVE-2026-8374

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol...

EUVD-2026-95745

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol...

CVE-2026-8374

The SwitchBot Door Lock Series is affected by a vulnerability involving the misuse and misconfiguration of cryptographic algorithms during Bluetooth communication. An attacker can exploit a manipulated communication protocol to bypass the electronic lock and gain access to security controls. The ...

CVE-2026-21014-CAN-Bus-Frame-Replay-Attack-on-Automotive-ECU

CVE-2026-21014 – 汽车ECU上的CAN总线帧重放攻击 程序代码（Python SocketCAN 模拟） canreplaysim.py - Simulates CAN bus replay import time canmessages = def sendcanmsgid, data: printf"CAN msgid:x: data.hex" canmessages.appendmsgid, data def receivecan: return canmessages-1 if canmessages else None Simulate car sending...

PT-2026-108891

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol...

CVE-2026-24306

Escalada de Privilegios en Azure Front Door – PoC CVE-2026-24306 Solo para uso autorizado en red team / investigación. El autor no se hace responsable del mal uso. La vulnerabilidad permite: Inyección arbitraria de reglas de enrutamiento Modificación del grupo de orígenes / backend pool Adjuntar ...

CVE-2025-48466

CVE-2025-48466 Modbus 数据包注入攻击 Advantech WISE 4060LAN / IoT 网关（用于门禁控制）。参见脚本：main.py 摘要 我发现在网络环境中，操作一个用于门禁控制的 IoT 网关上的 Modbus 服务器非常容易。任何远程攻击者，即使没有访问 WISE-4060/LAN 的管理面板，也可以执行该脚本，导致 WISE-4060/LAN 4 通道数字输入 / 4 通道继电器输出 IoT 以太网 I/O 模块的数字输出（DO）被干扰或切换。 此漏洞是在新加坡举行的 SPIRITCYBER-24 IoT / OT 黑客马拉松期间发现的。 影响...

CVE-2026-75907

The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's static 7-byte UID stored on an NTAG212 NFC chip. A UID is a manufacturer serial number sent in the clear on every read and is not intended to be secret or to authenticate the holder. Validating on...

CVE-2026-75907 CVE-2026-75907

The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's static 7-byte UID stored on an NTAG212 NFC chip. A UID is a manufacturer serial number sent in the clear on every read and is not intended to be secret or to authenticate the holder. Validating on...

CVE-2026-75907

The door access control system on Norwegian Cruise Line assets is vulnerable to improper authentication because it grants entry based solely on the static 7-byte UID of an NTAG212 NFC chip . Since the UID is a manufacturer serial number sent in the clear and lacks challenge-response capabilities ...

EUVD-2026-86156

The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's static 7-byte UID stored on an NTAG212 NFC chip. A UID is a manufacturer serial number sent in the clear on every read and is not intended to be secret or to authenticate the holder. Validating on...

CVE-2026-75907 CVE-2026-75907

The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's static 7-byte UID stored on an NTAG212 NFC chip. A UID is a manufacturer serial number sent in the clear on every read and is not intended to be secret or to authenticate the holder. Validating on...

PT-2026-104847

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Do not block on tag allocation in scsi eh lock door scsi eh lock door is called from scsi restart operations while the host is still in the SHOST RECOVERY state, i.e. before the host is switched back to SHOST RUNNING...

CVE-2026-75907: Improper Authentication

The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's static 7-byte UID stored on an NTAG212 NFC chip. A UID is a manufacturer serial number sent in the clear on every read and is not intended to be secret or to authenticate the holder. Validating on...

PT-2026-97981

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A circular dependency exists in the SCSI core during error handling. The function scsi eh lock door, called by scsi restart operations while the host is in the SHOST RECOVERY state, uses...

PT-2026-97916

Name of the Vulnerable Software and Affected Versions Norwegian Cruise Line door access controllers affected versions not specified Description An authentication bypass exists in RFID-based door access controllers where the system grants entry based solely on the static 7-byte UID of an NTAG212 N...

Norwegian Cruise Line door access controller contains an improper authentication vulnerability

Overview Door access controllers used on Norwegian Cruise Line NCL ships contain an improper authentication vulnerability that permits a replayed unique identifer UID from a radio-frequency identification RFID device to grant unauthorized entry to areas secured by these controllers. Description...