2290 matches found
PhoneSploit-Pro
PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Installing dependencies Getting started Device setup...
CVE-2019-1253
CVE-2019-1253 AppXSvc Arbitrary File Security Descriptor Overwrite EoP I have independently reported this vulnerability to MSRC, however, my submission turned out to be a duplicate due to the fact that the fix for CVE-2019-1253 also addressed this issue. My PoC differs from the ones created by...
CVE-2026-92252
CVE-2026-92252 affects WatchDog Anti-Virus on Windows , where the installer incorrectly grants the Users group Full Control over C:\Program Files (x86)\Watchdog Anti-Virus. This allows local, low-privileged users to modify, replace, or delete antivirus binaries and configuration files. The practi...
CVE-2026-92252 Incorrect Default Permissions in WatchDog Anti-Virus Installation Directory
Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privileged users to modify, replace, or delete antivirus binaries and configuration files, because the installer grants the Users group Full Control over C:\Program Files x86\Watchdog...
CVE-2026-92252: Incorrect Default Permissions
Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privileged users to modify, replace, or delete antivirus binaries and configuration files, because the installer grants the Users group Full Control over C:\Program Files x86\Watchdog...
CVE-2026-86863
A flaw was found in pgAdmin 4. When the 'webserver' authentication source is enabled, a remote attacker can bypass authentication by supplying a client-controlled identity header. This allows the attacker to authenticate as any user, including an Administrator, without providing valid credentials...
Oracle WebLogic Server - Remote Command Execution
Oracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0 is susceptible to remote code execution. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised machine without entering necessary credentials. See...
CVE-2026-92805
UVdesk Community Skeleton through 1.1.8 fails to authenticate or validate installation state on wizard endpoints in ConfigureHelpdesk controller actions. Unauthenticated attackers can repoint the database and create super administrator accounts by submitting crafted requests to wizard endpoints,...
CVE-2026-92805 UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard
UVdesk Community Skeleton through 1.1.8 fails to authenticate or validate installation state on wizard endpoints in ConfigureHelpdesk controller actions. Unauthenticated attackers can repoint the database and create super administrator accounts by submitting crafted requests to wizard endpoints,...
CVE-2026-92805 UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard
UVdesk Community Skeleton through 1.1.8 fails to authenticate or validate installation state on wizard endpoints in ConfigureHelpdesk controller actions. Unauthenticated attackers can repoint the database and create super administrator accounts by submitting crafted requests to wizard endpoints,...
The vulnerability of the Authentication Engine component of the Oracle Access Manager access control system allows a perpetrator to gain full control over the application.
The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using...
The vulnerability of the Security Framework component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.
The vulnerability of the Security Framework component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP network protocol...
The vulnerability of the OUD Core component of the Oracle Unified Directory application, which facilitates simplified deployment of the Oracle Fusion Middleware software. This vulnerability allows a malicious individual to gain full control over the application.
The vulnerability of the OUD Core component of the Oracle Unified Directory application, a simplified deployment solution for the Oracle Fusion Middleware software platform, is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker ...
The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.
The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal web platform is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP network protocol...
The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.
The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...
The vulnerability of the Discovery Framework component of the Oracle Enterprise Manager Base Platform allows a hacker to gain full control over the application.
The vulnerability of the Discovery Framework component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTPS protocol...
The vulnerability of the OUD Core component of the Oracle Unified Directory application, which facilitates simplified deployment of the Oracle Fusion Middleware software. This vulnerability allows a malicious individual to gain full control over the application.
The vulnerability of the OUD Core component of the Oracle Unified Directory application, a simplified deployment solution for the Oracle Fusion Middleware software platform, is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker ...
The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.
The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...
The vulnerability of the Security component of the Oracle Agile PLM application, which allows a hacker to gain full control over the application
The vulnerability of Oracle Agile PLM’s Security component is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...
CVE-2026-76420: Improper Authorization
A vulnerability in the internal configuration of the Apache JServ Protocol AJP connector for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to impersonate a peer device. This vulnerability is due to incorrect initialization of encryption parameters for the AJP connector...