2201 matches found
CVE-2019-2107
CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - 무섭게 보입니다. 아직도 Stagefright와 PNG 버그 취약점들을 기억하시나요.... CVE-2019-2107에서는 디코더/코덱이 mediacodec 사용자로 실행되며, 적절히 "조작된" 비디오타일 활성화 - pspps-i1tilesenabledflag를 통해 RCE가 가능할 수 있습니다. 영향을 받는 코덱은 HVECH.265 및 MPEG-H Part 2입니다. exploit rce android stagefright cve 추가 정보...
CVE-2025-32462-POC
CVE-2025-32462 – Повышение привилегий через sudo -h PoC 🚨 Эксплойт локального повышения привилегий для sudo через аргумент -h/--host Затрагивает системы с неправильной конфигурацией sudo, допускающей неавторизованный доступ root. 🧠 Описание Это PoC демонстрирует CVE-2025-32462 , логическую ошибку...
AV-Chaos-Monkey
AV Chaos Monkey Распределенная платформа хаос-инжиниринга для нагрузочного тестирования систем видеоконференций. Симулирует 1500+ участников WebRTC с потоками H.264/Opus и инжектирует пики сетевого хаоса для проверки устойчивости системы в условиях деградации. Архитектура 1. Конвейер обработки...
CVE-2024-55040-Sensaphone-XSS
РАСКРЫТИЕ УЯЗВИМОСТИ СЕНСАФОН Резюме В середине сентября 2024 года я выявил несколько проблем безопасности средней и низкой степени серьезности в системе мониторинга Sensaphone Web600, включая уязвимости хранимых межсайтовых сценариев XSS в опциях Setup, Profile и Zone системы. Удаленные...
AndroidAuto
Open Android Auto Открытая реализация приложения Android Auto со стороны телефона. Это приложение запускается на вашем телефоне и проецирует изображение на головное устройство автомобиля через USB, заменяя проприетарный APK Google com.google.android.projection.gearhead. ⚠️ РАБОТА В ПРОЦЕССЕ Этот...
Parallels H-Sphere 3.0.0 P9/3.1 P1 - Cross-Site Scripting
Parallels H-Sphere 3.0.0 P9 and 3.1 P1 contains multiple cross-site scripting vulnerabilities in login.php in webshell4. An attacker can inject arbitrary web script or HTML via the err, errorcode, and login parameters, thus allowing theft of cookie-based authentication credentials and launch of...
CVE-2025-14893
CVE-2025-14893: IndieWeb WordPress 플러그인의 인증된 저장형 크로스 사이트 스크립팅 XSS 면책 조항: 이 저장소는 교육 목적 및 윤리적 공개 를 위해 생성되었습니다. 취약점은 공급업체에 책임 있게 보고되었으며 패치가 적용되었습니다. 이 정보를 승인 없이 시스템을 악용하는 데 사용하지 마십시오. 개요 IndieWeb WordPress 플러그인버전 = 4.0.5에서 저장형 크로스 사이트 스크립팅Stored XSS 취약점이 발견되었습니다. 이 취약점은 작가Author 이상의 권한을 가진 인증된 공격자가...
CVE-2025-32462-
CVE-2025-32462 – Sudo ホスト名バイパス権限昇格 目次 1. 概要 2. 脆弱性の詳細 3. 影響 4. ラボ環境 5. 影響を受けるバージョンの確認 6. ユーザーと sudoers の設定 7. 悪用の手順 8. 概念実証の概要 9. Ubuntu が脆弱でない理由 10. 緩和策 11. MITRE ATT&CK マッピング 12. 参考文献 13. 免責事項 概要 CVE-2025-32462 は、sudo における ローカル権限昇格の脆弱性 であり、低権限ユーザーが ホスト名で制限された sudo ルール を悪用して root...
gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders
A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...
h-encore
h-encore h-encore , dove h sta per hack e homebrew, è il secondo jailbreak pubblico per PS Vita™ che supporta i firmware più recenti 3.65, 3.67 e 3.68. Ti consente di effettuare modifiche a livello di kernel e utente, cambiare la velocità di clock, installare plugin, eseguire homebrew e molto...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104762)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104762 advisory. H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the...
CVE-2026-55191
A flaw was found in FreeRDP. FreeRDP clients that negotiate RDPGFX AVC444 with an H.264 decoder backend are vulnerable to a heap-buffer-overflow. A malicious Remote Desktop Protocol RDP server can supply crafted surface dimensions, causing an undersized buffer to be allocated. This can lead to a...
Astra Linux – Vulnerability in DjVuLibre
In DjVuLibre 3.5.27, the sorting functionality also known as GArrayTemplate::sort allows attackers to cause a denial-of-service attack, resulting in an application crash due to uncontrolled recursion. This can occur when a PBM image file is mishandled in the libdjvu/GContainer.h header file...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: xfs: Fixed the allocation of the log recovery buffer for the legacy hsize parameter. The commit a70f9fe52daa “xfs: detects and handles invalid iclog size settings provided by mkfs“” added a fix for incorrect hsize values used ...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ext4: Avoid cycles in the h-tree A maliciously corrupted filesystem can contain cycles in the h-tree stored inside a directory. This can easily lead to the kernel corrupting tree nodes that have already been verified during...
ROS-20260824-73-0009
The vulnerability in the libfreerdp/codec/h264.c file of the H.264 decompression subsystem of the RDP client FreeRDP relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to cause service failures and expose sensitive information...
SUSE CVE-2026-76927
H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
The vulnerability in the libfreerdp/codec/h264.c file of the H.264 decompression subsystem of the RDP client FreeRDP allows a hacker to cause a service failure and expose protected information.
The vulnerability in the libfreerdp/codec/h264.c file of the H.264 decompression subsystem of the RDP client FreeRDP relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to cause service failures and expose sensitive information...
CVE-2026-55192
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can provide a specially crafted H.264 video stream that causes the client's H.264 decoder to read beyond its allocated memory. This out-of-bounds read can lead to the disclosure of sensitive client memory or cause the...
