InfinityCore-Android-CVE-2026-98260

InfinityCore Android — CVE-2026-98260 Timer Chinese Overview ARM64 implementation of the Infinity Core series Timer subsystem vulnerability, with the target kernel form being the 7.0 series same source code structure as Ubuntu 26.04 7.0.0-30-generic. This repository implements the complete trigge...

research

Research — Bertoldi Cybersecurity Published security research by Alessandro Bertoldi and collaborators. Papers Title| Event| Year| Link ---|---|---|--- Infinity-Day at Scale: Hijacking Registrars, Defeating 2FA and Spoofing 17,000+ Domains| DeepSec Vienna 2025| 2025| PDF Authors Infinity-Day at...

Pega Infinity - Authentication Bypass

Pega Infinity versions 8.2.1 through 8.5.2 contain an authentication bypass vulnerability because the password reset functionality for local accounts can be used to bypass local authentication checks. id: CVE-2021-27651 info: name: Pega Infinity - Authentication Bypass author: idealphase,daffainf...

InfinityCore-Android-CVE-2026-98385

InfinityCore Android — CVE-2026-98385 Scheduler Chinese Overview ARM64 implementation of the Infinity Core series Scheduler subsystem vulnerability. The target kernel is the official test form of this CVE 7.0 / 7.2 series. The mechanism, race timing, and heap layout are fully ported according to...

InfinityCore-Android-CVE-2026-89754

InfinityCore Android — CVE-2026-89754 MM 中文 概述 Infinity Core 系列 MM 子系统漏洞的 ARM64 实现。目标内核为该 CVE 官方测试形态（7.0 / 7.2 系）。机制、竞态时序、堆布局按官方 PoC 完整移植；icmmtarget.h 中的布局常量已按官方目标内核结构写死，符号地址按目标 vmlinux 修正即可。 编译 /toolchains/llvm/prebuilt/linux-x8664/bin/aarch64-linux-android29-clang \ -O2 -std=gnu11 -static...

bedaisy-bypass

bedaisy-bypass Description bedaisy-bypass is a kernel driver designed to bypass reports sent from BEDaisy.sys to BEService.exe. For users not on a UEFI, the project utilizes Infinity Hook. The driver intercepts data communicated through the named pipe between the two services. On receiving a...

CVE-2021-27651

Summary An attacker can bypass all stages of the password reset flow and reset any user's account on Pega infinity. This is done by 1 initiating the password reset flow and typing in the victim email, then 2 forcing the HTTP POST request to update the password through. An attacker could login usi...

CVE-2021-27651

CVE-2021-27651 Pega Infinity Password Reset Video Follow Youtube Twitter Telegram Vulnmachines.com...

InfinityCore-Android-CVE-2026-80775

InfinityCore Android — CVE-2026-80775 Futex Chinese Overview ARM64 implementation of the Infinity Core series Futex subsystem vulnerability. The target kernel is the official test form of this CVE 7.0 / 7.2 series. The mechanism, race timing, and heap layout are fully ported according to the...

InfinityCore-Android-CVE-2026-98256

InfinityCore Android — CVE-2026-98256 Signal 中文 概述 Infinity Core 系列 Signal 子系统漏洞的 ARM64 实现。目标内核为该 CVE 官方测试形态（7.0 / 7.2 系）。机制、竞态时序、堆布局按官方 PoC 完整移植；icsignaltarget.h 中的布局常量已按官方目标内核结构写死，符号地址按目标 vmlinux 修正即可。 编译 /toolchains/llvm/prebuilt/linux-x8664/bin/aarch64-linux-android29-clang \ -O2 -std=gnu11...

Exploit for CVE-2026-98260

CVE-2026-98260 / BVL-AN16 CVE-2026-98260 is a vulnerability t...

CVE-2026-48705

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. Prior to 1.6.1, PydicomReader.getaffine trusts non-finite values in the DICOM PixelSpacing, ImagePositionPatient, and ImageOrientationPatient fields and composes them into an affine matrix without validation. An...

CVE-2026-48705

The MONAI AI toolkit (versions

CVE-2026-48705 MONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. Prior to 1.6.1, PydicomReader.getaffine trusts non-finite values in the DICOM PixelSpacing, ImagePositionPatient, and ImageOrientationPatient fields and composes them into an affine matrix without validation. An...

CVE-2026-46350 dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS

dcmjs is a JavaScript implementation of DICOM manipulation. Prior to 0.52.0, the DecimalString and IntegerString implementations in src/ValueRepresentation.js sanitize text with a permissive regular expression and pass the result to JavaScript's Number constructor without validating finiteness or...

CVE-2026-46350 dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS

dcmjs is a JavaScript implementation of DICOM manipulation. Prior to 0.52.0, the DecimalString and IntegerString implementations in src/ValueRepresentation.js sanitize text with a permissive regular expression and pass the result to JavaScript's Number constructor without validating finiteness or...

CVE-2026-46350

The dcmjs JavaScript library (versions

CVE-2026-62337

SNARK Verifier is a generic SNARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points encoded as the point at infinity. EcPointLoader::multiscalarmultiplication places a Value::Assigned base paired with Value::ConstantONE into its unscaled variable-base list and...

CVE-2026-62337 SNARK Verifier: Halo 2 aggregation mishandles point-at-infinity proof elements

SNARK Verifier is a generic SNARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points encoded as the point at infinity. EcPointLoader::multiscalarmultiplication places a Value::Assigned base paired with Value::ConstantONE into its unscaled variable-base list and...

CVE-2026-62337 SNARK Verifier: Halo 2 aggregation mishandles point-at-infinity proof elements

SNARK Verifier is a generic SNARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points encoded as the point at infinity. EcPointLoader::multiscalarmultiplication places a Value::Assigned base paired with Value::ConstantONE into its unscaled variable-base list and...