vulnhawk

基于AI的代码安全扫描器，能发现 Semgrep 和 CodeQL 遗漏的漏洞。 快速开始 • GitHub Action • 对比 • 支持的语言 • 常见问题 问题 传统 SAST 工具依赖模式匹配和 AST 规则。它们擅长捕获已知的漏洞模式，但从根本上讲，它们无法理解意图 。 如果你的 API 有 20 个端点，其中 19 个在操作资源前验证了授权，Semgrep 无法标记出那一个没有验证的端点——因为没有可匹配的模式。漏洞恰恰是某个模式的缺失 。 解决方案 VulnHawk 使用 AI 分析代码，并且对于它检查的每一段代码，它都会引入代码库其他位置的相关代码...

deep-C

Deep-C Deep-C es un Framework de Explotación de Deep Links en Android que descompila APKs automáticamente, identifica puntos de entrada de deep links expuestos e inseguros, valida la explotabilidad mediante análisis estático y verificación opcional de IA , y genera Pruebas de Concepto PoCs...

CVE-2021-25374_Samsung-Account-Access

CVE-2021-25374 - Samsung 账户访问脚本 此脚本可用于获取受害者 Samsung 账户的访问权限，前提是受害者的三星设备上安装了特定版本的 Samsung Members，并且设备来自美国或韩国地区。 如何使用此脚本： 1. 托管一个 Web 服务器，并在其上托管一个包含以下链接的网页： :8000/yay.html&action=sso&from=ZZ&iso=ZZIntent;scheme=samsungrewards;package=com.samsung.android.voc;action=android.intent.action.VIEW;end;"y...

clawguard

🦞 ClawGuard v3 Kit de Seguridad Empresarial para Agentes de IA - Defensa Activa Impulsada por SKILL.md Concepto Principal ¡La defensa principal de ClawGuard v3 no está en el código, sino en SKILL.md! El SKILL.md de cada módulo es en sí mismo una guía de defensa completa: Le dice al Agente cuándo...

CVE-2014-8609-exploit

CVE-2014-8609-exploit Durante el estudio de la explotación de pending intent, creé mi aplicación PoC de CVE-2014-8609 Referencia: 1. https://seclists.org/fulldisclosure/2014/Nov/81 2. https://github.com/locisvv/Vulnerable-CVE-2014-8609...

CVE-2026-20516

CVE-2026-20516: MiracastService confused deputy en Android TV Investigación y divulgación por Davide Di Matteo @Dingo97. Este es mi primer CVE acreditado. Encontré un servicio Miracast con privilegios de sistema, exportado incorrectamente, mientras investigaba un PEAQ Android TV. Un llamador pued...

CVE-2026-105208

ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper with their own token so it is accepted for another user's external login intent. An attacker who predicts a victim's in-flight intent...

CVE-2026-105208 ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens

ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper with their own token so it is accepted for another user's external login intent. An attacker who predicts a victim's in-flight intent...

CVE-2026-105208

ZITADEL versions 4.x before 4.17.3 and 3.x through 3.4.15 are vulnerable to session hijacking due to the use of unauthenticated, malleable encryption for IdP intent tokens. This flaw allows authenticated users to tamper with their own tokens to be accepted for another user's external login intent...

CVE-2026-105208 ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens

ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper with their own token so it is accepted for another user's external login intent. An attacker who predicts a victim's in-flight intent...

PT-2026-104632

ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper with their own token so it is accepted for another user's external login intent. An attacker who predicts a victim's in-flight intent...

CVE-2026-12960

CVE-2026-12960 Exportación incorrecta de componentes de aplicación de Android en la aplicación ASUS Router Un componente incluido en la aplicación ASUS Router para Android com.asus.aihome se declaró android:exported="true" sin android:permission. Cualquier otra aplicación en el mismo dispositivo,...

Reactivating Alignment: Defending LLMs from Jailbreaks Via Intention-Aware Input-Output Matching

Large language models LLMs remain vulnerable to jailbreak attacks that conceal harmful intent within complex adversarial prompts. Existing defenses primarily rely on input perturbation or harmful-output suppression, but they rarely model where malicious intent resides, resulting in brittle...

xiaomi-cve-2024-45352

xiaomi-cve-2024-45352 Reporte técnico sobre vulnerabilidad crítica de Xiaomi Vulnerability Summary A vulnerability was discovered in Xiaomi's default browser com.android.browser on various MIUI devices. The app fails to properly validate intents passed via startActivity, allowing malicious apps t...

CVE-2023-31014_Lab

Laboratorio de secuestro de Intent implícito CVE-2023-31014 Es un laboratorio educativo de Android creado a partir del informe público de CVE-2023-31014 de NVIDIA GeForce NOW for Android. No incluye código fuente de NVIDIA, cadenas Action reales ni credenciales reales. Hechos confirmados en el...

CVE-2020-23349_Lab

CVE-2020-23349 Android Lab Proyecto educativo para reproducir localmente la vulnerabilidad de redirección de Intent en Sina Weibo Android SDK 4.2.7. Úsalo solo en dispositivos de prueba o emuladores autorizados. No lo uses contra aplicaciones de usuarios reales. Estructura victim: aplicación...

BadIntent

BadIntent 简介 BadIntent 是连接 Burp Suite 与 Android 核心 IPC/消息传递系统之间的缺失环节。BadIntent 由两部分组成：一个在 Android 上运行的基于 Xposed 的模块，以及一个 Burp 插件。通过这种交互，可以利用 Burp 的常规工作流程及其所有相关工具和扩展，因为提供了拦截和重放功能。BadIntent 深度挂钩 Android 系统，在 Parcels 中执行多种方法重定向，并添加额外的服务以提供上述功能。最值得注意的是，BadIntent 在系统范围内工作（实验性 ），且不限于单个用户应用。 BadIntent...

PT-2026-104140

Name of the Vulnerable Software and Affected Versions LatePoint | Calendar & Scheduling for WordPress versions prior to 5.7.2 Description An Insecure Direct Object Reference exists via the OsPaypalConnectController::create order for transaction action, which is registered as a public route throug...

WordPress Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin <= 5.7.1 - Insecure Direct Object Reference to Unauthenticated Unauthorized Transaction Intent Creation/Modification and Invoice Enumeration vulnerability

Insecure Direct Object Reference to Unauthenticated Unauthorized Transaction Intent Creation/Modification and Invoice Enumeration vulnerability discovered by Niv Kochan, Matan Bachar in WordPress Plugin LatePoint versions = 5.7.1...

TheLastBundleMismatch

Parche misterioso Empecemos esta vez con el parche que apareció como corrección para CVE-2023-45777 en el Android Security Bulletin:diff diff --git a/services/core/java/com/android/server/accounts/AccountManagerService.java b/services/core/java/com/android/server/accounts/AccountManagerService.ja...