BadParcel

BadParcel 이 버그 클래스에 대한 심층 분석은 Bundle Fengshui를 참조하세요. 이 저장소는 Android WorkSource parcel/unparcel 로직의 불일치인 CVE-2023-20963에 대한 PoC를 포함합니다. 이 취약점은 2023년 3월 Android 보안 게시판에서 패치되었습니다. 익스플로잇은 2023년 3월 이전 보안 패치 수준을 갖춘 AOSP 11, 12, 12L, 13 버전 기기에서 동작해야 합니다. CVE-2023-20963 POC를 이용한 화면 잠금 우회...

tscopy

TScopy 업데이트 2022-03-31 TScopy 소개 사고 대응IR 업무 중에는 파일시스템의 파일을 분석할 수 있는 능력이 필수적입니다. 때때로 이러한 파일은 사용 중이기 때문에 운영 체제OS에 의해 잠겨 있으며, 특히 이벤트 로그와 레지스트리 하이브의 경우 더욱 frustrating 합니다. TScopy는 관리자 권한으로 실행하는 사용자가 파일시스템에서 원시 위치를 파싱하여 OS에 요청하지 않고 잠긴 파일에 접근하고 복사할 수 있게 해줍니다. 유사한 기능을 수행하는 다른 도구로는 RawCopy가 있으며, 우리는 이를 사...

CVE-2026-8374

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol...

EUVD-2026-95745

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol...

CVE-2026-8374

The SwitchBot Door Lock Series is affected by a vulnerability involving the misuse and misconfiguration of cryptographic algorithms during Bluetooth communication. An attacker can exploit a manipulated communication protocol to bypass the electronic lock and gain access to security controls. The ...

CVE-2026-0092

CVE-2026-0092 Package Manager에서 누락된 권한 확인으로 인해 기기 잠금 컨트롤러 우회가 가능합니다. 이는 추가 실행 권한 없이 로컬 권한 상승으로 이어질 수 있습니다. 악용을 위해 사용자 상호 작용이 필요하지 않습니다. NVD - CVE-2026-0092 Android 보안 게시판 - Android 17...

PT-2026-108891

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol...

CVE-2022-46638

CVE-2022-46638 150개 이상의 국가에서 1억 명 이상의 사용자가 신뢰하는 인기 Android 앱인 AppLock Ver.5.6.2의 취약점에 관한 내용입니다. PoC 뒤로 가기 버튼을 여러 번 누르기만 하면 AppLock으로 보호되는 애플리케이션의 잠금을 해제할 수 있습니다. 1. AppLock에 의해 잠긴 애플리케이션을 엽니다. 2. PIN/비밀번호를 입력하지 마세요. 3. 뒤로 가기 버튼을 탭/클릭하고, 광고를 본 다음 광고를 닫습니다. 4. 13단계를 여러 번 반복합니다. 5. Boom! ☺ AppLock으로...

CVE-2026-100621

Capgo capgo.app contains an incomplete access-control/content-lock enforcement issue affecting all versions; no patch is available at the time of publication. The enforceencryptedbundletrigger / checkencryptedbundleoninsert content lock in supabase/schemas/prod.sql exempts appversions rows whose...

CVE-2026-100621 capgo.app Content-Lock Bypass via r2-direct Bundle Mutation

Capgo capgo.app contains an incomplete access-control/content-lock enforcement issue affecting all versions; no patch is available at the time of publication. The enforceencryptedbundletrigger / checkencryptedbundleoninsert content lock in supabase/schemas/prod.sql exempts appversions rows whose...

CVE-2026-100621 capgo.app Content-Lock Bypass via r2-direct Bundle Mutation

Capgo capgo.app contains an incomplete access-control/content-lock enforcement issue affecting all versions; no patch is available at the time of publication. The enforceencryptedbundletrigger / checkencryptedbundleoninsert content lock in supabase/schemas/prod.sql exempts appversions rows whose...

Linux Distros Unpatched Vulnerability : CVE-2026-90176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: Do not skip lock checks for single-byte ranges checklockrange uses inclusive ranges. Its callers pass the end offset as start + length - 1, so start == e...

DEBIAN-CVE-2026-90176

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do not skip lock checks for single-byte ranges checklockrange uses inclusive ranges. Its callers pass the end offset as start + length - 1, so start == end represents a valid single-byte range rather than an empty range. T...

CVE-2026-90176 ksmbd: Do not skip lock checks for single-byte ranges

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do not skip lock checks for single-byte ranges checklockrange uses inclusive ranges. Its callers pass the end offset as start + length - 1, so start == end represents a valid single-byte range rather than an empty range. T...

CVE-2026-90176 ksmbd: Do not skip lock checks for single-byte ranges

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do not skip lock checks for single-byte ranges checklockrange uses inclusive ranges. Its callers pass the end offset as start + length - 1, so start == end represents a valid single-byte range rather than an empty range. T...

PT-2026-94524

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ksmbd module, the check lock range function incorrectly handles single-byte ranges because it uses inclusive ranges. When the start and end offsets are equal, the system treats it...

CVE-2026-88770 Keycloak-services: keycloak-services: device authorization grant issues tokens to brute-force-locked accounts

A flaw was found in the Device Authorization Grant flow of Keycloak, an identity and access management solution. The issue occurs because the token redemption process fails to check if a user account is currently locked due to brute-force protection. If an attacker has an active session for a...

CVE-2026-88770

Keycloak 's Device Authorization Grant flow contains a flaw where the token redemption process does not verify whether a user account is currently locked due to brute-force protection . An attacker holding an active session for a locked account can complete the device login flow and obtain new se...

CVE-2026-88770

A flaw was found in the Device Authorization Grant flow of Keycloak, an identity and access management solution. The issue occurs because the token redemption process fails to check if a user account is currently locked due to brute-force protection. If an attacker has an active session for a...

CVE-2026-78103 Dimension Log Server Configuration Lock Bypass Vulnerability

WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow state, allowing an authenticated administrator to submit configuration changes directly to the endpoint without first...