3624 matches found
CVE-2020-0041
CVE-2020-0041 This repository contains code for exploiting CVE-2020-0041, a bug we reported to Google in Decmeber 2019 and was fixed in the Android Security Bulletin from March 2020. You can find the sandbox escape exploit in sandbox/. The analysis of the bug and exploitation approach can be foun...
CVE-2023-25690-POC
CVE 2023 25690 - Proof of Concept Published: 7 March 2023 Base score| Confidentiality| Integrity impact| Availability impact ---|---|---|--- 9.8| High| High| High Table of contents...
papers
Papers A handy collection of my public papers, all in one place. Symantec Altiris Deployment Solution Elevation of Privileges Vulnerabilities 13048 Exploit-db publication at https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf An...
CVE-2019-0859-1day-Exploit
CVE-2019-0859-1day-Exploit CVE-2019-0859 1day Exploit Target OS : Windows 7 x64 ServicePack1 7601 This exploit need to enviroment that is updated with 2019 March security update. Previous update didn't check currently. exploit relible isn't 100%. Sometime exploit didn't work perfecty. Then you tr...
CVE-2007-6638
CVE-2007-6638 March Networks DVR 3204 - ใญใฐใใกใคใซๆ ๅ ฑๆผๆดฉ Exploit-DBใงใฎๅ ฌ้: https://www.exploit-db.com/exploits/4797/ ่่ Alex Hernandez ๅฅๅ @alt3kx...
ingress-nginx
Ingress NGINX ใฎๅปๆญข ๅปๆญขใซใคใใฆ Ingress NGINX ๅปๆญขใซใคใใฆ็ฅใฃใฆใใในใใใจ: ใในใใจใใฉใผใใงใฎใกใณใใใณในใฏ 2026 ๅนด 3 ๆใพใง็ถ็ถใใใพใใ ใใฎๅพใฏใๆฐ่ฆใชใชใผในใใใฐไฟฎๆญฃใ็บ่ฆใใใใปใญใฅใชใใฃ่ๅผฑๆงใซๅฏพใใใขใใใใผใใฏไธๅ่กใใใพใใใ ๆขๅญใฎ Ingress NGINX ใใใญใคใกใณใใฏๅฝฑ้ฟใๅใใพใใใ Helm ใใฃใผใใใณใณใใใคใกใผใธใชใฉใฎๆขๅญใฎใใญใธใงใฏใๆๆ็ฉใฏๅผใ็ถใๅฉ็จๅฏ่ฝใงใใ Ingress NGINX Controller ๆฆ่ฆ ingress-nginx ใฏใNGINX...
CVE-2026-57475
Deloitte AI Assist for Customer accepted unauthenticated POST requests through public-facing API endpoints that allowed a remote attacker to make limited additions to the configuration. These additions were not used by the system. On 2026-03-25, AI Assist for Customer restricted network access an...
CVE-2026-57475
Deloitte AI Assist for Customer had an unauthenticated POST vulnerability on public API endpoints that allowed a remote attacker to perform limited additions to the configuration. These changes were not used by the system. On 2026-03-25, access was restricted and authentication enforced for the e...
EUVD-2024-55647
Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary Hibernate entity classes by injecting malicious HQL syntax into the uid POST parameter of the wechatLoginHelper.do endpoint. Attackers can exploit the lack of input...
CVE-2026-4764 Privilege Escalation in Dialogflow CX via Playbook Import
A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was...
EUVD-2026-36221
A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was...
CVE-2026-37709
Insecure Permissions vulnerability in grokability snipe-it v.8.4.0 and before and fixed after 2026-03-10 commit 676a9958 allows a remote attacker to execute arbitrary code via the app/Http/Controllers/Api/UploadedFilesController.php component...
CVE-2026-33583
Exposure of the QKEY used as input into the โOTA-Quantumโ device registration process and internal system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform. This issue affects Symmetric Key Agreement Platform: before 26.03...
Wordfence Bug Bounty Program Monthly Report โ March 2026
In March 2026, the Wordfence Bug Bounty Program received 1718 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence Threat...
Security Bulletin: NVIDIA Merlin - May 2026
NVIDIA has released a software update for NVIDIAยฎ Merlin. To protect your system, clone or update this software to include any commit after March 11, 2026 from the NVIDIA-Merlin/Transformers4Rec GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potential...
EUVD-2026-30113
Exposure of the QKEY used as input into the โOTA-Quantumโ device registration process and internal system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform. This issue affects Symmetric Key Agreement Platform: before 26.03...
CVE-2026-21023
The vulnerability CVE-2026-21023 affects PackageManagerService prior to SMR Mar-2026 Release 1, enabling local attackers to modify installation restrictions on specific apps. Root cause: insufficient verification of data authenticity in PackageManagerService. Impact per the sources: trivial local...
Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 Attack
Checkmarx has disclosed that its ongoing investigation tied to the supply chain security incident has revealed that a cybercriminal group published data related to the company on the dark web. "Based on current evidence, we believe this data originated from Checkmarx's GitHub repository, and that...
CVE-2026-40873 mailcow: dockerized vulnerable to stored XSS in Quarantine attachment filenames
mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, the Quarantine details modal injects attachment filenames into HTML without escaping, allowing arbitrary HTML/JS execution. An attacker can deliver an email with a crafted attachment name s...
Security Updates for Microsoft Windows Admin Center in Azure Portal (March 2026)
The Microsoft Windows Admin Center in Azure Portal installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability: - Elevation of Privilege vulnerability in Windows Admin Center in Azure Portal CVE-2026-23660 Note that Nessus has not tested for this issue...