EUVD-2026-67123

Affected versions of Flowintel contain an insecure direct object reference / broken object-level authorization issue across numerous task endpoints. The routes generally received both a case identifier and a task identifier, but previously they did not enforce that the task actually belonged to t...

adbHijacker

CVE-2026-0073 — Bypass dell'autenticazione TLS ADB su Android Una proof-of-concept di exploit e uno scanner di rete per CVE-2026-0073 , una vulnerabilità critica di esecuzione remota di codice zero-click e senza interazione nel percorso di autenticazione ADB-over-TCP di adbd su Android. La...

Nginx-CVE-2013-4547

Nginx Logica di Vulnerabilità del Nome File CVE-2013-4547 Descrizione della Vulnerabilità Versioni interessate: Nginx 0.8.41 1.4.3 / 1.5.0 1.5.7 Link di riferimento: https://vulners.com/cve/CVE-2013-4547 https://blog.werner.wiki/file-resolution-vulnerability-nginx/ http://www.91ri.org/9064.html...

CVE-2026-0073

🔓 CVE-2026-0073: Android adbd प्रमाणीकरण बाईपास वायरलेस ADB TLS प्रमाणीकरण बाईपास भेद्यता के लिए शस्त्रीकृत प्रूफ ऑफ कॉन्सेप्ट। Barghest द्वारा खोजा गया, devtint द्वारा शस्त्रीकृत PoC। 📋 अवलोकन CVE-2026-0073 एंड्रॉइड डिबग ब्रिज डेमॉन adbd में एक गंभीर क्रिप्टोग्राफिक लॉजिक विफलता है जो उसी स्थानी...

ReparcelBug2

CVE-2021-0928, incompatibilidade de serialização writeToParcel/createFromParcel em android.hardware.camera2.params.OutputConfiguration Este é um exploit que usa essa vulnerabilidade para escalonamento de privilégios de um app Android instalado para o app de Configurações do Android ou qualquer...

EUVD-2026-66484

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer rmif54work reads a diagnostics report from the device into f54-reportdata, sizing the transfer with rmif54getreportsize: reportsize = rmif54getreportsizef5...

EUVD-2026-66566

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: reject dev-bound programs bound to a different device clsbpfprogfromefd obtained a SCHEDCLS program via bpfproggettypedev but never verified that a device-bound offloaded program's bound netdev matches the TC...

CVE-2026-53359-Kernel-Fix

中文 | English 中文 升级 Linux Kernel 7.1.3 修复 CVE-2026-53359 教程 声明： 本文仅记录本人服务器环境下的修复过程，并非安全专业分析。如有不当之处，欢迎指正。 验证说明： 经源码比对确认，Linux Kernel 7.1.3 已包含修复 commit 81ccda30b4e8（"KVM: x86: Fix shadow paging use-after-free due to unexpected role"），该补丁在 arch/x86/kvm/mmu/mmu.c 的 kvmmmugetchildsp 函数中增加了 role.word...

CVE-2026-12295-UXXS-in-my-wasm

CVE-2026-12295 — dati srcdoc su un URI non about:srcdoc UXSS in Firefox Proof of concept: un processo di contenuto compromesso forgia un caricamento PDocumentChannel il cui nsDocShellLoadState trasporta SrcdocData insieme a un URI arbitrario. Le build vulnerabili servono l'HTML dell'attaccante co...

CVE-2026-66752-HTTP-Request-Smuggling-via-Unparsed-Transfer-Encoding-Values-tiny_http-

Sicherheitshinweis: HTTP-Request-Smuggling durch nicht geparste Transfer-Encoding-Werte tinyhttp Zugewiesene CVE-ID: CVE-2026-66752 Zusammenfassung tinyhttp prüft lediglich, ob ein Transfer-Encoding-Header vorhanden ist. Der Wert selbst wird nie betrachtet. Jeder Wert – einschließlich Kodierungen...

CVE-2025-32407

CVE-2025-32407 CVE-2025-32407 के लिए प्रमाण अवधारणा: सैमसंग गैलेक्सी वॉच ऐप "Samsung Internet for Galaxy Watch" संस्करण 5.0.9 के TLS प्रमाणपत्र सत्यापन में एक गलत कॉन्फ़िगरेशन। विवरण गैलेक्सी वॉच ऐप "Samsung Internet for Galaxy Watch" संस्करण 5.0.9, जो सैमसंग गैलेक्सी वॉच 3 तक उपलब्ध है, TLS...

CVE-2025-43300

CVE-2025-43300：iOS/macOS DNG图像处理内存损坏 概述 CVE-2025-43300 是苹果图像处理框架中的一个关键内存损坏漏洞，影响 iOS 18.6.1 和 macOS 系统。该漏洞存在于 RawCamera.bundle 中的 JPEG 无损解压缩代码中，由 DNG 文件中 TIFF 元数据与 JPEG 流参数之间的不一致性触发。 漏洞详情 根本原因 漏洞源于 DNG（数字负片）文件中的元数据/流不一致： 1. TIFF 头中的 SamplesPerPixel 元数据 指示预期的颜色分量 2. JPEG 无损流中的 SOF3 分量计数 指定实际数据分量 3...

CVE-2017-13286

CVE-2017-13286 CVE-2017-13286 PoC нельзя использовать Все ресурсы взяты из этой статьи https://bbs.kanxue.com/thread-268506.htm Основной причиной этой уязвимости является несоответствие чтения и записи объекта Parcel, что можно проследить до следующего кода: root@kitploit: public void...

CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN

CVE-2026-0073 — Android ADBD TLS प्रमाणीकरण बाईपास EVPPKEYcmp टाइप कन्फ्यूजन → अनधिकृत ADB शेल 🔥 अवलोकन Android के ADB डेमॉन adbd में एक महत्वपूर्ण प्रमाणीकरण बाईपास भेद्यता मौजूद है, जो स्थानीय नेटवर्क पर किसी भी हमलावर को उपयोगकर्ता प्राधिकरण के बिना लक्ष्य उपकरण पर पूर्ण शेल अनुमति प्राप्त करन...

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Ruby on Rails Active Storage + libvips lettura file arbitrari → PoC per esecuzione di codice remoto RCE condizionale. File singolo, Python 3.11+, solo libreria standard, zero dipendenze , con payload misto MAT/HDF5 integrato, decoder PNG in puro Python, lettura a...

CVE-2025-51679

An issue was discovered in openRISC OR1200 commit 83ac6b. A mismatch between the RTL and netlist can lead to unexpected behavior...

CVE-2026-74736

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: reject dev-bound programs bound to a different device clsbpfprogfromefd obtained a SCHEDCLS program via bpfproggettypedev but never verified that a device-bound offloaded program's bound netdev matches the TC...

CVE-2026-80569 Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer rmif54work reads a diagnostics report from the device into f54-reportdata, sizing the transfer with rmif54getreportsize: reportsize = rmif54getreportsizef5...

CVE-2026-74736

CVE-2026-74736 is a Linux kernel vulnerability in the net/sched cls_bpf classifier. The function cls_bpf_prog_from_efd() retrieved a SCHED_CLS program via bpf_prog_get_type_dev() without verifying that a device-bound (offloaded) BPF program's bound netdev matched the target TC netdev. This allowe...

CVE-2026-74736 net/sched: cls_bpf: reject dev-bound programs bound to a different device

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: reject dev-bound programs bound to a different device clsbpfprogfromefd obtained a SCHEDCLS program via bpfproggettypedev but never verified that a device-bound offloaded program's bound netdev matches the TC...