CVE-2017-8759

CVE-2017-8759 무기화 PoC 이 저장소는 CVE-2017-8759 취약점을 무기화하는 데 사용할 수 있는 데이터를 포함하고 있습니다. 자세한 정보는 https://www.mdsec.co.uk/blog/ 를 방문하여 이 취약점 관련 게시물을 찾아보십시오. 늘 그렇듯, 제 연구는 커뮤니티가 증가하는 위협에 더 잘 인식하도록 돕고, 적대 시뮬레이션 커뮤니티가 클라이언트 기반에 대해 보다 현실적인 위협을 시뮬레이션하여 더 나은 교육과 정보를 제공하는 것을 목표로 합니다. 제 연구는 사전 동의 없이 표적에 사용되어서는 안...

EUVD-2026-11035

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability by providing specially crafted input,...

CVE-2025-32739

Improper conditions check in some firmware for some IntelR Graphics Drivers and Intel LTS kernels within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This resul...

CVE-2025-36911

CVE-2025-36911 (WhisperPair) is a vulnerability in Google Fast Pair where devices may accept Key-Based Pairing requests even when not in pairing mode, enabling unauthorized pairing without user interaction. Connected tooling demonstrates practical exploitation: an attacker can obtain a BR/EDR add...

CVE-2025-26455

In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21281

In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the code. This could lead to local escalation of privilege across users with no additional execution privileges needed. User interaction is not needed for...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. Google Android 13 suffers from a security vulnerability that stems from a logic error in the code in Settings that could potentially bypass factory reset protection, which could lead to a local...

CVE-2022-26427

In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07085540; Issue ID: ALPS07085540...