PoC-ubuntutouch-pin-privesc

ACTUALIZACIÓN 09.09.2022 Obtuve un nuevo CVE para esta vulnerabilidad: CVE-2022-40297. Prueba de Concepto: Escalada de privilegios en Ubuntu Touch 16.04 - mediante fuerza bruta de código de acceso Ubuntu Touch permite "proteger" los dispositivos con un código de acceso de 4 dígitos. Dicho código ...

iPhoneRestrictionsPasscodeBF

iPhoneRestrictionsPasscodeBF La herramienta iPhoneRestrictionsPasscodeBF busca una copia de seguridad de iPhone de cualquier versión de iOS en una máquina Windows, si existe, la herramienta buscará dentro de la copia de seguridad el código de restricción. El código de restricción es una contraseñ...

ios_Restriction_PassCode_Crack---Python-version

iOS-Einschränkungscode-Knacker - Python-Version Übersicht iOS-Einschränkungscode-Knacker , diese Version der Anwendung ist in der Programmiersprache Python geschrieben und wird verwendet, um den Einschränkungscode von iPhone/iPad zu knacken. iPhone/iPad Einschränkungscode-Knacker Methode wie in d...

Microsoft365_devicePhish

Microsoft365devicePhish Abuso del flusso di autorizzazione OAuth di Microsoft 365 per attacchi di phishing Questo è un semplice script proof-of-concept che consente a un attaccante di condurre un attacco di phishing contro il flusso di autorizzazione OAuth di Microsoft 365. Utilizzandolo, è...

CVE-2024-50657

CVE-2024-50657: التحكم في الوصول غير صحيح في تطبيق Owncloud apk مشكلة في تطبيق Owncloud android apk الإصدار 4.4.1 تسمح لمهاجم قريب جسديًا بتصعيد الصلاحيات عبر فئة PassCodeViewModel، وتحديدًا في طريقة checkPassCodeIsValid. نوع الثغرة التحكم في الوصول غير صحيح بائع المنتج Owncloud قاعدة كود المنتج...

TeleKiller

. / |U| / \ \ | \ /\ |L| \ \ | /| | / | \ / / |T| | | | /| | | | | | | | | / / |R| | | | | | | | | | | | | | | |A| | | | | | | | | | | | | | \ \ |S| | | | | | | \ | | | /| /| /\ | / \ \ |E| | /| /| /| \ // / |/ / |C| / //|/ / '--8--' 8 O TeleKiller Ein Tool für Session-Hijacking und Stehlen lokal...

iOSRestrictionBruteForce

iOS-Einschränkungscode-Bruteforce Übersicht Diese Version der Anwendung ist in Python geschrieben und wird verwendet, um den Einschränkungscode eines iPhone/iPad zu knacken, indem sie einen Fehler in unverschlüsselten Backups ausnutzt, der es ermöglicht, den Hash und Salt zu ermitteln...

lockphish

Lockphish v2.0 Lockphish it's the first tool 07/04/2020 for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link. LockPhish Tutorial: https://www.kalilinux.in/2020/05/lockphish.html Author: The Linux Choice Who deleted his...

GHSA-GX3V-Q759-G323 Gitea: TOTP TOCTOU race on web 2FA paths + missing replay check on Basic-Auth `X-Gitea-OTP` surface

Summary I'm reporting two related TOTP one-time-use defects in Gitea that survive the CVE-2021-45331 fix. The 2018 fix PR 3878 introduced the TwoFactor.LastUsedPasscode field and added an in-memory inequality check on the web 2FA login path. That check works correctly in the single-request case,...

CVE-2026-45153 Nextcloud: PIN bypass in PassCodeActivity via back button

Nextcloud is an open source content collaboration platform. From version 33.0.0 to before version 33.1.0, after unlocking a locked Android phone the back-button could be used to bypass the Nextcloud Files app PIN. This issue has been patched in version 33.1.0...

CVE-2026-49318

Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...

CVE-2026-49318

This CVE affects the Infotainment / Digital Round display in the Indian Motorcycle Scout Bobber + Tech 2025 model year. The root cause is an incorrect behavior order during boot: the system uses the presence of Wireless Control Module (WCM) traffic as a proxy for whether an immobilizer is fitted....

EUVD-2026-33296

Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...

CVE-2025-68708

SailingLab AppLock aka com.alpha.applock 4.3.8 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an overlay rather than by using Android's secure authentication APIs. By navigating cascading interface flows - insecure navigation through...

PIN bypass in PassCodeActivity via back button

None...

CVE-2026-28895

The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. An attacker with physical access to an iOS device with Stolen Device Protection enabled may be able to access biometrics-gated Protected Apps with the passcode...

EUVD-2026-15177

The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. An attacker with physical access to an iOS device with Stolen Device Protection enabled may be able to access biometrics-gated Protected Apps with the passcode...

CVE-2026-28895

The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. An attacker with physical access to an iOS device with Stolen Device Protection enabled may be able to access biometrics-gated Protected Apps with the passcode...

CVE-2026-28895

The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. An attacker with physical access to an iOS device with Stolen Device Protection enabled may be able to access biometrics-gated Protected Apps with the passcode...

CVE-2025-46286

A logic issue was addressed with improved validation. This issue is fixed in iOS 26.2 and iPadOS 26.2. Restoring from a backup may prevent passcode from being required immediately after Face ID enrollment...