494 matches found
aquos-r6-ghostlock
AQUOS R6 GhostLock root temporal Port especรญfico del dispositivo de Linux 5.4 de GhostLock CVE-2026-43499 para el Sharp AQUOS R6. El objetivo validado es el SoftBank A101SH Judau ejecutando Android 11 build S0029 / 01.00.06, kernel 5.4.61-qgki. El objetivo ghostlock54 obtiene UID/GID 0 reales,...
SELinux-Permissive-Only-CVE-2025-21479
Versiรณn de Cheese solo permisiva de SELinux, tambiรฉn conocida como CVE-2025-21479 Esta es, por ahora, una versiรณn solo permisiva de SELinux del exploit Cheese, tambiรฉn conocido como CVE-2025-21479, que afectaba al adreno kgsl en muchos dispositivos, incluidos los dispositivos Samsung Snapdragon...
CVE-2020-9442
Tรญtulo del Exploit: OpenVPN Connect para Windows MSI - 3.1.0.361 - Escalada de Privilegios Fecha: 2020-02-28 Autor: Andrew Hess Enlace del software: https://openvpn.net/client-connect-vpn-for-windows/ Versiรณn: 3.1.0.361 MSI CVE: CVE-2020-9442 Historial 2019.12.15 - Vulnerabilidad descubierta...
mxc
Microsoft eXecution Container MXC MXC is a sandboxed code execution system for running untrusted code model output, plugins, tools on Windows, Linux, and macOS. It provides multiple containment backends โ from OS-native process sandboxes to full VMs โ behind a unified JSON configuration schema an...
cve-2026-43499-m3q-azf1
GhostLock SELinux park โ SM-S948U1 / AZF1 m3q Instantรกnea de investigaciรณn de un park de solo SELinux funcional para el Samsung Galaxy S26 Ultra SM-S948U1, nombre en clave m3q con el firmware S948U1UES3AZF1 GKI 6.12.30-android16-5. Este paquete no es un root completo. Cambia SELinux a Permissive ...
IonStack-S22-cve-2026-43499
IonStack-S22-cve-2026-43499 COMBINADO CON EL REPOSITORIO ORIGINAL: Encuรฉntralo aquรญ https://github.com/CamsShaft/IonStack-S22 Root completo en el dominio del kernel con selinux permisivo en mi SM-S901W S22 5.10.168-android12-9-27760517-abS901WVLS4DWL3. NOTAS: No voy a entrar en gran detalle ni...
s26-m1q-ghostlock-selinux
S26 SM-S942U1 / m1q GhostLock CVE-2026-43499 โ uid=0 root + KernelSU ๆฟๆดป่พพๆ ้ๅฏน Samsung Galaxy S26๏ผSM-S942U1๏ผcodename m1q๏ผSoC SM8850 ้ช้พ 8 Elite Gen2๏ผ ๅ ๆ ธ 6.12.30-android16-5-android16-5-pd30ff70๏ผAndroid 16๏ผ็ CVE-2026-43499๏ผGhostLock๏ผๆๆ็ ็ฉถใ โ ๆ็ป็ปๆ๏ผuid=0 root + KernelSU ๆฟๆดป่พพๆ root@kitploit: exploit ๅ้่ฟ...
CVE-2026-87049
A flaw was found in operator-foundry. Untrusted external actors can exploit over-permissive GitHub access tokens and Google Cloud Platform GCP Workload Identity Federation credentials granted to a third-party reusable workflow. By invoking this workflow on untrusted-triggerable events without...
CVE-2026-82726
Permissive Regular Expression vulnerability in ash-project ashphoenix lets a remote client select the tenant an Ash application uses, or degrade the request, by sending a crafted Host header. AshPhoenix.Helpers.getsubdomain/2 stripped the root domain with String.replacehost, r/.?roothost/, "". Th...
CVE-2026-82726 AshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenant
Permissive Regular Expression vulnerability in ash-project ashphoenix lets a remote client select the tenant an Ash application uses, or degrade the request, by sending a crafted Host header. AshPhoenix.Helpers.getsubdomain/2 stripped the root domain with String.replacehost, r/.?roothost/, "". Th...
EUVD-2026-68335
Permissive Regular Expression vulnerability in ash-project ashphoenix lets a remote client select the tenant an Ash application uses, or degrade the request, by sending a crafted Host header. AshPhoenix.Helpers.getsubdomain/2 stripped the root domain with String.replacehost, r/.?roothost/, "". Th...
CVE-2026-82726 AshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenant
Permissive Regular Expression vulnerability in ash-project ashphoenix lets a remote client select the tenant an Ash application uses, or degrade the request, by sending a crafted Host header. AshPhoenix.Helpers.getsubdomain/2 stripped the root domain with String.replacehost, r/.?roothost/, "". Th...
EEF-CVE-2026-82726 AshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenant
Summary Permissive Regular Expression vulnerability in ash-project ashphoenix lets a remote client select the tenant an Ash application uses, or degrade the request, by sending a crafted Host header. AshPhoenix.Helpers.getsubdomain/2 stripped the root domain with String.replacehost, r/.?roothost/...
CVE-2026-82726
CVE-2026-82726 is a permissive regular expression vulnerability in ash-project ash_phoenix (versions 2.1.26 through before 2.3.25). The function AshPhoenix.Helpers.get_subdomain/2 interpolated the root host raw into a regex, turning each dot into a wildcard and allowing metacharacters as pattern ...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock โ PFEM10 CVE-2026-43499 IonStack exploit for OP...
CVE-2025-61163
Cohere North AI v1.1.5 was discovered to contain excessively permissive cross-domain policy with untrusted domains. This occurs via the server failing to validate the Origin header of incoming connection requests...
Security Bulletin: Vulnerability in undici affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in undici has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information. Vulnerabilit...
BIT-KEYCLOAK-2026-9799 Keycloak: keycloak: unauthorized access to resources via uma permission ticket bypass
A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access UMA permission ticket for one resource can exploit this by using a specific permission request prefix to bypass per-resource access control. This allows the user to gain unauthorized access to...
Astra Linux โ Vulnerability in Redis
Redis is an in-memory database that persists data on disk. Upon startup, Redis begins listening on Unix sockets before adjusting its permissions according to the user-provided configuration. If a permissive umask value is used, this can create a race condition that allows another process to...
Astra Linux โ Vulnerability in Rails
The Actionpack Ruby gem versions prior to 6.1.3.2, 6.0.3.7, 5.2.4.6, and 5.2.6 have a possible denial-of-service vulnerability in the Token Authentication logic of the Action Controller, due to overly permissive regular expressions. Affected code uses authenticateorrequestwithhttptoken or...