Lucene search
+L

236 matches found

Kitploit
Kitploit
added 2026/09/19 5:27 p.m.10 views

CVE-2024-54916

CVE-2024-54916:Telegram apk中的认证绕过漏洞 Telegram Android APK v.11.7.0 的 SharedConfig 类中存在一个问题,允许物理邻近的攻击者通过操控 checkPasscode 方法的返回值来绕过认证并提升权限。 漏洞类型 认证绕过 供应商产品 Telegram 受影响产品代码库 Telegram android apk v.11.7.0 受影响组件 org.telegram.messenger.SharedConfig 利用 标识目标类和方法: 应用程序中的 SharedConfig 类管理密码验证逻辑。 该类中的...

6AI score0.00433EPSS
SaveExploits0
NVD
NVD
added 2026/09/09 9:17 p.m.6 views

CVE-2026-36433

An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...

9.8CVSS0.00695EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/09 12:00 a.m.22 views

CVE-2026-36433

The Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 is vulnerable to arbitrary code execution. A physically proximate attacker can execute code by leveraging the Production.dll and RdiskUpgrade.exe components. The root cause is that the firmware update toolkit lacks signatures, ...

6.3AI score0.00695EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/09 12:00 a.m.9 views

EUVD-2026-75164

An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...

6.3AI score0.00695EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/09 12:00 a.m.28 views

CVE-2026-36433

An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...

0.00695EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/02 9:37 p.m.14 views

USN-8715-1 linux-oracle-5.4 vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

9.8CVSS6.9AI score0.01166EPSS
SaveExploits124References38
NVD
NVD
added 2026/08/26 9:16 p.m.11 views

CVE-2025-61479

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the SPC Connect Pro software accepts replayed application-layer payloads injected into an active TCP session...

7.5CVSS0.00243EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/26 9:16 p.m.10 views

CVE-2025-61480

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via spoofed TCP FIN packets without validating the sequence or acknowledgment numbers...

7.5CVSS0.00126EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/26 5:18 a.m.10 views

CVE-2026-29988

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

8.3CVSS0.00166EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/26 3:14 a.m.48 views

CVE-2026-29988

Milesight IoT devices (multiple models, affected firmware versions) are vulnerable to cleartext transmission of sensitive information through the NFC interface. An unauthenticated attacker with physical proximity can read LoRaWAN ABP NwkSKey , AppSKey , and D2D keys via a simple NFC read operatio...

8.3CVSS5.1AI score0.00166EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/26 3:14 a.m.46 views

CVE-2026-29988

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

8.3CVSS0.00166EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/26 3:14 a.m.21 views

EUVD-2026-66229

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

8.3CVSS5AI score0.00166EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/26 3:14 a.m.13 views

CVE-2026-29988

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

8.3CVSS5AI score0.00166EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/26 2:51 a.m.18 views

EUVD-2026-66228

duplicate record...

8.3CVSS5.1AI score
SaveExploits0
CVE
CVE
added 2026/08/26 12:00 a.m.23 views

CVE-2025-61479

The Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 is vulnerable to a denial of service (DoS) attack. The root cause is that the SPC Connect Pro software accepts replayed application-layer payloads that are injected into an active TCP session. This vulnerability can be explo...

5.2AI score0.00243EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.15 views

PT-2026-82289

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the SPC Connect Pro software accepts replayed application-layer payloads injected into an active TCP session...

5.2AI score0.00243EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/26 12:00 a.m.12 views

CVE-2025-61479

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the SPC Connect Pro software accepts replayed application-layer payloads injected into an active TCP session...

5.2AI score0.00243EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/26 12:00 a.m.9 views

EUVD-2025-210800

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via Spoofed SYN packets...

5.2AI score0.00263EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/26 12:00 a.m.36 views

CVE-2025-61480

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via spoofed TCP FIN packets without validating the sequence or acknowledgment numbers...

0.00126EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/26 12:00 a.m.36 views

CVE-2025-61479

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the SPC Connect Pro software accepts replayed application-layer payloads injected into an active TCP session...

0.00243EPSS
SaveExploits0References1
Rows per page
Query Builder