CVE-2022-20128

CVE-2022-20128 Android Debug Bridge adb는 adb pull 작업 중에 악의적이거나 손상된 adb 데몬에 의해 수행될 수 있는 디렉터리 트래버설 공격에 취약했습니다. 악성 장치: ./adbdirtrav.py -lp 5111 --content "hello world" --destination-path /etc/proof 피해자: root@eedd4cb8b202:/tmp/platform-tools cat /etc/proof cat: /etc/proof: No such file or directory...

BootHole

BootHole 일반 정보 이 저장소는 BootHole 취약점 완화 계획을 관리하는 데 도움이 되는 관련 유용한 스크립트와 추가 도구 또는 정보를 포함하기 위해 만들어졌습니다. Windows 기반 플랫폼 Microsoft가 BootHole DBX 업데이트에서 해지한 서명된 실행 파일이 EFI 시스템 파티션에 있는지 확인하는 Powershell 스크립트를 만들었습니다. Linux 기반 플랫폼 위의 Windows Powershell 스크립트와 유사하게, BootHole DBX 업데이트에서 해지된 서명된 실행 파일이 있는지 확인하는...

Exploit for Use After Free in Linux Linux_Kernel

Mi 8e5 Unlock Toolkit Automated bootloader unlock assistant f...

PT-2025-28925

Name of the Vulnerable Software and Affected Versions: Jenkins Sensedia Api Platform Tools Plugin version 1.0 Description: The Jenkins Sensedia Api Platform Tools Plugin stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller. This...

CVE-2025-53673: Missing Encryption of Sensitive Data

Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

CVE-2025-53674: Plaintext Storage of a Password

Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture it...

A Spy Wants to Connect With You on LinkedIn

Russia, North Korea, Iran, and China have been caught using fake profiles to gather information. But the platform’s tools to weed them out only go so far...

android-tools: Multiple Vulnerabilities

Background android-tools contains Android platform tools adb, fastboot, and mkbootimg. Description Multiple vulnerabilities have been discovered in android-tools. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

CVE-2014-1909: Undefined Security Weakness

Integer signedness error in system/core/adb/adbclient.c in Android Debug Bridge ADB for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow...