284549 matches found
EUVD-2026-73949
In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28590
In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28590
CVE-2026-28590 is a critical vulnerability in the Android operating system, specifically involving improper encryption key validation due to a logic error in multiple locations within the core OS and Media Framework. It enables local escalation of privilege with low privileges required and no use...
EUVD-2026-73947
In validatecamerametadatastructure of camerametadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28583
CVE-2026-28583 is a high-severity (CVSS 7.8) out-of-bounds write in the Android camera framework, specifically in validate_camera_metadata_structure within camera_metadata.c. A logical error in the code allows a local attacker with low privileges to escalate privileges without user interaction, w...
CVE-2026-28583
In validatecamerametadatastructure of camerametadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28582
In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...
CVE-2026-28572
In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-73945
In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28572
CVE-2026-28572 is a tapjacking/overlay vulnerability in the Android Framework component, specifically in the onCreate method of InstallLaunch.kt. The misleading UI allows a local elevation of privilege with no additional execution privileges required and no user interaction needed. It is rated Hi...
EUVD-2026-74048
In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0084
CVE-2026-0084 is a local privilege escalation vulnerability in the Android Framework's HostEmulationManager.java , caused by a logic error that permits a background activity launch. An attacker with low privileges can exploit it without user interaction , achieving high impact on confidentiality,...
CVE-2026-0084
In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0065
In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...
CVE-2026-0065
CVE-2026-0065 is a local elevation of privilege vulnerability in the Android Framework , specifically in the areBackgroundActivityStartsAllowed method of BackgroundLaunchProcessController.java. A logic error permits an unintended way to launch activities in the background, allowing a locally-runn...
EUVD-2026-74047
In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...
CVE-2022-0847-dirty-pipe-checker
CVE-2022-0847-dirty-pipe-checker Bash script to check for CVE-2022-0847 Dirty Pipe Abstract This is the story of CVE-2022-0847, a vulnerability in the Linux kernel since 5.8 which allows overwriting data in arbitrary read-only files. This leads to privilege escalation because unprivileged process...
aisecplus-week01-servicenow-ai-security-incident
AISec Plus Week01 - Map The Threat AI Security Incident Research: ServiceNow Virtual Agent Vulnerability CVE-2025-12420 What Happened? A critical vulnerability was discovered in the ServiceNow AI Platform that enabled an unauthenticated attacker to impersonate legitimate users and execute actions...
CVE-2021-25253
root@kitploit: Exploit Title: Trend Micro OfficeScan Client 10.0 - ACL Service LPE Date: 2023/05/04 Exploit Author: msd0pe Vendor Homepage: https://www.trendmicro.com My Github: https://github.com/msd0pe-1 Trend Micro OfficeScan Client: Versions = icacls "C:\Program Files x86\Trend Micro\OfficeSc...