CVE-2020-0001

CVE-2020-0001 POC per eseguire un componente di sistema in un processo di un'app non attendibile Blog https://zachinio.com/blogs/cve-2020-0001 Come usare Esegui l'app, assicurati che il processo "com.android.settings" non esista e fai clic sul pulsante "avvia servizio". Avvia l'app delle...

SharpNoPSExec

SharpNoPSExec Esecuzione di comandi senza file per movimento laterale. SharpNoPSExec interroga tutti i servizi e ne seleziona casualmente uno con tipo di avvio disabilitato o manuale, stato corrente fermo e privilegi di LocalSystem da riutilizzare. Una volta selezionato il servizio, ne salva lo...

DriverJack

DriverJack Introduzione DriverJack è uno strumento progettato per caricare un driver vulnerabile abusando di tecniche NTFS poco conosciute. Questi metodi bypassano la registrazione di un servizio di driver sul sistema dirottando un servizio esistente e falsificano anche il percorso dell'immagine...

CVE-2026-53935

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

CVE-2026-53935 CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

CVE-2026-53935

Summary: CVE-2026-53935 affects Cilium versions prior to 1.17.16, 1.18.2–1.18.9, and 1.19.0–1.19.3. An attacker who can create a CiliumLocalRedirectPolicy may specify arbitrary ClusterIPs via addressMatcher, enabling cross-namespace traffic hijacking to Services and bypassing serviceMatcher names...

EUVD-2023-45813

Malicious code in bioql PyPI...

EUVD-2022-47497

Malicious code in bioql PyPI...

EUVD-2023-45810

Malicious code in bioql PyPI...

CVE-2023-41294

The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...

CVE-2023-41297

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...

CVE-2022-34894

In JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of untrusted services...

CVE-2022-44555

The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable...

CVE-2023-41297

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...

CVE-2023-41297

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...

CVE-2023-41294

The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...

CVE-2023-41294

The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...

Spoofing

The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...

Design/Logic Flaw

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...

CVE-2023-41297

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking...