2852 matches found
androguard
Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...
asterisk
AsteriskR オープンソースPBX root@kitploit: By Mark Spencer and the Asterisk.org developer community. Copyright C 2001-2025 Sangoma Technologies Corporation and other copyright holders. セキュリティ Asteriskサーバの設定と実行を試みる前に、セキュリティ情報ドキュメントの内容を読み、完全に理解することが必須です。 詳細については重要なセキュリティ上の考慮事項を参照してください。 Asteriskとは？...
CVE
CVE Una colección de scripts de proof-of-concept escritos por el equipo de STAR Labs para varios CVEs que descubrieron o que fueron encontrados por otros. CVE-2026-53264 Objetivo: Linux Kernel Versión: CentOS 9 kernel version 5.14.0-721 Exploit escrito por: Lee Jia Jie CVE-2025-29824 Objetivo:...
ColorOS-CVE-2025-10184
情報源 脆弱性の原理と解決策の技術的解説 脆弱性の説明 タイプ：データベースインジェクション攻撃1=1 AND 影響：任意のアプリがSMSデータを読み取る。 権限不要、ユーザー操作不要、気付かれずに読み取り 影響範囲：端末上のすべてのSMS情報、SMS認証コードの漏洩 対象：OPPOおよびそのサブブランド（OnePlus、realme） 影響範囲：maoyixuan が提出した端末モデルによると、 2017年にリリースされたColorOS 6.0.1に脆弱性が存在し、この脆弱性はOPPOのOEMの歴史に長く付きまとった可能性がある 修正状況：10月4日よりColorOS...
CVE-2025-10184_PoC
APK Build for CVE‑2025‑10184 PoC これは CVE‑2025‑10184 の PoC の APK ビルドです この脆弱性は com..providers.telephony に存在し、SMS読み取り権限を持たない任意のアプリがSMSを読み取ることを許可します ソースコード このソースコードと詳細は Rapid7 の記事をご覧ください： https://www.rapid7.com/blog/post/cve-2025-10184-oneplus-oxygenos-telephony-provider-permission-bypass-not-fixed/...
The vulnerability of the Windows operating system’s Telephony Service allows attackers to escalate their privileges.
The vulnerability of the Windows operating system’s Telephony Service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2026-62727
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62727 Windows Telephony Service Elevation of Privilege Vulnerability
...
EUVD-2026-63093
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62727
A race condition in Windows Telephony Service allows a locally authenticated low-privilege attacker to elevate privileges to SYSTEM. CVSS 3.1 base score 7.0 (HIGH). Microsoft has published an update guide; apply the patch from the MSRC link. No exploitation details or in-the-wild activity are pro...
CVE-2026-62727 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-70725
Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-70722
Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...
EUVD-2026-61680
Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
EUVD-2026-61677
Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...
PT-2026-77724
Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
Vulnerabilities in Microsoft Windows
Microsoft has fixed a large number of vulnerabilities in Windows. An attacker could exploit these vulnerabilities to carry out attacks that could result in the following types of damage, as listed in the table below. The most severe vulnerabilities are identified by the following CVE numbers:...
CVE-2026-62748
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...