3385 matches found
asterisk
The AsteriskR Open Source PBX By Mark Spencer and the Asterisk.org developer community. Copyright C 2001-2025 Sangoma Technologies Corporation and other copyright holders. SECURITY It is imperative that you read and fully understand the contents of the security information document before you...
androguard
Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...
CVE
CVE A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others. CVE-2026-53264 Target: Linux Kernel Version: CentOS 9 kernel version 5.14.0-721 Exploit Written By: Lee Jia Jie CVE-2025-29824 Target: Windows Common Log Fi...
CVE-2025-10184_PoC
APK Build for CVE‑2025‑10184 PoC This is an APK Build for a PoC of CVE‑2025‑10184 The vulnerability exists in com..providers.telephony, allowing arbitrary applications to read SMS messages without SMS read permission Source Code The source code and more details can be found in Rapid7's article:...
ColorOS-CVE-2025-10184
Information Source Vulnerability Principle & Solution Technical Analysis Vulnerability Details Type: Database injection attack 1=1 AND Impact: Any app can read SMS data. No permissions required, no user interaction, undetectable reading Affected: All SMS messages and verification codes on the...
CVE-2026-119886
Missing authentication for critical function in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-116700
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges with a physical attack...
CVE-2026-108413
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-108408
Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally...
EUVD-2026-122394
Missing authentication for critical function in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-119886
The Windows Telephony Service is vulnerable to a local elevation of privilege due to missing authentication for a critical function. This vulnerability allows an authorized attacker to escalate their privileges on a local system. Exploitation details and specific affected version numbers are not ...
EUVD-2026-122082
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges with a physical attack...
CVE-2026-116700
A heap-based buffer overflow exists in the Windows Telephony Service that could allow an authorized attacker to elevate privileges during a physical attack. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). Specific technical d...
EUVD-2026-122057
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-108413
A Use after free vulnerability exists in the Windows Telephony Service , which could allow an authorized attacker to achieve local privilege elevation . Exploitation details are not provided in the documents. Remediation is available via official Microsoft security updates, such as those included...
CVE-2026-108408
A vulnerability exists in the Windows Telephony Service caused by an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. While the specific exploit details are not provided in the documentation, the ...
EUVD-2026-121985
Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally...
Windows Telephony Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges with a physical attack...