asterisk

The AsteriskR Open Source PBX By Mark Spencer and the Asterisk.org developer community. Copyright C 2001-2025 Sangoma Technologies Corporation and other copyright holders. SECURITY It is imperative that you read and fully understand the contents of the security information document before you...

CVE

CVE A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others. CVE-2026-53264 Target: Linux Kernel Version: CentOS 9 kernel version 5.14.0-721 Exploit Written By: Lee Jia Jie CVE-2025-29824 Target: Windows Common Log Fi...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

CVE-2025-10184_PoC

APK Build for CVE‑2025‑10184 PoC This is an APK Build for a PoC of CVE‑2025‑10184 The vulnerability exists in com..providers.telephony, allowing arbitrary applications to read SMS messages without SMS read permission Source Code The source code and more details can be found in Rapid7's article:...

ColorOS-CVE-2025-10184

Information Source Vulnerability Principle & Solution Technical Analysis Vulnerability Details Type: Database injection attack 1=1 AND Impact: Any app can read SMS data. No permissions required, no user interaction, undetectable reading Affected: All SMS messages and verification codes on the...

EUVD-2026-106038

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-101630

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-101630

A vulnerability exists in the Internal Operations component of Oracle Advanced Outbound Telephony (part of Oracle E-Business Suite) affecting versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the product, though successful executi...

PT-2026-119310

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Oracle E-Business Suite: CVE-2026-101630: Critical Patch Update

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-85810

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...

CVE-2026-84013

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...

CVE-2026-85810

A Use after free vulnerability in the Windows Telephony Server allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 . While the CVSS 3.1 score indicates a High severity (7.0) with local access and low privileges required, specific tec...

CVE-2026-84013

A use after free vulnerability exists in the Windows Telephony Server component. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8. No specific exploit links or detailed remediation steps are provided i...

Windows Telephony Server Elevation of Privilege Vulnerability

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...

Windows Telephony Server Elevation of Privilege Vulnerability

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...

PT-2026-112777

Name of the Vulnerable Software and Affected Versions Windows Telephony Server affected versions not specified Description A use-after-free condition exists in the Windows Telephony Server. This allows an authorized attacker to elevate privileges locally on the system. Use-after-free is a memory...

Microsoft Windows: CVE-2026-85810: Windows Telephony Server Elevation of Privilege Vulnerability

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...

CVE-2026-84013: Use After Free

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-84013: Windows Telephony Server Elevation of Privilege Vulnerability

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...