androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

asterisk

La PBX de código abierto AsteriskR By Mark Spencer and the Asterisk.org developer community. Copyright C 2001-2025 Sangoma Technologies Corporation and other copyright holders. SEGURIDAD Es imprescindible que lea y comprenda completamente el contenido del documento de información de seguridad ant...

CVE

CVE Una colección de scripts de proof-of-concept escritos por el equipo de STAR Labs para varios CVEs que descubrieron o que fueron encontrados por otros. CVE-2026-53264 Objetivo: Linux Kernel Versión: CentOS 9 kernel version 5.14.0-721 Exploit escrito por: Lee Jia Jie CVE-2025-29824 Objetivo:...

CVE-2025-10184_PoC

APK Build for CVE‑2025‑10184 PoC 这是一个 CVE‑2025‑10184 的 PoC 的 APK 构建 该漏洞存在于 com..providers.telephony 中, 允许任意应用在未获得 SMS 读取权限的情况下读取短信 源码 此源码及更多细节可见 Rapid7 的文章： https://www.rapid7.com/blog/post/cve-2025-10184-oneplus-oxygenos-telephony-provider-permission-bypass-not-fixed/ 下载 请登录后在 Actions 下载 未签名 的安装...

ColorOS-CVE-2025-10184

信息来源 漏洞原理及解决方案技术原理 漏洞说明 类型：数据库注入攻击1=1 AND 效果：任意APP读取短信数据。 无需权限、无需用户交互、无感知读取 影响：本机的所有短信信息、短信验证码泄露 涉及范围：OPPO 及其子品牌一加、realme 影响范围：根据maoyixuan提交的机型显示， 17年发布的ColorOS 6.0.1存在漏洞，此漏洞可能伴随了OPPO的OEM生涯 修复情况：10月4日开始对ColorOS 15推送系统文件更新：15.0.0.860Patch01|1.9MB，10月9日对ColorOS 12-14推送 测试漏洞：国内下载...

The vulnerability of the Windows operating system’s Telephony Service allows attackers to escalate their privileges.

The vulnerability of the Windows operating system’s Telephony Service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Operating System’s Telephony Service allows attackers to exploit their privileges.

The vulnerability of the Windows Operating System’s Telephony Service is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-62727

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62727 Windows Telephony Service Elevation of Privilege Vulnerability

...

EUVD-2026-63093

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62727

A race condition in Windows Telephony Service allows a locally authenticated low-privilege attacker to elevate privileges to SYSTEM. CVSS 3.1 base score 7.0 (HIGH). Microsoft has published an update guide; apply the patch from the MSRC link. No exploitation details or in-the-wild activity are pro...

CVE-2026-62727 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62727: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70725

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-70722

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

EUVD-2026-61680

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-61677

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

CVE-2026-70725: Improper Access Control

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-70722: Improper Access Control

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

PT-2026-77724

Name of the Vulnerable Software and Affected Versions Oracle Advanced Inbound Telephony versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead ...