117 matches found
ghidra
Dockerized Ghidra Build From the root directory of your Ghidra release, run the following command. root@kitploit: ./docker/build-docker-image.sh This will build the ghidra docker image with a tag corresponding to the release version of Ghidra. The MODE environment variable The Ghidra Docker...
toy-wasm-symbexp
toy-wasm-symbexp Questo è un interprete simbolico WASM giocattolo. Illustra i seguenti articoli: Parte 1 - Introduzione Parte 2 - Scrivere un interprete concreto - sfoglia il codice in questa fase Parte 3 - Scrivere un interprete simbolico - sfoglia il codice in questa fase Parte 4 - Scrivere un...
fusee-toy
Questo repository contiene il codice sorgente del progetto fusee-toy, la mia implementazione di base di CVE-2018-6242 nota anche come Fusée Gelée, o shofel2. È stato scritto a gennaio 2021 per approfondire la mia conoscenza della vulnerabilità. Questa implementazione è stata realizzata utilizzand...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: media: irtoy: free before error exiting The leak in the error handling path has been fixed...
CVE-2026-5471
A vulnerability was detected in Investory Toy Planet Trouble App up to 1.5.5 on Android. Impacted is an unknown function of the file assets/google-services-desktop.json of the component app.investory.toyfactory. The manipulation of the argument currentkey results in use of hard-coded cryptographi...
EUVD-2026-18799
A vulnerability was detected in Investory Toy Planet Trouble App up to 1.5.5 on Android. Impacted is an unknown function of the file assets/google-services-desktop.json of the component app.investory.toyfactory. The manipulation of the argument currentkey results in use of hard-coded cryptographi...
CVE-2026-5471
A vulnerability was detected in Investory Toy Planet Trouble App up to 1.5.5 on Android. Impacted is an unknown function of the file assets/google-services-desktop.json of the component app.investory.toyfactory. The manipulation of the argument currentkey results in use of hard-coded cryptographi...
CVE-2026-5471 Investory Toy Planet Trouble App app.investory.toyfactory google-services-desktop.json hard-coded key
A vulnerability was detected in Investory Toy Planet Trouble App up to 1.5.5 on Android. Impacted is an unknown function of the file assets/google-services-desktop.json of the component app.investory.toyfactory. The manipulation of the argument currentkey results in use of hard-coded cryptographi...
CVE-2026-5471 Investory Toy Planet Trouble App app.investory.toyfactory google-services-desktop.json hard-coded key
A vulnerability was detected in Investory Toy Planet Trouble App up to 1.5.5 on Android. Impacted is an unknown function of the file assets/google-services-desktop.json of the component app.investory.toyfactory. The manipulation of the argument currentkey results in use of hard-coded cryptographi...
CVE-2026-5471
A vulnerability was detected in Investory Toy Planet Trouble App up to 1.5.5 on Android. Impacted is an unknown function of the file assets/google-services-desktop.json of the component app.investory.toyfactory. The manipulation of the argument currentkey results in use of hard-coded cryptographi...
PT-2026-30194
A vulnerability was detected in Investory Toy Planet Trouble App up to 1.5.5 on Android. Impacted is an unknown function of the file assets/google-services-desktop.json of the component app.investory.toyfactory. The manipulation of the argument current key results in use of hard-coded cryptograph...
Investory Toy Planet Trouble App 安全漏洞
Investory Toy Planet Trouble App is an educational adventure game app developed by Investory. Versions of Investory Toy Planet Trouble App prior to 1.5.5 contained a security vulnerability, which was caused by the use of a hardcoded encryption key for the parameter currentkey...
Fake shops target Winter Olympics 2026 fans
If you've seen the two stoat siblings serving as official mascots of the Milano Cortina 2026 Winter Olympics, you already know Tina and Milo are irresistible. Designed by Italian schoolchildren and chosen from more than 1,600 entries in a public poll, the duo has already captured hearts worldwide...
An AI plush toy exposed thousands of private chats with children
Bondu’s AI plush toy exposed a web console that let anyone with a Gmail account read about 50,000 private chats between children and their cuddly toys. Bondu's toy is marketed as: “A soft, cuddly toy powered by AI that can chat, teach, and play with your child.” What it doesn’t say is that anyone...
An AI Toy Exposed 50,000 Logs of Its Chats With Kids to Anyone With a Gmail Account
AI chat toy company Bondu left its web console almost entirely unprotected. Researchers who accessed it found nearly all the conversations children had with the company’s stuffed animals...
CVE-2024-39314
toy-blog is a headless content management system implementation. Starting in version 0.4.3 and prior to version 0.5.0, the administrative password was leaked through the command line parameter. The problem was patched in version 0.5.0. As a workaround, pass --read-bearer-token-from-stdin to the...
EUVD-2025-201487
Malicious code in elf-stats-cosy-toy-308 npm...
Malicious code in elf-stats-cosy-toy-308 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca3af23bbfec4f6a8b388056bdca1e75940f84912fc3413aa6f6ef991997df5 The package elf-stats-cosy-toy-308 was found to contain malicious code...
MAL-2025-192329 Malicious code in elf-stats-cosy-toy-308 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca3af23bbfec4f6a8b388056bdca1e75940f84912fc3413aa6f6ef991997df5 The package elf-stats-cosy-toy-308 was found to contain malicious code...