uc_browser_poc_CVE-2022-1364

UCBrowserExploit.js 소개 아래의 모든 내용은 Interrupt Labs가 게시한 문서에서 다루는 UC Browser 익스플로잇을 참조합니다. 시작하기 이 익스플로잇은 CVE-2022-1364의 RCE 버그를 포함하는 이전 버전의 UC Browser와 관련이 있습니다. 이 버그는 2024년 말 UC 브라우저에서 패치되었습니다. 이 익스플로잇을 실행하는 데 추가 종속성은 없습니다. 제공된 문서 링크를 확인하여 브라우저 및 익스플로잇 설치 과정을 확인하시기 바랍니다...

uC_mousejack

μC Mousejack 마이크로컨트롤러 Mousejack은 Mousejack 공격을 열쇠고리 크기의 소형 임베디드 기기에서 수행할 수 있도록 하는 프로젝트입니다. 프로토타입 Mousejack 기기 첫 번째 버전은 Adafruit Feather 32u4 프로토보드와 SPI 기반 NRF24L01+ 모듈을 사용합니다. 기기 제작은 간단하며, 코드는 Duckyscript를 사용하여 Microsoft 및 Logitech 장치에 대해 자동 키 입력 주입 공격을 실행하는 도구를 제공합니다. 제작 자체 기기를 제작하려면 다음 구성 요소가...

XiongMai uc-httpd 1.0.0 - Buffer Overflow

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. id: CVE-2018-10088 info: name: XiongMai uc-httpd 1.0.0 - Buffer Overflow author: 0xAkoko severity: critical description: | Buffer overflow in XiongMai uc-httpd 1.0....

the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xss

CVE-2026-78997 — UC 브라우저 for Android 범용 XSS UXSS CVE-2026-78997 에 대한 PoC 자료 — UC 브라우저 for Android com.UCMobile.intl, 버전 13.7.8.1314의 범용 크로스 사이트 스크립팅Universal Cross-Site Scripting, Omri Inbar Novee에 의해 공개됨. 브리지 화이트리스트에 등록된 도메인 mtmsg.uc.cn에서의 반사형 XSS는 권한이 있는 ucapi JavaScript 브리지에 대한 접근을 허용한다...

Exploit for CVE-2026-78997

CVE-2026-78997 — UC Browser for Android Universal XSS UXSS...

CVE-2026-78997

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

CVE-2026-78997

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

EUVD-2026-72957

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

PT-2026-87176

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

CVE-2026-78997

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

CVE-2026-78997

UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314 ) is vulnerable to a Universal Cross-Site Scripting (UXSS) flaw. The issue stems from a reflected XSS on the bridge-whitelisted domain mtmsg.uc.cn, which allows attackers to access the privileged ucapi JavaScript bridge. Speci...

CVE-2026-78997: Improper Neutralization of Input During Web Page Generation

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

CVE-2026-64511 ACPI: NFIT: core: Fix possible NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possible NULL pointer dereference After commit 9b311b7313d6 "ACPI: NFIT: Install Notify handler before getting NFIT table", acpinfitprobe installs an ACPI notify handler for the NFIT device before checking t...

📄 Discuz! X5.0 Authentication Bypass

Discuz! X5.0 suffers from an authentication bypass vulnerability. Exploit Title: Discuz! X5.0 - Authentication Bypass CVE: CVE-2026-49952 Date: 2026-06-26 Exploit Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity Author GitHub: https://github.com/mbanyamer Autho...

Discuz! X5.0 - Authentication Bypass

Exploit Title: Discuz! X5.0 - Authentication Bypass CVE: CVE-2026-49952 Date: 2026-06-26 Exploit Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity Author GitHub: https://github.com/mbanyamer Author Blog : https://banyamersecurity.com/blog/ Vendor Homepage:...

VulnCheck KEV: CVE-2017-7577

XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request...

MAL-2026-1641 Malicious code in @uc-platform/user-service-client-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b540186390d5c469d9b5de607c8d6b64fc0315e70c245ec70c16f1732058cc The package @uc-platform/user-service-client-ts was found to contain malicious code...

MAL-2026-1640 Malicious code in @uc-platform/auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75a6973fdd9ccfacf68c5e22e999a1e58cbac23ab40c5e3a1a751beeca3e35d The package @uc-platform/auth was found to contain malicious code...

Malicious code in @uc-platform/auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75a6973fdd9ccfacf68c5e22e999a1e58cbac23ab40c5e3a1a751beeca3e35d The package @uc-platform/auth was found to contain malicious code...

Malicious code in @uc-platform/user-service-client-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b540186390d5c469d9b5de607c8d6b64fc0315e70c245ec70c16f1732058cc The package @uc-platform/user-service-client-ts was found to contain malicious code...