365 matches found
uc_browser_poc_CVE-2022-1364
UCBrowserExploit.js Introducción Todo el contenido a continuación se refiere al exploit del navegador UC explorado en este artículo publicado por Interrupt Labs. Primeros pasos Este exploit se relaciona con versiones anteriores del navegador UC que incluyen el error de RCE de CVE-2022-1364. Este...
XiongMai uc-httpd 1.0.0 - Buffer Overflow
Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. id: CVE-2018-10088 info: name: XiongMai uc-httpd 1.0.0 - Buffer Overflow author: 0xAkoko severity: critical description: | Buffer overflow in XiongMai uc-httpd 1.0....
uC_mousejack
μC Mousejack 微控制器Mousejack是一个项目，旨在将Mousejack攻击移植到小型嵌入式设备中，外形如同钥匙链。 Mousejack原型设备 我们的第一个版本采用了Adafruit Feather 32u4 protoboard和基于SPI的NRF24L01+模块。 构建设备很简单，代码提供了一个工具，可以使用Duckyscript对Microsoft和Logitech设备发起自动按键注入攻击。 构造 要构建你自己的设备，你需要以下组件： Adafruit Feather 32u4 protoboard或你选择的其他Arduino兼容板。...
the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xss
CVE-2026-78997 — UC Browser para Android Universal XSS UXSS Material PoC para CVE-2026-78997 — Universal Cross-Site Scripting en UC Browser para Android com.UCMobile.intl, versión 13.7.8.1314, divulgado por Omri Inbar Novee. Un XSS reflejado en el dominio incluido en la lista blanca del puente...
CVE-2026-78997
UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...
CVE-2026-78997
UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...
EUVD-2026-72957
UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...
PT-2026-87176
UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...
CVE-2026-78997
UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314 ) is affected by a Universal Cross-Site Scripting vulnerability. The root cause is a reflected XSS on a UC-owned domain that leverages the browser's internal JavaScript bridge to register a deferred callback. This allows an at...
CVE-2026-64511 ACPI: NFIT: core: Fix possible NULL pointer dereference
In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possible NULL pointer dereference After commit 9b311b7313d6 "ACPI: NFIT: Install Notify handler before getting NFIT table", acpinfitprobe installs an ACPI notify handler for the NFIT device before checking t...
Discuz! X5.0 - Authentication Bypass
Exploit Title: Discuz! X5.0 - Authentication Bypass CVE: CVE-2026-49952 Date: 2026-06-26 Exploit Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity Author GitHub: https://github.com/mbanyamer Author Blog : https://banyamersecurity.com/blog/ Vendor Homepage:...
VulnCheck KEV: CVE-2017-7577
XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request...
Malicious code in @uc-platform/auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75a6973fdd9ccfacf68c5e22e999a1e58cbac23ab40c5e3a1a751beeca3e35d The package @uc-platform/auth was found to contain malicious code...
MAL-2026-1640 Malicious code in @uc-platform/auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75a6973fdd9ccfacf68c5e22e999a1e58cbac23ab40c5e3a1a751beeca3e35d The package @uc-platform/auth was found to contain malicious code...
MAL-2026-1641 Malicious code in @uc-platform/user-service-client-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b540186390d5c469d9b5de607c8d6b64fc0315e70c245ec70c16f1732058cc The package @uc-platform/user-service-client-ts was found to contain malicious code...
Malicious code in @uc-platform/user-service-client-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b540186390d5c469d9b5de607c8d6b64fc0315e70c245ec70c16f1732058cc The package @uc-platform/user-service-client-ts was found to contain malicious code...
Malicious code in @uc-platform/advertisement-service-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b168c7f137b260fe9d6fa7c0962aa3ab273f66f1f5bfabe7f0daadeb79ef7323 The package @uc-platform/advertisement-service-client was found to contain malicious code...
SUSE CVE-2025-40181
In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP When running as an SNP or TDX guest under KVM, force the legacy PCI hole, i.e. memory between Top of Lower Usable DRAM and 4GiB, to be mapped as UC via a forc...
