1249 matches found
IonStack-S22U
CVE-2026-43499 - Galaxy S22 Ultra https://github.com/user-attachments/assets/f3d0858d-f8f5-444f-8ae5-541c2bc744c3 | ---|--- | This repository contains a device-specific port of the CVE-2026-43499 exploit for the Samsung Galaxy S22 Ultra SM-S908W. Supported target root@kitploit: Device: Samsung...
f32
f32 는 USB-C 리셉터클 바로 뒤에 장착되도록 설계된 초소형 ESP32 개발 보드입니다. PCB 크기는 9.85 mm x 8.45 mm에 불과합니다. ESP32-C3FH4 마이크로컨트롤러로 구동되며, 주로 연구 목적과 ESP32에 대한 일종의 스트레스 테스트를 위해 제작되었습니다. 많은 표준 설계 지침을 의도적으로 무시했기 때문입니다. 노출된 GPIO는 단 하나이며 온보드 LED에 연결되어 있으므로, 여기서의 개발은 주로 Wi-Fi/웹에 맞춰질 것입니다. f32를 테스트하기 위해 사용자가 상호작용할 수 있는 예제...
CVE-2026-43499-S25U
Galaxy S25 Ultra용 CVE-2026-43499 PoC 한국 Samsung Galaxy S25 Ultra에서 CVE-2026-43499에 대한 기기별 개념 증명 PoC입니다. 지원 대상 root@kitploit: Model: SM-S938N Codename: pa3q Android: 16 / API 36 Build: S938NKSUACZF1 Display ID: BP4A.251205.006.S938NKSUACZF1 Fingerprint:...
CVE-2026-43499-S24U
Galaxy S24 Ultra（SM-S928U1）向け CVE-2026-43499 PoC ファームウェア S928USQS6DZF2 （アプリドメイン / 本番パス）上の米国版 Samsung Galaxy S24 Ultra を対象とした、CVE-2026-43499 のデバイス固有研究ポートです。 このリポジトリは CVE-2026-43499-S25U の S24U 版です。現在の不完全な 進捗を記録しています。制御プレーンと残存スタック UAF の武装は完了していますが、クリーンなゲート書き込み（hits0）はまだ 達成されていません。 対応ターゲット...
webkiller
WebKiller V2 Tool Information Gathering Write With Python. PreView root@kitploit: ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║...
cve-2026-43499-m3q-azf1
GhostLock SELinux park — SM-S948U1 / AZF1 m3q Samsung Galaxy S26 Ultra（SM-S948U1、コードネーム m3q ）をファームウェア S948U1UES3AZF1 （GKI 6.12.30-android16-5）上で動作させる、機能するSELinux専用park の研究スナップショット。 このパッケージは完全なrootではありません 。SELinuxをPermissiveに切り替え、後続の作業に十分な期間reclaimを保持します。ここではホストuid=0は達成されません。 これはGhostLock /...
Users Ultra <= 3.1.0 - SQL Injection
The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the datatarget parameter before it is being interpolated in an SQL statement and then executed via the ratingvote AJAX action available to both unauthenticated and authenticated users, leading to an SQL Injection...
CVE-2026-84750
The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uploaded through one of its form fields, and stores them at a predictable public path with the attacker-chosen extension intact, allowing unauthenticated users to upload arbitrary...
CVE-2026-84750
The Ultra Addons for Contact Form 7 WordPress plugin (versions 3.2.4–3.5.50 ) allows unauthenticated users to upload arbitrary files through its Signature Field because the plugin does not validate file type or extension and stores uploads at a predictable public path with the attacker-chosen ext...
CVE-2026-84750 Ultimate Addons for Contact Form 7 3.2.4 - 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Field
The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uploaded through one of its form fields, and stores them at a predictable public path with the attacker-chosen extension intact, allowing unauthenticated users to upload arbitrary...
EUVD-2026-83502
The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uploaded through one of its form fields, and stores them at a predictable public path with the attacker-chosen extension intact, allowing unauthenticated users to upload arbitrary...
rmg-s9180-fzg1
Root My Galaxy SM-S9180 dm3q — FZG1 payload ports Ports of the CVE-2026-43499 payload UAF → KernelSU LKM temporary root for Samsung Galaxy S23 Ultra SM-S9180 dm3q. Hong Kong TGY — S9180ZHS8FZG1 Kernel: 5.15.189-android13-8-33413713-abS9180ZHS8FZG1 2026-07-05 security patch Root method:...
CVE-2026-93129
CVE-2026-93129 affects the Linux kernel driver platform/x86: dell-wmi-base . The root cause is an incorrect buffer index used when processing the "ultra performance" key from Dell WMI events. The event data passed to dell_wmi_process_key() is already parsed such that the buffer starts after the t...
cve-2021-44228-log4j-exploits
CVE-2021-4428 재현 본 DEMO는 Log4j2 초고위험 RCE 취약점 CVE-2021-4428의 재현 DEMO로, 해당 취약점의 위험성을 인지하고 사용자 시스템의 상황에 따라 맞춤형 방어를 수행하는 것을 목적으로 합니다. 경고 본 DEMO는 기술적 측면에 대한 연구일 뿐이며, 악의적인 원격 컴퓨터 침입과 관련된 스크립트는 포함하지 않습니다. 취약점을 이용하여 타인의 컴퓨터를 불법 침입하는 위법 활동을 삼가시기 바랍니다. 위반할 경우 다음과 같은 책임을 부담할 수 있습니다. 1. 《中华人民共和国治安管理处罚法》제29조에...
Astra Linux – Vulnerability in Intel Microcode
The sequence of processor instructions in IntelR CoreTM Ultra Processors may lead to unexpected behaviors. This could potentially allow an authenticated user to enable denial of service through local access...
CVE-2025-70820
Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder...
CVE-2025-70819
Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/hetc:rw in a compose file...
CVE-2025-70819
Zettlab D6 Ultra before 1.7.0 is vulnerable to a directory traversal flaw in its compose-file volume handling. An attacker with low-privilege local access can craft a volume entry using repeated .. segments (e.g., ../../../../../../../etc:/h_etc:rw) to mount the host's /etc/passwd and /etc/shadow...