CVE-2026-114357

Missing authentication for a critical function in the Android Debug Bridge daemon adbd in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to obtain an unauthenticated shell uid 2000, a foothold for privilege escalation to root. The device ships with ro.adb.secure=0 no...

CVE-2026-114357 DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0)

Missing authentication for a critical function in the Android Debug Bridge daemon adbd in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to obtain an unauthenticated shell uid 2000, a foothold for privilege escalation to root. The device ships with ro.adb.secure=0 no...

CVE-2026-114357

The DJI CrystalSky ZS600C (firmware v0.3.9.7 through v0.6.6.9 ) is vulnerable to an unauthenticated shell access due to the Android Debug Bridge daemon (adbd) shipping with ro.adb.secure=0 , meaning it lacks host key authorization. Attackers can obtain a shell with uid 2000 , providing a foothold...

EUVD-2026-108990

Missing authentication for a critical function in the Android Debug Bridge daemon adbd in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to obtain an unauthenticated shell uid 2000, a foothold for privilege escalation to root. The device ships with ro.adb.secure=0 no...

PT-2026-122099

Missing authentication for a critical function in the Android Debug Bridge daemon adbd in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to obtain an unauthenticated shell uid 2000, a foothold for privilege escalation to root. The device ships with ro.adb.secure=0 no...

Malicious code in crypto-mnemonic-tools (RubyGems)

Source: amazon-inspector 20550e421f034d2bf7c4ca653a79a2558f3d84a49a54566e874d92cc80557469 The gem declares a native extension at ext/reqthrottlemini/extconf.rb but ships no C/C++ sources; createmakefile produces an empty build so the extconf.rb exists solely to execute code at gem install time. T...

MAL-2026-17595 Malicious code in crypto-mnemonic-tools (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Missing Authentication for Critical Function

Overview marimo is an A library for making reactive notebooks and apps Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the terminal/ws WebSocket endpoint, which lacks authentication validation. An unauthenticated attacker can gain unauthorized...

CVE-2025-25734

Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units RSUs v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 was discovered to contain an unauthenticated EFI shell which allows attackers to execute arbitrary code or escalate privileges during the boot process...

CVE-2025-25734

The Kapsch TrafficCom RIS-9160 and RIS-9260 Roadside Units (RSUs) in versions v3.2.0.829.23 , v3.8.0.1119.42 , and v4.6.0.1211.28 are vulnerable to an unauthenticated EFI shell . This flaw allows an attacker to execute arbitrary code or escalate privileges during the boot process. The root cause ...

CVE-2022-23729

When the device is in factory state, it can be access the shell without adb authentication process. The LG ID is LVE-SMP-210010...

CVE-2017-1000215

CVE-2017-1000215 affects ROOT xrootd versions 4.6.0 and earlier, exposing an unauthenticated shell command injection that enables remote code execution. The vulnerability is documented across multiple advisories (NVD, SUSE, Gentoo GLSA) indicating remote code execution via a shell command injecti...

Basic Contact Form <= 1.0.3 - Potential Unauthenticated Shell Upload

Uploading attachments in the contact form allows to run any kind of PHP code depending on the server config. The issue is related to this https://www.exploit-db.com/exploits/10089/ one. Explanation there will help to understand the problem. Following code is part of the function...

WP Symposium <= 14.11 - Unauthenticated Shell Upload

The wp-symposium WordPress plugin was affected by an Unauthenticated Shell Upload security vulnerability...

WordPress Plugin wpDataTables 1.5.3 - Arbitrary File Upload

WordPress Plugin wpDataTables 1.5.3 - Arbitrary File Upload !/usr/bin/python Exploit Name: Wordpress wpDataTables 1.5.3 and below Unauthenticated Shell Upload Vulnerability Vulnerability discovered by Claudio Viviani Date : 2014-11-22 Exploit written by Claudio Viviani Video Demo:...

Wordpress wpDataTables 1.5.3 shell Upload Exploit

The wordpress premium plugin wpDataTables 1.5.3 and below suffers from Unauthenticated Shell Upload Vulnerability !/usr/bin/python Exploit Name: Wordpress wpDataTables 1.5.3 and below Unauthenticated Shell Upload Vulnerability Vulnerability discovered by Claudio Viviani Date : 2014-11-22 Exploit...

Barclaycart - Unauthenticated Shell Upload

The Barclaycart WordPress plugin was found to be vulnerable to an Unauthenticated Shell Upload security vulnerability, due to using a vulnerable version of the third-party uploadify dependency. This issue has been seen exploited in the wild. PoC "@$uploadfile",...