2389 matches found
dnsglobe
dnsglobe Un comprobador global de propagación DNS para tu terminal — una TUI de Rust que consulta 34 resolutores DNS públicos de todo el mundo en paralelo, compara sus respuestas y muestra la propagación de tu registro en un mapa mundial. Piensa en dnschecker.org / whatsmydns.net, pero en tu...
CVE-2026-43499-armv7
CVE-2026-43499 GhostLock — ARM32 Huawei Watch 4 Pro Intento de explotación de escalada de privilegios del kernel de Linux basado en CVE-2026-43499 GhostLock — Huawei Watch 4 Pro MDS-AL00, armv7l Resumen del proyecto Este proyecto es un intento de explotación del kernel mediante la vulnerabilidad...
ChangeDetection.io <= v0.50.33 - Stored XSS via Watch API
changedetection.io = 0.50.34 contains a stored cross site scripting caused by insufficient security checks in the Watch update API, letting attackers execute arbitrary JavaScript when users preview malicious links, exploit requires user interaction id: CVE-2025-62780 info: name: ChangeDetection.i...
CMF-Watch-Pro-2-BLE-Protocol
CMF Watch Pro 2 — Protocolo BLE ingeniería inversa No oficial. Este documento describe el protocolo Bluetooth Low Energy BLE del CMF Watch Pro 2 CMF by Nothing, reconstruido mediante ingeniería inversa para una aplicación complementaria alternativa. No está afiliado ni respaldado por Nothing/CMF...
bandexploit
Band Exploit CVE-2018-11631 Un script Python simple que utiliza Gatttool para explotar un reloj inteligente Bluetooth Low Energy inseguro M1 Band 1. CVE-2018-11631 : https://nvd.nist.gov/vuln/detail/CVE-2018-11631 Uso: bandexploit.py opciones Dirección Opciones: -h, --help muestra este mensaje de...
CVE-2025-32407
CVE-2025-32407 Prueba de concepto para CVE-2025-32407: una mala configuración en la validación de certificados TLS de la aplicación para Samsung Galaxy Watch "Samsung Internet for Galaxy Watch" versión 5.0.9. Descripción La aplicación para Galaxy Watch "Samsung Internet for Galaxy Watch" versión...
truegaze
truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: “pipe: wakeup wrwait after setting maxusage” The commit c73be61cede5 “pipe: Add general notification queue support” introduced a regression that could cause pipes with resized sizes to become locked under certain conditions. See...
ghostlock-oppo-watch3pro
GhostLock CVE-2026-43499 — OPPO Watch 3 Pro Complete Research Case Complete exploitation research on CVE-2026-43499 GhostLock, rtmutex/futex-PI stack UAF on the OPPO Watch 3 Pro OWW211, ColorOS Watch China version, Android 11, ARM32. Final conclusion: the chain-walk write mechanism crashes on...
EUVD-2026-76068
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the Bookmark plugin where chapter names are not encoded before being concatenated into public watch-page HTML. A video owner can inject malicious scripts via the bookmark name...
CVE-2026-89256 AVideo Bookmark Plugin Stored XSS via Chapter Names
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the Bookmark plugin where chapter names are not encoded before being concatenated into public watch-page HTML. A video owner can inject malicious scripts via the bookmark name...
CVE-2026-89256
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is affected by a stored cross-site scripting (XSS) vulnerability in its Bookmark plugin . The root cause is that chapter names are not HTML-encoded before being concatenated into public watch-page markup. A video owner can inject a ma...
CVE-2026-89253 AVideo Stored XSS via donationLink in watch page button
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the user 'donationLink' profile field. User::setDonationLink objects/user.php stores the value and save validates it only with filtervar..., FILTERVALIDATEURL, which accepts...
CVE-2026-89253 AVideo Stored XSS via donationLink in watch page button
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the user 'donationLink' profile field. User::setDonationLink objects/user.php stores the value and save validates it only with filtervar..., FILTERVALIDATEURL, which accepts...
EUVD-2026-76065
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the user 'donationLink' profile field. User::setDonationLink objects/user.php stores the value and save validates it only with filtervar..., FILTERVALIDATEURL, which accepts...
CVE-2026-89253
WWBN AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) has a stored cross-site scripting (XSS) vulnerability in the user donationLink profile field. The value is validated only with filter_var(..., FILTER_VALIDATE_URL), which accepts injected payloads, and is output via strip_tags(...
PT-2026-89859
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the Bookmark plugin where chapter names are not encoded before being concatenated into public watch-page HTML. A video owner can inject malicious scripts via the bookmark name...
USN-8740-1: .NET vulnerabilities
Weeraphat Srisutham discovered that the .NET watch BrowserRefreshServer did not properly validate cross-origin WebSocket connections. An attacker could possibly use this issue to expose sensitive information. CVE-2026-58649 Rajesh Chada discovered that the .NET watch AspireServerService improperl...
USN-8740-1 dotnet8, dotnet10 vulnerabilities
Weeraphat Srisutham discovered that the .NET watch BrowserRefreshServer did not properly validate cross-origin WebSocket connections. An attacker could possibly use this issue to expose sensitive information. CVE-2026-58649 Rajesh Chada discovered that the .NET watch AspireServerService improperl...