dnsglobe

dnsglobe Um verificador global de propagação de DNS para o seu terminal — uma TUI em Rust que consulta 34 resolvedores DNS públicos ao redor do mundo em paralelo, compara as respostas e mostra a propagação do seu registro em um mapa-múndi. Pense no dnschecker.org / whatsmydns.net, mas no seu...

CVE-2025-32407

CVE-2025-32407 CVE-2025-32407 के लिए प्रमाण अवधारणा: सैमसंग गैलेक्सी वॉच ऐप "Samsung Internet for Galaxy Watch" संस्करण 5.0.9 के TLS प्रमाणपत्र सत्यापन में एक गलत कॉन्फ़िगरेशन। विवरण गैलेक्सी वॉच ऐप "Samsung Internet for Galaxy Watch" संस्करण 5.0.9, जो सैमसंग गैलेक्सी वॉच 3 तक उपलब्ध है, TLS...

ChangeDetection.io <= v0.50.33 - Stored XSS via Watch API

changedetection.io = 0.50.34 contains a stored cross site scripting caused by insufficient security checks in the Watch update API, letting attackers execute arbitrary JavaScript when users preview malicious links, exploit requires user interaction id: CVE-2025-62780 info: name: ChangeDetection.i...

CVE-2026-43499-armv7

CVE-2026-43499 GhostLock — ARM32 Huawei Watch 4 Pro CVE-2026-43499 GhostLock पर आधारित Linux कर्नेल विशेषाधिकार वृद्धि शोषण प्रयास — Huawei Watch 4 Pro MDS-AL00, armv7l परियोजना अवलोकन यह परियोजना Huawei Watch 4 Pro MDS-AL00, Snapdragon SW5100, HarmonyOS 4.3.0 AOSP 12 डिवाइस के लिए GhostLock कर्न...

CMF-Watch-Pro-2-BLE-Protocol

CMF Watch Pro 2 — BLE प्रोटोकॉल रिवर्स-इंजीनियर्ड अनधिकृत। यह दस्तावेज़ CMF Watch Pro 2 CMF by Nothing के ब्लूटूथ लो एनर्जी BLE प्रोटोकॉल का वर्णन करता है, जिसे एक वैकल्पिक साथी ऐप के लिए रिवर्स इंजीनियरिंग द्वारा पुनर्निर्मित किया गया है। यह Nothing/CMF से संबद्ध या समर्थित नहीं है। अपने जोखिम प...

bandexploit

बैंड एक्सप्लॉइट CVE-2018-11631 Gatttool का उपयोग करके एक असुरक्षित ब्लूटूथ लो एनर्जी स्मार्ट वॉच M1 बैंड 1 का शोषण करने के लिए एक सरल पायथन स्क्रिप्ट। CVE-2018-11631 : https://nvd.nist.gov/vuln/detail/CVE-2018-11631 उपयोग: bandexploit.py options पता विकल्प: -h, --help यह सहायता संदेश दिखाएं और बा...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

CVE-2026-43679

This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user contacts...

CVE-2026-43679

This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user contacts...

EUVD-2026-63777

This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user contacts...

kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2

A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver component. A local user could exploit a boundary error in the debug address watch v2 functionality by providing a specially crafted watchid. This could lead to a buffer overflow, potentially allowing memory access outside of...

kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2

A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver component. A local user could exploit a boundary error in the debug address watch v2 functionality by providing a specially crafted watchid. This could lead to a buffer overflow, potentially allowing memory access outside of...

GO-2026-6114 Watch API authorization bypass in go.etcd.io/etcd/server/v3

In go.etcd.io/etcd/server/v3 before 3.5.33, 3.6.14, and 3.7.1, an authenticated user with READ permission on a single key can bypass RBAC restrictions by initiating an open-ended range watch using clientv3.WithFromKey. The Watch RPC handler normalized open-ended range ends prior to authorization...

CVE-2026-73499

A flaw was found in etcd, a distributed key-value store. A user with READ permission on a single key can bypass authorization checks in the Watch gRPC API by using open-ended range requests. This allows them to receive watch events for keys beyond their authorized scope, leading to information...

BIT-ETCD-2026-73499 etcd: Watch API authorization bypass via open-ended range requests

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a user granted READ permission on a single exact key can use the Watch gRPC API with clientv3.WithFromKey to receive watch events for every key lexicographically greater than o...

EUVD-2026-58542

streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated users to read and delete other users' viewing status records. Attackers can enumerate all users' watch progress, delete arbitrary viewing history, and manipulate other users'...

CVE-2026-73039 streama Insecure Direct Object Reference via ViewingStatusController

streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated users to read and delete other users' viewing status records. Attackers can enumerate all users' watch progress, delete arbitrary viewing history, and manipulate other users'...

CVE-2026-73039 streama Insecure Direct Object Reference via ViewingStatusController

streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated users to read and delete other users' viewing status records. Attackers can enumerate all users' watch progress, delete arbitrary viewing history, and manipulate other users'...

CVE-2026-58510

GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public-private...

CVE-2026-58510 GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private

GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public-private...