truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

CVE-2026-43499-armv7

CVE-2026-43499 GhostLock — ARM32 Huawei Watch 4 Pro CVE-2026-43499 GhostLock 기반 Linux 커널 권한 상승 exploit 시도 — Huawei Watch 4 Pro MDS-AL00, armv7l 프로젝트 개요 이 프로젝트는 Huawei Watch 4 Pro MDS-AL00, Snapdragon SW5100, HarmonyOS 4.3.0 AOSP 12 기기를 대상으로 한 GhostLock 커널 취약점 exploit 시도이며, ARM 32-bit armv7l 아키텍처에...

dnsglobe

dnsglobe 터미널용 글로벌 DNS 전파 확인 도구 — 전 세계 34개 공용 DNS 리졸버를 병렬로 질의하고, 응답을 비교하며, 세계 지도에 레코드의 전파 상황을 표시하는 Rust TUI입니다. dnschecker.org / whatsmydns.net을 떠올리면 되지만, 터미널에서 동작하며 watch 모드가 있습니다: 확인을 시작하면 레코드가 모든 곳에 전파될 때까지 다시 폴링합니다. 리졸버는 글로벌 애니캐스트 네트워크Google, Cloudflare, Quad9, 북미, 유럽, 러시아, 중동, 동아시아, 그리고 남반구...

ChangeDetection.io <= v0.50.33 - Stored XSS via Watch API

changedetection.io = 0.50.34 contains a stored cross site scripting caused by insufficient security checks in the Watch update API, letting attackers execute arbitrary JavaScript when users preview malicious links, exploit requires user interaction id: CVE-2025-62780 info: name: ChangeDetection.i...

bandexploit

Band Exploit CVE-2018-11631 Gatttool을 사용하여 안전하지 않은 블루투스 저에너지 스마트워치M1 Band 1를 익스플로잇하는 간단한 Python 스크립트입니다. CVE-2018-11631 : https://nvd.nist.gov/vuln/detail/CVE-2018-11631 사용법: bandexploit.py 옵션 주소 옵션: -h, --help 도움말 메시지를 표시하고 종료합니다. -s, --sms 장치에 SMS 알림을 보냅니다. -c, --call 장치에 전화 알림을 보냅니다. -r REPEAT...

CVE-2025-32407

CVE-2025-32407 CVE-2025-32407에 대한 개념 증명: Samsung Galaxy Watch 앱 "Samsung Internet for Galaxy Watch" 버전 5.0.9의 TLS 인증서 검증의 잘못된 구성입니다. 설명 Galaxy Watch 앱 "Samsung Internet for Galaxy Watch" 버전 5.0.9 Samsung Galaxy Watch 3까지 사용 가능는 TLS 인증서를 제대로 검증하지 않아, 공격자가 사용자가 방문하는 모든 웹사이트를 가장할 수 있습니다. 이는 브라우저가 서버...

CMF-Watch-Pro-2-BLE-Protocol

CMF Watch Pro 2 — BLE 프로토콜 리버스 엔지니어링 비공식. 이 문서는 CMF Watch Pro 2 CMF by Nothing의 Bluetooth Low Energy BLE 프로토콜을 대체 컴패니언 앱을 위해 리버스 엔지니어링으로 재구성한 것입니다. Nothing/CMF와 제휴하거나 보증하지 않습니다. 사용에 따른 책임은 본인에게 있습니다. 프레임 헤더와 opcode의 모든 멀티바이트 정수는 빅엔디언입니다. 명령 페이로드 내부의 정수 는 별도로 명시되지 않는 한 리틀엔디언입니다이는 기기 펌웨어를 반영함 —...

ghostlock-oppo-watch3pro

GhostLock CVE-2026-43499 — OPPO Watch 3 Pro 전체 연구 사례 OPPO Watch 3 Pro OWW211, ColorOS Watch 중국판, Android 11, ARM32에서 CVE-2026-43499 GhostLock, rtmutex/futex-PI 스택 UAF에 대한 전체 익스플로잇 연구. 최종 결론: 체인 쓰기 메커니즘은 OPPO 00522 msm-5.4 재구성판 rtmutex에서 트리거 즉시 크래시되어 익스플로잇을 완료할 수 없음. 모든 트리거 방식T2 requeue /...

CVE-2026-41940

Watch Tower POC를 기반으로 하며, 웹소켓을 통한 직접 셸 접근을 지원하고, 지속성을 위해 루트 API 키를 추가할 수 있습니다...

PT-2026-96857

A vulnerability was found in dgtlmoon changedetection.io up to 50389b07. This vulnerability affects the function add watch ui snapshot of the file changedetectionio/blueprint/add watch ui/ init .py of the component Preview Endpoint. Performing a manipulation of the argument url results in...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: watchqueue: Free the page array when watchqueue is dismantled Commit 7ea1a0124b6d “watchqueue: Free the alloc bitmap when the watchqueue is torn down” addressed the issue with the bitmap, but not the page array. BUG: Memory leak...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: watchqueue: Fixed NULL dereference in error cleanup. In watchqueuesetsize, the error cleanup code does not take into account the fact that freepage cannot handle a NULL pointer when trying to free buffer pages that have been...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: watchqueue: fix pipe accounting mismatch Currently, watchqueuesetsize modifies the pipe buffers allocated to user-pipebufs, without updating the pipe-nraccounted value on the pipe itself. This occurs due to the if...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: watchqueue: Fix for filter limit check In watchqueuesetfilter, there are several places where we check that the filter type value does not exceed what the typefilter bitmap can hold. One place calculates the number of bits using...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: inotify: Avoid reporting events with an invalid wd value. When inotifyfreeingmark races with inotifyhandleinodeevent, it is possible that inotifyhandle inodeevent sees that imark-wd has already been reset to -1 and reports this...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: watchqueue: Actually free the watch object. The freewatch function does everything except actually freeing the watch object. This issue is fixed by adding the missing kfree call. KMEMLEAK generates a report similar to the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: libceph: The calctarget function should set t-paused, rather than simply clearing it. Currently, calctarget clears t-paused if the request should no longer be paused. However, it never sets t-paused, even though it can determine...

Astra Linux – Vulnerability in Linux

A issue was discovered in Xen through version 4.14.x. Some operating systems, such as Linux, FreeBSD, and NetBSD, process watch events using a single thread. If these events are received faster than the thread can handle them, they will be queued up. Since the queue is unbounded, a guest system m...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

A race condition was detected in the Linux kernel’s watch queue due to a missing lock in the piperesizering function. The specific flaw lies in the handling of pipe buffers. The problem arises from the lack of proper locking when performing operations on an object. This flaw allows a local user t...

Astra Linux – Vulnerability in Linux 5.10

A out-of-bounds memory write flaw was discovered in the Linux kernel’s watchqueue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system...