OrganizerTransaction

यह CVE-2021-39749 के लिए PoC है, जो Android 12L Beta पर उनकी permission और exported सेटिंग्स की परवाह किए बिना अन्य ऐप्स की activities शुरू करने की अनुमति देता है Android 12L में TaskFragmentOrganizer एक्सेस जानबूझकर अब MANAGEACTIVITYTASKS permission की आवश्यकता नहीं रखता यहाँ दिए गए ऐप का उपयोग...

CVE-2026-80562

A flaw was found in the Linux kernel's gpio: ml-ioh component. An incorrect spinlock type spinlockt was used in interrupt handling routines where a non-sleeping lock rawspinlockt was required. This could lead to invalid lock acquisition, potentially causing system instability or a denial of...

CVE-2026-80553

A flaw was found in the s390/vfioccw component of the Linux kernel. This vulnerability arises from the improper management of workqueues, where existing tasks might not be canceled before associated resources are released. A local attacker could potentially leverage this issue to trigger a...

CVE-2020-14372

CVE-2020-14372: Contornando o Secure Boot nem tão seguro com um "truque simples" Detalhes da vulnerabilidade Um dia digitei "help" no console do GRUB2 e vi alguns comandos muito "divertidos": readbyte ADDR: Lê um valor de 8 bits de ADDR writebyte ADDR VAL: Escreve o valor de 8 bits VAL em ADDR...

CVE-2026-24854-ChurchCRM-6.7.2-Authenticated-Numeric-SQL-Injection

CVE-2026-24854 – ChurchCRM प्रमाणित संख्यात्मक SQL इंजेक्शन लॉजिक मैनिपुलेशन PoC लेखक: मोहम्मद इदरीस बन्यामेर देश: जॉर्डन हैंडल: @banyamersecurity GitHub: https://github.com/mbanyamer अवलोकन इस रिपॉजिटरी में ChurchCRM के 6.7.2 से पहले के संस्करणों में प्रमाणित संख्यात्मक SQL इंजेक्शन भेद्यता का...

tryhackme-ctf-writeups

TryHackMe Write-Ups Thirteen rooms, solved and then explain...

BIT-NEO4J-ENTERPRISE-2026-1524 Auth misconfiguration when multiple providers enabled

An edgecase in SSO implementation in Neo4j Enterprise edition versions prior to version 2026.02 can lead to unauthorised access under the following conditions: If a neo4j admin configures two or more OIDC providers AND configures one or more of them to be an authorization provider AND configures...

BIT-NEO4J-ENTERPRISE-2026-1471 Caching of authentication context

Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.1.4 leads to authenticated users inheriting the context of the first user who authenticated after restart. The issue is limited to certain non-default configurations of SSO UserInfo endpoint. We recomme...

Security Bulletin: Multiple Vulnerabilities in IBM Concert Software

Summary Multiple vulnerabilities were addressed in IBM Concert Software version 3.0.0 Vulnerability Details CVEID:CVE-2026-26996 DESCRIPTION: minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular...

attack-attention

Atacar a Atenção de Modelos de Fundação Interrompe Eficazmente Tarefas Downstream Implementação oficial em PyTorch do artigo "Atacar a Atenção de Modelos de Fundação Interrompe Eficazmente Tarefas Downstream" , aceite no Workshop Adversarial Machine Learning on Computer Vision: Foundation Models ...

CVE-2026-81579 An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...

CVE-2026-81579

WibuKey for Windows (versions before 6.71 ) is affected by an untrusted pointer dereference in the WibuKey2_64.sys kernel driver (64-bit Windows), which exposes a write-what-where primitive. This enables a local unprivileged user to escalate privileges, potentially executing arbitrary code, spawn...

EUVD-2026-66984

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...

Vulnerabilities found in Ubiquiti’s UniFi products

Ubiquiti has identified vulnerabilities in various UniFi products, including UniFi Protect, UniFi OS, UniFi Network Application, UniFi Connect, UniFi Access Application, UniFi OS Server, UID Enterprise Agent, UniFi Connect Display Cast Pro, UniFi Enterprise Audio/Video Bridge, and UniFi Talk. The...

CVE-2022-31061

CVE-2022-31061 PoC para GLPI CVE-2022-31061 Uma Prova de Conceito para GLPI = 9.3.0 e 10.0.2 - Injeção SQL não autenticada na página de login Aviso legal : O uso deste script para atacar um alvo sem consentimento mútuo é ilegal. É responsabilidade do usuário final obedecer a todas as leis...

CVE-2026-6018-9-Local-Privilege-Escalation-Chain

CVE-2025-6018 + CVE-2025-6019: स्थानीय विशेषाधिकार वृद्धि श्रृंखला लक्षित OS: openSUSE Leap 15.x / SUSE Linux Enterprise 15.x आवश्यक पहुंच: SSH पहुंच वाला गैर-विशेषाधिकार प्राप्त स्थानीय उपयोगकर्ता परिणाम: पूर्ण रूट शेल अवलोकन यह दस्तावेज़ Qualys Threat Research Unit द्वारा खोजी गई दो श्रृंखलाबद्...

CVE-2026-52200

UZ801 / ES-U3TS MifiService Controle de Acesso Quebrado Aviso de segurança e notas técnicas sobre um problema de controle de acesso quebrado na API de gerenciamento web embarcada exposta por MifiService.apk na plataforma OEM / white-label UZ801v2.1 de Wi-Fi móvel 4G LTE, também observada...

CVE-2022-1292

CVE-2022-1292 POC विवरण root@kitploit: The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitra...

CVE-2026-39842

CVE-2026-39842: ثغرة حقن التعبيرات في محرك القواعد بـ OpenRemote تؤدي إلى تنفيذ أوامر عن بُعد TL;DR ثغرة حرجة في تنفيذ الأوامر عن بُعد في محرك القواعد بـ OpenRemote تسمح للمستخدمين المصادق عليهم الحاصلين على دور write:rules بتنفيذ أكواد عشوائية على الخادم بصلاحيات الجذر root. درجة CVSS : 10.0 حرج...

CVE-2026-33032

CVE-2026-33032 / MCPwn nginx-ui MCP प्रमाणीकरण बायपास के लिए गैर-विनाशकारी पहचान उपकरण, जिसे सार्वजनिक रूप से MCPwn के नाम से जाना जाता है। किसी भी nginx-ui इंस्टेंस का दो HTTP-अनुरोधों वाला बिना प्रमाणीकरण के अधिग्रहण करें, जो कमजोर संस्करण चला रहा हो। विषय-सूची 1. त्वरित तथ्य 2. भेद्यता अवलोकन ...