117 matches found
ghostlock-pfem10
GhostLock — PFEM10 OPPO Find X5 Pro PFEM10 向けの CVE-2026-43499 IonStack エクスプロイト。 カーネル 5.10.236-android12-9-o、futex CMPREQUEUEPI UAF → pi-tree 書き込みプリミティブ。 自己責任で使用してください。パニック / 再起動が発生する可能性があります。ファームウェアを更新しないでください。 ビルド ./build.sh requires Android NDK r28c ビルドパラメータは固定です -O1 / android26 —...
CVE-2025-21479-FX5P
CVE-2025-21479 · OPPO Find X5 Pro PFEM00 temporary root RAM-only temp root for OPPO Find X5 Pro PFEM00 kernel 5.10.198-android12-9, ColorOS, locked bootloader via CVE-2025-21479 Adreno KGSL → KernelSU v3.3.0 LKM late-load. 中文:READMEzh.md Chain: KGSL physical R/W → disarm OEM guard, SELinux...
Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware
CVE-2025-21479 · OPPO Find X5 Pro PFEM00 temporary root RAM...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock — OPPO Find X5 Pro PFEM10 English · 中文READ...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock — PFEM10 CVE-2026-43499 IonStack exploit for OP...
CVE-2026-49952
Discuz! X5.0 releases 20260320 through 20260501 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to gain unauthorized access to database backup and restore functionality by exploiting a shared cryptographic key between UCenter integration and the databa...
Malicious Package
Overview test-pkg-x5 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
📄 Ilevia EVE X1/X5 Server 4.7.18.0.eden Root Privilege Escalation
A critical privilege escalation vulnerability exists in Ilevia EVE X1/X5 Server versions 4.7.18.0.eden and below. This is a proof of concept exploit written in PHP...
Ilevia EVE X1/X5 Server 4.7.18.0.eden Authenticated Remote Command Injections
Summary EVE is a smart home and building automation solution designed for both residential and commercial environments, including malls, hotels, restaurants, bars, gyms, spas, boardrooms, and offices. It enables comprehensive control and monitoring of electrical installations through a highly...
Ilevia EVE X1/X5 Server 4.7.18.0.eden Insecure Hashing Algorithm
Summary EVE is a smart home and building automation solution designed for both residential and commercial environments, including malls, hotels, restaurants, bars, gyms, spas, boardrooms, and offices. It enables comprehensive control and monitoring of electrical installations through a highly...
EUVD-2019-6384
Malware in sbrugna...
EUVD-2006-1947
Malware in sbrugna...
EUVD-2025-29644
Malicious code in bioql PyPI...
EUVD-2025-7236
Malicious code in bioql PyPI...
EUVD-2025-6666
Malicious code in bioql PyPI...
EUVD-2025-6667
Malicious code in bioql PyPI...
CVE-2025-34187
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads...
CVE-2025-34186
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Due to the binary's interpretation of non-zero...
CVE-2025-34186
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit...
CVE-2025-34186 Ilevia EVE X1/X5 Server 4.7.18.0.eden Authentication Bypass
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit...