Z-Jail

Z-Jail Multi-layer sandbox for native code execution on Linux. Seven independent defence layers — no external dependencies, 73 KiB PIE binary. ┌──────────────────────────────────────────────────────┐ │ Z-Jail │ ├──────────────────────────────────────────────────────┤ │ Truthimatics PV...

CVE-2022-24611

CVE-2022-24611 Details regarding the Z-Wave S0-No-More attack. For a full analysis and report how this works and how to reproduce the findings see the attached PDF file. Short description: Denial of Service attack against S0 and S2 devices tested with the Z- Wave ZW5xx product line, here...

Z-Downloads < 1.11.7 - Cross-Site Scripting

The plugin does not properly validate uploaded files allowing for the uploading of SVGs containing malicious JavaScript. id: CVE-2024-8673 info: name: Z-Downloads 1.11.7 - Cross-Site Scripting author: Splint3r7 severity: low description: | The plugin does not properly validate uploaded files...

Z-Blog <=1.5.2 - Open Redirect

Z-Blog 1.5.2 and earlier contains an open redirect vulnerability via the redirect parameter in zbsystem/cmd.php. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2020-18268 info: name: Z-Blo...

GhostLock-Galaxy

GhostLock-Galaxy 中文: READMEZH.md Это отдельный репозиторий, поскольку данный маршрут требует разрешения Android shell, получаемого через adb shell или Shizuku. Оригинальный YuKongA/ghostlock-app не использует разрешение shell и следует другому маршруту выполнения; его требования и путь кода не...

Stryker

Stryker Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303 System Requirements x64 Windows 7/8/8.1/10; Stryker designed only for x64 Windows; Administrative privilege is required. Features Driver Signature Enforcement Overrider similar to DSEFIx; Protected Processes Hijacking via...

ghostlock-h8q

GhostLock CVE-2026-43499 для Galaxy Z Fold 8 h8q / Fold 8 Ultra q8q Большая часть этого кода основана на форке @polygraphene от оригинала. Потребовались серьёзные модификации, поскольку основной праймер select, используемый в большинстве опубликованных вариантов эксплойта, некорректно выравнивает...

Privilege-escalation-ASKEY

Privilege-escalation-ASKEY-Router-RTF3505VW-N1 CVE-2022-47040 Privilege escalation vulnerability on ASKEY routers Device: ASKEY RTF3505VW-N1 Firmware: BRSVg000R3505VMN1001s327 not tested in other version CLI Version: ReducedCLIHGUv13 Exploit: ASKEY RTF3505VW-N1 devices are provided with access...

CVE-2025-65264

CVE-2025-65264 Description In CPU‑Z 2.17 and earlier and other products that use CPU-Z driver with version 1.0.6.1 and earlier, the driver e.g. cpuz161.sys dereferenced a value from a user‑supplied address and wrote it to the system buffer supplied by the caller. An attacker could read arbitrary...

Security Bulletin: Impacted IBM Optim for z/OS 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in jackc/Pgx, cloudflare/cfSSL, x/net

Summary IBM Optim for z/OS version 1.0.0, 1.1.0 and 1.2.0 depends on open-source packages jackc/Pgx, cloudflare/cfSSL and x/net which are affected by medium, high and critical severity vulnerabilities. IBM Optim for z/OS 2.0.0 resolves these vulnerabilities by upgrading the affected open-source...

CVE-2026-43499-ZFOLD4

CVE-2026-43499-ZFOLD4 Девайс-специфичный исследовательский порт CVE-2026-43499 IonStack PI write-what-where для канадского Galaxy Z Fold4 SM-F936W на прошивке F936WVLU1AVGA. Этот репозиторий — аналог для Fold4 репозиториев CVE-2026-43499-S24U и CVE-2026-43499-A36. В нём зафиксирован текущий...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Uncontrolled Recursion due to IBM Java (CVE-2026-16440)

Summary IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Uncontrolled Recursion due to IBM Java. Vulnerability Details CVEID:CVE-2026-16440 DESCRIPTION: In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation...

ipa security, bug fix, and enhancement update

4.13.4-1.0.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 - Add bind to ipa-server-common Requires Orabug: 36518596 4.13.4-1 - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL rhel-9.8.z -...

MAL-2026-16472 Malicious code in z-deno-truth-ya1t4m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ca6bf79ee3672fa881c285bd8af8fc4af19fb3be8e90212de7e8a0be70cf30 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16471 Malicious code in z-deno-truth-va499w (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8814711e10416bfe039fa71469c13072ef8d20a1f6f654130ae96ebb38c443 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in z-deno-truth-va499w (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8814711e10416bfe039fa71469c13072ef8d20a1f6f654130ae96ebb38c443 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in z-deno-truth-ya1t4m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ca6bf79ee3672fa881c285bd8af8fc4af19fb3be8e90212de7e8a0be70cf30 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in z-deno-truth-bwhlsz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0813755b79e157c644502848b1ff5af003fc82fb842b39676490d00f33e814 The package's exports field maps the ./package.json subpath to setup.js, so any consumer resolving require'z-deno-truth-bwhlsz/package.json' executes...

DEBIAN-CVE-2026-59956

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...

EUVD-2026-83120

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...