CVE-2025-65264

CVE-2025-65264 Description In CPU‑Z 2.17 and earlier and other products that use CPU-Z driver with version 1.0.6.1 and earlier, the driver e.g. cpuz161.sys dereferenced a value from a user‑supplied address and wrote it to the system buffer supplied by the caller. An attacker could read arbitrary...

Privilege-escalation-ASKEY

Privilege-escalation-ASKEY-Router-RTF3505VW-N1 CVE-2022-47040 Privilege escalation vulnerability on ASKEY routers Device: ASKEY RTF3505VW-N1 Firmware: BRSVg000R3505VMN1001s327 not tested in other version CLI Version: ReducedCLIHGUv13 Exploit: ASKEY RTF3505VW-N1 devices are provided with access...

GhostLock-Galaxy

GhostLock-Galaxy 中文: READMEZH.md This is a separate repository because this route requires Android shell permission, obtained through adb shell or Shizuku. The original YuKongA/ghostlock-app does not use shell permission and follows a different execution route; its requirements and code path shou...

CVE-2022-24611

CVE-2022-24611 Details regarding the Z-Wave S0-No-More attack. For a full analysis and report how this works and how to reproduce the findings see the attached PDF file. Short description: Denial of Service attack against S0 and S2 devices tested with the Z- Wave ZW5xx product line, here...

Z-Jail

Z-Jail Multi-layer sandbox for native code execution on Linux. Seven ordered isolation layers — no external dependencies, 81 KiB PIE binary. ┌──────────────────────────────────────────────────────┐ │ Z-Jail │ ├──────────────────────────────────────────────────────┤ │ rlimits CPU, AS, NOFILE, NPRO...

ghostlock-h8q

GhostLock CVE-2026-43499 for Galaxy Z Fold 8 h8q / Fold 8 Ultra q8q Most of this code is based on @polygraphene's fork of the original. Heavy modifications were required because the main primer used select for most published variants of the exploit does not properly align with the rtmutexwaiter...

Z-Blog <=1.5.2 - Open Redirect

Z-Blog 1.5.2 and earlier contains an open redirect vulnerability via the redirect parameter in zbsystem/cmd.php. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2020-18268 info: name: Z-Blo...

Z-Downloads < 1.11.7 - Cross-Site Scripting

The plugin does not properly validate uploaded files allowing for the uploading of SVGs containing malicious JavaScript. id: CVE-2024-8673 info: name: Z-Downloads 1.11.7 - Cross-Site Scripting author: Splint3r7 severity: low description: | The plugin does not properly validate uploaded files...

CVE-2026-43499-ZFOLD4

CVE-2026-43499-ZFOLD4 Device-specific research port of CVE-2026-43499 IonStack PI write-what-where for the Canadian Galaxy Z Fold4 SM-F936W on firmware F936WVLU1AVGA. This repository is the Fold4 counterpart of CVE-2026-43499-S24U and CVE-2026-43499-A36. It captures current incomplete progress:...

Stryker

Stryker Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303 System Requirements x64 Windows 7/8/8.1/10; Stryker designed only for x64 Windows; Administrative privilege is required. Features Driver Signature Enforcement Overrider similar to DSEFIx; Protected Processes Hijacking via...

CVE-2026-89409

In Z-Wave SDK 8.1.1 and earlier for 700/800 series devices and 6.85.02 and earlier for 500 series devices, missing checks in the ZWAVECMDNODESEXIST handler can result in nodes being removed from the network. These messages must come from a device that has already joined the network...

CVE-2026-89410

In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information...

CVE-2026-89410 Out-of-bounds read in Z-Wave NCP SPI Handler

In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information...

EUVD-2026-108187

In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information...

CVE-2026-89410

The Z-Wave SDK version 8.1.1 and earlier is vulnerable to an out-of-bounds read in the NCP SPI Handler . A malformed NCP SPI command can trigger this condition, potentially leading to the leak of sensitive information . The vulnerability is associated with CWE-1285 (Improper Validation of Specifi...

CVE-2026-89409 Unvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes​

In Z-Wave SDK 8.1.1 and earlier for 700/800 series devices and 6.85.02 and earlier for 500 series devices, missing checks in the ZWAVECMDNODESEXIST handler can result in nodes being removed from the network. These messages must come from a device that has already joined the network...

EUVD-2026-108186

In Z-Wave SDK 8.1.1 and earlier for 700/800 series devices and 6.85.02 and earlier for 500 series devices, missing checks in the ZWAVECMDNODESEXIST handler can result in nodes being removed from the network. These messages must come from a device that has already joined the network...

CVE-2026-89409

The Z-Wave SDK is vulnerable in versions 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series devices) due to missing checks in the ZWAVE_CMD_NODES_EXIST handler. This flaw, categorized under CWE-940 , allows an attacker to cause the deletion of end nodes from th...

Security Bulletin: Multiple vulnerabilities in IBM Semeru Runtime affect z/Transaction Processing Facility

Summary There are multiple vulnerabilities in IBM® Semeru Runtime Certified Edition 11 and IBM® Semeru Runtime Certified Edition 21 that are used by the z/TPF system. z/TPF has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2026-34282 DESCRIPTION: Easily exploitable vulnerability...

Astra Linux – Vulnerability in xterm

xterm before 375 allows code execution via font ops. For example, an OSC 50 response may trigger Ctrl-g, thereby leading to command execution within the vi line-editing mode of Zsh. NOTE: Font ops are not allowed in the default configurations of some Linux distributions for xterm...