Privilege-escalation-ASKEY

Привилегии-эскалация-ASKEY-Router-RTF3505VW-N1 CVE-2022-47040 Уязвимость повышения привилегий на роутерах ASKEY Устройство: ASKEY RTF3505VW-N1 Прошивка: BRSVg000R3505VMN1001s327 не тестировалось на других версиях Версия CLI: ReducedCLIHGUv13 Эксплойт: Устройства ASKEY RTF3505VW-N1 предоставляют...

Z-Jail

Z-Jail Sandbox multicouche pour l'exécution de code natif sur Linux. Sept couches de défense indépendantes — aucune dépendance externe, binaire PIE d'environ 73 Kio. root@kitploit: ┌──────────────────────────────────────────────────────┐ │ Z-Jail │...

CVE-2022-24611

CVE-2022-24611 关于Z-Wave S0-无更多攻击的详细信息。有关完整分析、工作原理以及如何复现发现的报告，请参见附带的PDF文件。 简要描述： 针对S0和S2设备的拒绝服务攻击（已在Z-Wave ZW5xx产品线上测试），此处特指支持Z-Wave的Amazon Ring第一代设备。攻击者可以通过S0...

Z-Downloads < 1.11.7 - Cross-Site Scripting

The plugin does not properly validate uploaded files allowing for the uploading of SVGs containing malicious JavaScript. id: CVE-2024-8673 info: name: Z-Downloads 1.11.7 - Cross-Site Scripting author: Splint3r7 severity: low description: | The plugin does not properly validate uploaded files...

Z-Blog <=1.5.2 - Open Redirect

Z-Blog 1.5.2 and earlier contains an open redirect vulnerability via the redirect parameter in zbsystem/cmd.php. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2020-18268 info: name: Z-Blo...

ghostlock-h8q

GhostLock CVE-2026-43499 для Galaxy Z Fold 8 h8q / Fold 8 Ultra q8q Большая часть этого кода основана на форке @polygraphene от оригинала. Потребовались серьёзные модификации, поскольку основной праймер select, используемый в большинстве опубликованных вариантов эксплойта, некорректно выравнивает...

CVE-2025-65264

CVE-2025-65264 Описание В CPU‑Z 2.17 и более ранних версиях а также в других продуктах, использующих драйвер CPU‑Z версии 1.0.6.1 и ниже драйвер например, cpuz161.sys разыменовывал значение из адреса, предоставленного пользователем, и записывал его в системный буфер, переданный вызывающей стороно...

GhostLock-Galaxy

GhostLock-Galaxy English: README.md 本仓库单独维护，是因为当前路线需要 Android shell 权限（通过 adb shell 或 Shizuku 获取）。YuKongA 的原项目 不使用 shell 权限，采用的是另一条执行路线；两者的运行要求和代码路径并不相同， 不能直接互换。 当前支持设备 设备| Kernel ---|--- Samsung Galaxy Z Fold6（SM-F9560 / q6q）| 6.1.145-android14-11-3254009-abF9560ZCS4DZG3 启动时按 uname -r 精确匹配 offse...

CVE-2026-43499-ZFOLD4

CVE-2026-43499-ZFOLD4 Porting di ricerca specifico per dispositivo di CVE-2026-43499 IonStack PI write-what-where per il Galaxy Z Fold4 canadese SM-F936W sul firmware F936WVLU1AVGA. Questo repository è la controparte Fold4 di CVE-2026-43499-S24U e CVE-2026-43499-A36. Documenta lo stato attuale e...

Stryker

Stryker Strumento proof-of-concept multiuso basato su CPU-Z CVE-2017-15303 Requisiti di sistema x64 Windows 7/8/8.1/10; Stryker progettato solo per x64 Windows; Sono necessari privilegi di amministratore. Caratteristiche Override dell'applicazione della firma dei driver simile a DSEFix; Hijacking...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net/iucv: Fixed the size of interrupt data iucvirqdata needs to be 4 bytes larger. These bytes are not used by the iucv module, but are written by the z/VM hypervisor in case a CPU is deconfigured. Reported as: BUG...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pv: fix index value of replaced ASCE The index field of the struct page corresponding to a guest ASCE should be 0. When replacing the ASCE in s390replaceasce, the index of the new ASCE should also be set to 0. Using th...

Astra Linux – Vulnerability in zsh

In zsh before version 5.8.1, an attacker can gain code execution if they control the command output within the prompt, as demonstrated by using a %F argument. This occurs due to the recursive PROMPTSUBST expansion...

Astra Linux – Vulnerability in xterm

xterm before 375 allows code execution via font ops. For example, an OSC 50 response may trigger Ctrl-g, thereby leading to command execution within the vi line-editing mode of Zsh. NOTE: Font ops are not allowed in the default configurations of some Linux distributions for xterm...

389-ds-base security update

2.8.0-9 - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check rhel-9.8.z - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser rhel-9.8.z - Resolves:...

CVE-2026-19546

A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546...

CVE-2026-19546

A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546. Mitigation For a detailed Statement, Description and...

CVE-2026-19546 Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attribute

A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546...

EUVD-2026-56197

A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546...

PT-2026-70237

A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546...