57 matches found
CVE-2020-0022
Bouygues BBox Miami における CVE-2020-0022 脆弱性の悪用 Android TV 8.0 - ARM32 Cortex A9 Polo35 作 - 2020/08/24 "使用法: python poloexploit.py targetbtmac targetadbip, shellcommand, disablereboot, verbose" Jan Ruge のスクリプトに基づく CVE-2020-0022 an Android 8.0-9.0 Bluetooth Zero-Click RCE – BlueFrag...
glass-cage-i18-2025-24085-and-cve-2025-24201
Original Fork Network Left Glass Cage: iOS 18.2.1向けゼロクリックPNGエクスプロイトチェーン CVE-2025-24201 – WebKitリモートコード実行 CVE-2025-24085 – Core Media権限昇格 Appleへの報告: 2025年1月9日 パッチ適用: 2025年2月～3月 テスト環境: iPhone 14 Pro Max iOS 18.2.1 CVSS基本スコア: 9.8 緊急 概要 Glass Cage は、iOS 18.2.1を標的とした、実環境で...
Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201
Glass Cage: iOS 18.2.1向けゼロクリックPNGエクスプロイトチェーン CVE-2025-43300: ImageIOにおけるO.o.B書き込み CVE-2025-24201: WebKitリモートコード実行 CVE-2025-24085: Core Media権限昇格 パッチ適用: 2025年1月～3月 テスト環境: iPhone 14 Pro Max iOS 18.2.1 VirusTotal分析（検証済みハッシュ） 概要 Glass Cage は、iOS 18.2.1を標的とした重大なゼロクリックPNGベースのエクスプロイトチェーンであり、実環境で...
zero-click-exploit-analysis
ゼロクリック、古い手口 2025年のWhatsApp/ImageIOゼロクリックエクスプロイトチェーン CVE-2025-55177 + CVE-2025-43300 の詳細分析。研究論文と、CVEのウォークスルー、パッチ差分、ハンズオンなヒープ/スタックラボを備えたインタラクティブなウェブコンパニオン。 ライブサイト: https://mcs.danielwagner.ro 論文 PDF: write-primitive-exploits-ios-to-linux-root.pdf トークスライド: https://mcs.danielwagner.ro/slides Manim...
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client
Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter's. The flaw sat in the annotation tool, the feature that lets participants draw and type on a shared screen, and it asked nothing of the...
EUVD-2026-43732
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting XSS via a crafted plain-text email message. The attacker-controlled JavaScript executes within the victim's authenticated session simply by opening or previewing the message zero-click...
CVE-2026-45035
Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.233, Tabby registers itself as the handler for the tabby:// URL scheme on all platforms. The URL scheme handler supports a run command that directly executes OS commands with no user confirmation, sanitization, or...
CVE-2026-45035 Tabby: RCE via `tabby://run` URL Scheme
Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.233, Tabby registers itself as the handler for the tabby:// URL scheme on all platforms. The URL scheme handler supports a run command that directly executes OS commands with no user confirmation, sanitization, or...
A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens
Posted by Seth Jenkins We recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible to go from a zero-click context to root on Android in just two exploits. The Dolby 0-click vulnerability existed across all of Android, until it was patched in January 2026. Whil...
Exploit for Incorrect Implementation of Authentication Algorithm in Google Android
CVE-2026-0073 — Android ADB TLS Authentication Bypass A proof...
Exploit for Use After Free in Microsoft
LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Det...
zero-click-exploit-analysis
Zero-Click, Old Tricks Anatomy of the 2025 WhatsApp–ImageIO z...
Exploit for CVE-2026-34159
CVE-2026-34159 0 Click RCE exploit for CVE-20...
Exploit for Integer Overflow or Wraparound in Apple Ipados
Coruna: Full-Chain Safari/WebKit Exploit Kit Research & Ana...
Exploit for Use After Free in Apple Safari
CTT-Apple-Silicon-Refraction webkitrefraction.js The 33-Laye...
Exploit for Improper Authentication in Prestashop Prestashop_Checkout
CVE-2025-61922 Exploit: PrestaShop Checkout Account Takeover...
New GeminiJack 0-Click Flaw in Gemini AI Exposed Users to Data Leaks
Google AI systems Gemini Enterprise had a critical 'GeminiJack' security flaw allowing attackers to steal Gmail, Docs, and Calendar data with no clicks...
WhatsApp Patches Zero-Click Exploit Targeting iOS and macOS Devices
WhatsApp has addressed a security vulnerability in its messaging apps for Apple iOS and macOS that it said may have been exploited in the wild in conjunction with a recently disclosed Apple flaw in targeted zero-day attacks. The vulnerability, CVE-2025-55177 CVSS score: 5.4, relates to a case of...