57 matches found
CVE-2020-0022
Bouygues BBox Miami에서의 CVE-2020-0022 취약점 익스플로잇 Android TV 8.0 - ARM32 Cortex A9 작성자: Polo35 - 2020/08/24 "Usage: python poloexploit.py targetbtmac targetadbip, shellcommand, disablereboot, verbose" Jan Ruge의 스크립트 기반 CVE-2020-0022는 Android 8.0-9.0 Bluetooth 제로클릭 RCE – BlueFrag...
glass-cage-i18-2025-24085-and-cve-2025-24201
원본 포크 네트워크 잔존 Glass Cage: iOS 18.2.1 대상 제로클릭 PNG 익스플로잇 체인 CVE-2025-24201 – WebKit 원격 코드 실행 CVE-2025-24085 – Core Media 권한 상승 Apple에 보고: 2025년 1월 9일 패치 적용: 2025년 2월–3월 테스트 기기: iPhone 14 Pro Max iOS 18.2.1 CVSS 기본 점수: 9.8 치명적 요약 Glass Cage 는 iOS 18.2.1을 대상으로 실제 환경in the wild에서 발견된 치명적인 제로클릭 PNG 기반...
Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201
Glass Cage: iOS 18.2.1向けゼロクリックPNGエクスプロイトチェーン CVE-2025-43300: ImageIOにおけるO.o.B書き込み CVE-2025-24201: WebKitリモートコード実行 CVE-2025-24085: Core Media権限昇格 パッチ適用: 2025年1月～3月 テスト環境: iPhone 14 Pro Max iOS 18.2.1 VirusTotal分析（検証済みハッシュ） 概要 Glass Cage は、iOS 18.2.1を標的とした重大なゼロクリックPNGベースのエクスプロイトチェーンであり、実環境で...
zero-click-exploit-analysis
ゼロクリック、古い手口 2025年のWhatsApp/ImageIOゼロクリックエクスプロイトチェーン CVE-2025-55177 + CVE-2025-43300 の詳細分析。研究論文と、CVEのウォークスルー、パッチ差分、ハンズオンなヒープ/スタックラボを備えたインタラクティブなウェブコンパニオン。 ライブサイト: https://mcs.danielwagner.ro 論文 PDF: write-primitive-exploits-ios-to-linux-root.pdf トークスライド: https://mcs.danielwagner.ro/slides Manim...
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client
Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter's. The flaw sat in the annotation tool, the feature that lets participants draw and type on a shared screen, and it asked nothing of the...
EUVD-2026-43732
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting XSS via a crafted plain-text email message. The attacker-controlled JavaScript executes within the victim's authenticated session simply by opening or previewing the message zero-click...
CVE-2026-45035
Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.233, Tabby registers itself as the handler for the tabby:// URL scheme on all platforms. The URL scheme handler supports a run command that directly executes OS commands with no user confirmation, sanitization, or...
CVE-2026-45035 Tabby: RCE via `tabby://run` URL Scheme
Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.233, Tabby registers itself as the handler for the tabby:// URL scheme on all platforms. The URL scheme handler supports a run command that directly executes OS commands with no user confirmation, sanitization, or...
A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens
Posted by Seth Jenkins We recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible to go from a zero-click context to root on Android in just two exploits. The Dolby 0-click vulnerability existed across all of Android, until it was patched in January 2026. Whil...
Exploit for Incorrect Implementation of Authentication Algorithm in Google Android
CVE-2026-0073 — Android ADB TLS Authentication Bypass A proof...
Exploit for Use After Free in Microsoft
LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Det...
zero-click-exploit-analysis
Zero-Click, Old Tricks Anatomy of the 2025 WhatsApp–ImageIO z...
Exploit for CVE-2026-34159
CVE-2026-34159 0 Click RCE exploit for CVE-20...
Exploit for Integer Overflow or Wraparound in Apple Ipados
Coruna: Full-Chain Safari/WebKit Exploit Kit Research & Ana...
Exploit for Use After Free in Apple Safari
CTT-Apple-Silicon-Refraction webkitrefraction.js The 33-Laye...
Exploit for Improper Authentication in Prestashop Prestashop_Checkout
CVE-2025-61922 Exploit: PrestaShop Checkout Account Takeover...
New GeminiJack 0-Click Flaw in Gemini AI Exposed Users to Data Leaks
Google AI systems Gemini Enterprise had a critical 'GeminiJack' security flaw allowing attackers to steal Gmail, Docs, and Calendar data with no clicks...
WhatsApp Patches Zero-Click Exploit Targeting iOS and macOS Devices
WhatsApp has addressed a security vulnerability in its messaging apps for Apple iOS and macOS that it said may have been exploited in the wild in conjunction with a recently disclosed Apple flaw in targeted zero-day attacks. The vulnerability, CVE-2025-55177 CVSS score: 5.4, relates to a case of...