56 matches found
zero-click-exploit-analysis
零点击，老把戏 2025年 WhatsApp/ImageIO 零点击漏洞利用链剖析 （CVE-2025-55177 + CVE-2025-43300）。研究论文及 交互式网站伴侣，包含 CVE 讲解、补丁对比、 以及实操堆/栈实验室。 在线站点：https://mcs.danielwagner.ro 论文（PDF）：write-primitive-exploits-ios-to-linux-root.pdf 演讲幻灯片：https://mcs.danielwagner.ro/slides（Manim Community 套件，16 个场景，源码位于 manim/ 下） 团队...
CVE-2020-0022
CVE-2020-0022 针对 Bouygues BBox Miami 的漏洞利用 Android TV 8.0 - ARM32 Cortex A9 作者: Polo35 - 2020/08/24 "用法: python poloexploit.py 目标蓝牙MAC地址 目标ADBIP, 外壳命令, 禁用重启, 详细输出" 基于 Jan Ruge 的脚本 CVE-2020-0022 一个 Android 8.0-9.0 蓝牙零点击 RCE – BlueFrag...
glass-cage-i18-2025-24085-and-cve-2025-24201
（原始分叉网络已保留） 玻璃牢笼：针对 iOS 18.2.1 的零点击 PNG 漏洞利用链 CVE-2025-24201 – WebKit 远程代码执行 CVE-2025-24085 – Core Media 权限提升 报告给 Apple： 2025 年 1 月 9 日 已修补： 2025 年 2 月–3 月 测试设备： iPhone 14 Pro Max（iOS 18.2.1） CVSS 基础评分： 9.8（严重） 摘要 Glass Cage 是一个关键的、基于 PNG 的零点击漏洞利用链，在野 被发现，针对 iOS...
Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201
Glass Cage: Cadena de explotación PNG de cero clics para iOS 18.2.1 CVE-2025-43300: Escritura fuera de límites en ImageIO CVE-2025-24201: Ejecución remota de código en WebKit CVE-2025-24085: Escalada de privilegios en Core Media Parcheado: Enero-marzo 2025 Probado en: iPhone 14 Pro Max iOS 18.2.1...
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client
Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter's. The flaw sat in the annotation tool, the feature that lets participants draw and type on a shared screen, and it asked nothing of the...
CVE-2026-45035
Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.233, Tabby registers itself as the handler for the tabby:// URL scheme on all platforms. The URL scheme handler supports a run command that directly executes OS commands with no user confirmation, sanitization, or...
CVE-2026-45035 Tabby: RCE via `tabby://run` URL Scheme
Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.233, Tabby registers itself as the handler for the tabby:// URL scheme on all platforms. The URL scheme handler supports a run command that directly executes OS commands with no user confirmation, sanitization, or...
A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens
Posted by Seth Jenkins We recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible to go from a zero-click context to root on Android in just two exploits. The Dolby 0-click vulnerability existed across all of Android, until it was patched in January 2026. Whil...
Exploit for Incorrect Implementation of Authentication Algorithm in Google Android
CVE-2026-0073 — Android ADB TLS Authentication Bypass A proof...
Exploit for Use After Free in Microsoft
LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Det...
zero-click-exploit-analysis
Zero-Click, Old Tricks Anatomy of the 2025 WhatsApp–ImageIO z...
Exploit for CVE-2026-34159
CVE-2026-34159 0 Click RCE exploit for CVE-20...
Exploit for Integer Overflow or Wraparound in Apple Ipados
Coruna: Full-Chain Safari/WebKit Exploit Kit Research & Ana...
Exploit for Use After Free in Apple Safari
CTT-Apple-Silicon-Refraction webkitrefraction.js The 33-Laye...
Exploit for Improper Authentication in Prestashop Prestashop_Checkout
CVE-2025-61922 Exploit: PrestaShop Checkout Account Takeover...
New GeminiJack 0-Click Flaw in Gemini AI Exposed Users to Data Leaks
Google AI systems Gemini Enterprise had a critical 'GeminiJack' security flaw allowing attackers to steal Gmail, Docs, and Calendar data with no clicks...
WhatsApp Patches Zero-Click Exploit Targeting iOS and macOS Devices
WhatsApp has addressed a security vulnerability in its messaging apps for Apple iOS and macOS that it said may have been exploited in the wild in conjunction with a recently disclosed Apple flaw in targeted zero-day attacks. The vulnerability, CVE-2025-55177 CVSS score: 5.4, relates to a case of...
Exploit for Use After Free in Apple Ipados
Glass Cage: Zero-Click PNG Exploit Chain for iOS 18.2.1 CVE...