57 matches found
CVE-2020-0022
CVE-2020-0022 explotación de vulnerabilidad en Bouygues BBox Miami Android TV 8.0 - ARM32 Cortex A9 Por Polo35 - 2020/08/24 "Uso: python poloexploit.py targetbtmac targetadbip, shellcommand, disablereboot, verbose" Basado en scripts de Jan Ruge CVE-2020-0022 un RCE Bluetooth Zero-Click en Android...
glass-cage-i18-2025-24085-and-cve-2025-24201
Original Fork Network Left Glass Cage: Cadena de Explotación PNG de Cero Clic para iOS 18.2.1 CVE-2025-24201 – Ejecución Remota de Código en WebKit CVE-2025-24085 – Escalada de Privilegios en Core Media Reportado a Apple: 9 de enero de 2025 Parcheado: febrero–marzo de 2025 Probado en: iPhone 14 P...
Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201
Glass Cage: Cadena de explotación PNG de cero clics para iOS 18.2.1 CVE-2025-43300: Escritura fuera de límites en ImageIO CVE-2025-24201: Ejecución remota de código en WebKit CVE-2025-24085: Escalada de privilegios en Core Media Parcheado: Enero-marzo 2025 Probado en: iPhone 14 Pro Max iOS 18.2.1...
zero-click-exploit-analysis
Cero clics, viejos trucos Anatomía de la cadena de exploits de cero clics de 2025 en WhatsApp/ImageIO CVE-2025-55177 + CVE-2025-43300. Artículo de investigación más un acompañante web interactivo con recorridos por las CVE, diffs de parches y laboratorios prácticos de heap/stack. Sitio en vivo:...
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client
Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter's. The flaw sat in the annotation tool, the feature that lets participants draw and type on a shared screen, and it asked nothing of the...
EUVD-2026-43732
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting XSS via a crafted plain-text email message. The attacker-controlled JavaScript executes within the victim's authenticated session simply by opening or previewing the message zero-click...
CVE-2026-45035
Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.233, Tabby registers itself as the handler for the tabby:// URL scheme on all platforms. The URL scheme handler supports a run command that directly executes OS commands with no user confirmation, sanitization, or...
CVE-2026-45035 Tabby: RCE via `tabby://run` URL Scheme
Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.233, Tabby registers itself as the handler for the tabby:// URL scheme on all platforms. The URL scheme handler supports a run command that directly executes OS commands with no user confirmation, sanitization, or...
A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens
Posted by Seth Jenkins We recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible to go from a zero-click context to root on Android in just two exploits. The Dolby 0-click vulnerability existed across all of Android, until it was patched in January 2026. Whil...
Exploit for Incorrect Implementation of Authentication Algorithm in Google Android
CVE-2026-0073 — Android ADB TLS Authentication Bypass A proof...
Exploit for Use After Free in Microsoft
LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Det...
zero-click-exploit-analysis
Zero-Click, Old Tricks Anatomy of the 2025 WhatsApp–ImageIO z...
Exploit for CVE-2026-34159
CVE-2026-34159 0 Click RCE exploit for CVE-20...
Exploit for Integer Overflow or Wraparound in Apple Ipados
Coruna: Full-Chain Safari/WebKit Exploit Kit Research & Ana...
Exploit for Use After Free in Apple Safari
CTT-Apple-Silicon-Refraction webkitrefraction.js The 33-Laye...
Exploit for Improper Authentication in Prestashop Prestashop_Checkout
CVE-2025-61922 Exploit: PrestaShop Checkout Account Takeover...
New GeminiJack 0-Click Flaw in Gemini AI Exposed Users to Data Leaks
Google AI systems Gemini Enterprise had a critical 'GeminiJack' security flaw allowing attackers to steal Gmail, Docs, and Calendar data with no clicks...
WhatsApp Patches Zero-Click Exploit Targeting iOS and macOS Devices
WhatsApp has addressed a security vulnerability in its messaging apps for Apple iOS and macOS that it said may have been exploited in the wild in conjunction with a recently disclosed Apple flaw in targeted zero-day attacks. The vulnerability, CVE-2025-55177 CVSS score: 5.4, relates to a case of...