CVE-2022-51026 | Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-supplied GitLab provider configuration in the POST /api/auth/login/GITLAB_SELF_HOST endpoint. Attackers can set instanceUrl to a server they control that returns an active user with a chosen email. Bytebase then issues session tokens for that principal, letting attackers impersonate exist

Advisory ansehen ➔

LIVE …

Aktiv: Vektor: Android RE Zurücksetzen

Alle (14) 0-Days Critical ≥ 9.0 CISA KEV Videos Podcasts Tools Interaktion

Neueste Wichtigste Signale

Sprache: Alle Sprachen Deutsch (de) English (en)

Gesucht hier: Überwachung 39.119 Android 11 29.485 Windows 10 24.814 Fritzbox 30.894 CVE 50.971 Google Chrome 22.539 Malware 98.315 VPN 84.108 Exploit 38.967 Elon Musk 22.134

Hersteller: Alle Hersteller Microsoft Linux / Kernel Apple Cisco Google Fortinet

Vektoren: Alle Vektoren Binary Analysis Tech Firmware Reverse Tech Android RE Tech Malware Dissection Intel IDA / Ghidra Tech Vulnerability Research ATT&CK Obfuskation & Anti-RE Intel

Aktionen: RSS Feed CTI SENTINEL: LIVE

14 Meldungen

Gestern

Sicherheitslücken (CVE) VulDB Updates

CVE-2022-47524 | F-Secure SAFE Browser 19.1 on Android IDN Homograph (EUVD-2022-50285)

A vulnerability labeled as critical has been found in F-Secure SAFE Browser 19.1 on Android.

🛡️ CVE-2022-47524 Medium 5.4

vor 10 Std. 1 Min

Diese Woche

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-111765 | a2aproject a2a-java 1.3.0.Final/1.3.1.Final AndroidA2AHttpClient AndroidA2AHttpClient.createConnection disabled-redirect information disclosure (EUVD-2026-105136)

A vulnerability identified as problematic has been detected in a2aproject a2a-java 1.3.0.Final/1.3.1.Final.

🛡️ CVE-2026-111765 High 7.5

vor 1 Tag 1 Min

Sicherheitslücken (CVE) VulDB Updates

CVE-2020-0487 | Google Android 11.0 stream_decoder.c read_metadata_vorbiscomment_ denial of service

This issue appears to be a false-positive. Please verify the sources mentioned and consider not using this entry at all.

🛡️ CVE-2020-0487 EPSS 24% TA0040 · T1498

vor 2 Tagen 1 Min

Reverse Engineering Reverse Engineering

nmp (new media player) - reverse engineered Android Media player (older AIMP 2.71.559). The Java files and C++ source code have been restored.

submitted by /u/MonsterovichIsBack [link] [comments]

vor 4 Tagen 1 Min

Älter

Sicherheitslücken (CVE) Exploit Development

Deep-Dive into Android Binder UaF (CVE-2023-20938) using Time-Travel Debugging

submitted by /u/Emergency_Stable_923 [link] [comments]

🛡️ CVE-2023-20938 High 8.1

vor 6 Tagen 1 Min

Admin & Dev Tools DEV Community

Firefox for Android: Extensions, Sync, and Privacy Settings

Firefox for Android is a full-featured browser with one key differentiator: it supports extensions. Here's how to get the most out of it.

vor 6 Tagen 1 Min

Reverse Engineering Reverse Engineering

hexvero: execution-free first look at ELF/PE/Mach-O/APK/.NET/Wasm/Electron with evidence per finding. Zero-dep parsers in Node, optional r2/rizin/Ghidra.

submitted by /u/ImaginationVarious30 [link] [comments]

vor 8 Tagen 1 Min

Reverse Engineering Reverse Engineering

I made a tiny and embeddable shared library injector for Android

submitted by /u/Few-Refuse3402 [link] [comments]

vor 9 Tagen 1 Min

Reverse Engineering Exploit Development

I built an AI-based app analysis tool for APK & IPA reverse engineering

submitted by /u/No_Distribution_9182 [link] [comments]

vor 14 Tagen 1 Min

Keine gemerkten Artikel vorhanden.
Klicke auf an einer Nachricht, um sie hinzuzufügen.

🚀 Auf tsecurity.de entdecken

aside#sidebarCollapse-col-right.collapse { display: block !important; } aside#sidebarCollapse-col-right .sidebar-placeholder { display: none; } aside#sidebarCollapse-col-right .sidebar-content { display: block !important; }

🕒 tsecurity.de Such-Trends & Chronologie

Reverse Engineering

ghidra Ghidra_12.2_build

How Cryo's Atlantis: The Lost Tales (1997) engine works: formats, panoramic projection, scripts and 3D heads

gore: a CLI that turns a Godot game (PCK or EXE) into a project you can open, with automatic AES-256 key recovery

SuperGhidra: an improvised agent-first RE tool on top of Ghidra

GitHub - gsl0001/windows-airdrop: Research harness: OWL's AWDL core built and tested on Windows with a mock radio (no Wi-Fi hardware)

There isn't an easy exploit for this PHP vulnerability