CVE-2026-57550: SIM AT Interface Vulnerability in Qualcomm Modems
CVE-2026-57550 is a vulnerability in the SIM AT interface of Qualcomm communication processors, allowing a malicious SIM card to execute AT commands…
Tag: CVE
CVE-2021-31698: Quectel AT Command Injection
CVE-2021-31698 is a previously published command injection vulnerability in Quectel modules, reachable via AT commands. It was found in the same daemon…
CVE-2025-33053: WebDAV Working-Directory Hijack Vulnerability
A critical vulnerability (CVSS 8.8) in Windows WebDAV that allows attackers to hijack the working directory of signed binaries, leading to remote…
CVE-2026-21513: MSHTML Bypass Vulnerability
A file-handling flaw in MSHTML that could be exploited for bypassing security controls, used in smaller test sets by the operator.
CVE-2025-24054: NTLM-Leak Vulnerability
A vulnerability that leaks NTLM credentials, included in the operator's test sets for phishing delivery.
CVE-2023-4863: Heap Buffer Overflow in WebP
CVE-2023-4863 is a heap buffer overflow vulnerability in the WebP image format library, which can be exploited for browser-based attacks. It was…
CVE-2021-36260: Hikvision Camera Command Injection
A command injection vulnerability in Hikvision cameras, included in Evooo1Bot's exploit arsenal.
CVE-2026-26030: Microsoft Semantic Kernel Additional Command Injection Vulnerability
Another command injection vulnerability in Microsoft Semantic Kernel related to insecure shell command handling.
CVE-2026-25592: Microsoft Semantic Kernel Command Injection Vulnerability
A vulnerability in Microsoft's Semantic Kernel agent framework where model output reaching a shell can lead to command injection. Patched by Microsoft.