YeaLink DM 3.6.0.20 - Remote Command Injection

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. id: CVE-2021-27561 info: name: YeaLink DM 3.6.0.20 - Remote Command Injection author: shifacyclewala,hackergautam severity: critical description: Yealink...

CVE-2021-29003

CVE-2021-29003 https://hackerworld.home.blog/2021/03/19/rce-in-genexis-router/ Exploit db https://www.exploit-db.com/exploits/49764 medium https://sharmajijvs.medium.com/how-i-got-my-first-cve-af2c3009e409 Unit 42 palo alto networks...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Guide 中文 📋 Quick Exploitation Steps Step 1: Prepare XFS Image Local Machine Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xfs xfs.image mnt sudo cp...

Device-Reversing

Device-Reversing This repo contains device reversing write-ups. Available in the Wiki!...

shodan

Shodan Dorks por twitter.com/lothos612 Siéntete libre de hacer sugerencias Shodan Dorks Filtros básicos de Shodan city: Encuentra dispositivos en una ciudad específica. city:"Bangalore" country: Encuentra dispositivos en un país específico. country:"IN" geo: Encuentra dispositivos mediante...

thingsboard

Plataforma IoT todo en uno para la recopilación, el procesamiento y la visualización de datos, y la gestión de dispositivos. 💡 Comenzar • 🌐 Sitio web • 📚 Documentación • 📔 Blog • 🔗 LinkedIn 🚀 Opciones de instalación Instala ThingsBoard on-premises o utiliza ThingsBoard Cloud. 💡 Primeros pasos con...

offensive-azure

Colección de herramientas ofensivas dirigidas a Microsoft Azure escritas en Python para ser independientes de la plataforma. La lista actual de herramientas se puede encontrar a continuación con una breve descripción de su funcionalidad. ./DeviceCode/devicecodeeasymode.py Genera un código para se...

CVE-2021-27965

CVE-2021-27965 Proof of concept for CVE-2021-27965 Stack-based Buffer Overflow NOTE: I probably will not update this any further there is still a chance I will finish it. I currently have the ability to cleanly overwrite the instruction pointer, but I believe that this is enough to prove I have t...

e1000_vulnerability_exploit

e1000vulnerabilityexploit Installation $ ./install.sh Only own version build are supported yet. Please choose own and debug to build your debug version. Warning : During the process an error can occur, especially during the sources compilation. You can have something like "Exit with error status...

trackerjacker

trackerjacker Como nmap para mapear redes wifi a las que no estás conectado. Mapea y rastrea redes wifi y dispositivos mediante monitorización raw 802.11. Página PyPI: https://pypi.python.org/pypi/trackerjacker Instalar pip3 install trackerjacker Plataformas compatibles : Linux probado en Ubuntu,...

trommel

TROMMEL TROMMEL sifts through embedded device files to identify potential vulnerable indicators. TROMMEL identifies the following indicators related to: Secure Shell SSH key files Secure Socket Layer SSL key files Internet Protocol IP addresses Uniform Resource Locator URL email addresses shell...

btlejack

BtleJack: una navaja suiza de Bluetooth Low Energy Btlejack proporciona todo lo que necesitas para esnifar, interferir y secuestrar dispositivos Bluetooth Low Energy. Se basa en uno o más dispositivos BBC Micro:Bit que ejecutan un firmware dedicado. También es posible que quieras usar un sniffer...

CVE-2022-40684

CVE-2022-40684 Extract admin users and Fortigate details usage: Single URL: .\poc-cve-2022-40684.ps1 -fgt 192.168.1.1 Multiple URL's: .\poc-cve-2022-40684.ps1 -urlsfile urls.txt...

seeker

Disponible en El concepto detrás de Seeker es simple: así como alojamos páginas de phishing para obtener credenciales, ¿por qué no alojar una página falsa que solicite tu ubicación como muchos sitios web populares basados en ubicación? Lee más en el blog de thewhiteh4t .Seeker aloja un sitio web...

CVE-2024-23700

CVE-2024-23700 - Android Companion Device Privilege Escalation PoC This project demonstrates CVE-2024-23700, a privilege escalation vulnerability related to the Companion Device mechanism on Android. The PoC shows how an app can exploit the companion device association flow to obtain certain...

cve-2016-5345

CVE-2016-5345 Privilage escalation in Qualcomm FM Radio Driver. Exploit tested on ASUS device. Some privileges already required to open the vulnerable device driver. Original CVE discovered by Aravind Machiry donfos of Shellphish Grill Team...

blackleak

BlackLeak Proof of Concept for CVE-2024-30212 Table of Contents 1. About The PoC 2. Getting Started Prerequisites Installation 3. Usage 4. License 5. Contact 6. Acknowledgments About The PoC This is the proof of concept for CVE-2024-30212. For more details check...

CVE-2026-108715 LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php

LibreNMS through 26.9.1.1 contains an authorization bypass vulnerability in includes/html/graphs/smokeping/auth.inc.php that checks the src probe device instead of the rendered target device. Restricted users permitted on a probe device can request smokepingin or smokepingout graphs with arbitrar...

CVE-2026-108715 LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php

LibreNMS through 26.9.1.1 contains an authorization bypass vulnerability in includes/html/graphs/smokeping/auth.inc.php that checks the src probe device instead of the rendered target device. Restricted users permitted on a probe device can request smokepingin or smokepingout graphs with arbitrar...

EUVD-2026-96989

LibreNMS through 26.9.1.1 contains an authorization bypass vulnerability in includes/html/graphs/smokeping/auth.inc.php that checks the src probe device instead of the rendered target device. Restricted users permitted on a probe device can request smokepingin or smokepingout graphs with arbitrar...