Digiever DS-2105 Pro - Command Injection

Digiever DS-2105 Pro 3.1.0.71-11 contains a command injection caused by unsanitized input in timetzsetup.cgi, letting attackers execute arbitrary commands remotely, exploit requires no authentication. id: CVE-2023-52163 info: name: Digiever DS-2105 Pro - Command Injection author: rajesh-social-te...

CVE-2026-62652

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available firmware update files to more easily reverse engine...

Tenda Router AC11 - Remote Command Injection

Tenda Router AC11 is susceptible to remote command injection vulnerabilities in the web-based management interface that could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. id: CVE-2021-31755 info: name: Tenda Router AC11 - Remote Comman...

ASUS DSL-AC88U - Authentication Bypass

A vulnerability in the ASUS DSL-AC88U router permits unauthorized individuals to bypass authentication.When adding "/js/..%2f%2f" or "/images/..%2f%2e" to the requested URL, it will be recognized as passing the authentication.This vulnerability is part of a broader authentication bypass issue...

Moderate: Red Hat Security Advisory: edk2 security update

An update for edk2 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2026-62653

A vulnerability in Reyrolle 7SR5 (all versions prior to V2.70 ) allows an unauthenticated attacker with physical access to trigger a memory corruption condition. The flaw lies in improper validation of input received over a proprietary communication protocol that is only exposed when the device i...

EUVD-2026-72667

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could all...

EUVD-2026-72666

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available firmware update files to more easily reverse engine...

CVE-2026-62652

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available firmware update files to more easily reverse engine...

CVE-2026-62652

Reyrolle 7SR5 (all versions below V2.70 ) ships firmware binaries with debugging symbols that were not stripped before distribution. Because the firmware update files are publicly available , an unauthenticated remote attacker can leverage the symbols to more easily reverse-engineer the firmware ...

CVE-2023-33869-RCE-PoC

Center for Energy Security and Reliability - UNC Charlotte CVE-2023-33869 is a command injection vulnerability affecting Enphase Envoy firmware version D7.0.88. This vulnerability allows an attacker to inject and execute arbitrary commands with root privileges on the affected device. The Enphase...

intel-me-research

Intel ME Firmware Reverse Engineering — Live CSME 16.x Analysis "Your computer has a secret second computer inside it. We found it, mapped it, and documented what's hiding in there." 🔥 TRY IT YOURSELF — HECI SPY 🔥 One Python script. Zero dependencies. Talk to your Intel Management Engine directly...

lexmark

Cosas de impresoras Lexmark Este repositorio contiene todo el trabajo relacionado con impresoras Lexmark que he publicado públicamente. La mayoría de ustedes probablemente está aquí por las utilidades de descifrado de firmware; revisen la carpeta tools. La carpeta exploit contiene un exploit 0day...

meltdown-spectre-bios-list

Meltdown/Spectre BIOS/Firmware Updates list This is a list of all products an manufacturers which patched BIOS/Firmware addressing the Meltdown and Spectre vulnerabilities If you have better info please send pull requests. Why I did this? to have a parseable list for all my hardware Check your...

CVE-2025-45422---Bbox

CVE-2025-45422: Omisión de Persistencia y Control de Acceso UPnP de Proximus b-box https://vulners.com/cve/CVE-2025-45422 Este script demuestra CVE-2025-45422 que afecta a los routers Proximus b-box que ejecutan la versión de firmware 8c.725A. Aprovecha la funcionalidad UPnP del router para crear...

zephyr-lwm2m-firmware-update-oob-read-cve-2026-10672-truncated-package-uri

CVE-2026-10672 — Zephyr LwM2M Firmware Update OOB Read PoC Proof of concept for CVE-2026-10672 , an out-of-bounds read in Zephyr RTOS's LwM2M firmware-update pull client subsys/net/lib/lwm2m/lwm2mpullcontext.c. Vulnerability CVE : CVE-2026-10672 CVSS : 8.2 High...

CVE-2021-41653

CVE-2021-41653 TP-Link TL-WR840N EU v5 Remote Code Execution Reference: https://k4m1ll0.com/cve-2021-41653.html...

CVE-2018-14714-RCE-exploit

CVE-2018-14714 RCE PoC ASUS wifi router RCE vulnerability This PoC is for learning and research purposes only. Do not use it for illegal activities; you are solely responsible for any legal consequences. This is a test conducted after code modifications based on this PoC, as the original PoC migh...

Firmware-analysis

This repository does not have a README...

EUVD-2026-72776

An issue in the l2caphandledata function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...