CVE-2021-41653

CVE-2021-41653 TP-Link TL-WR840N EU v5 Remote Code Execution Reference: https://k4m1ll0.com/cve-2021-41653.html...

CVE-2018-14714-RCE-exploit

CVE-2018-14714 RCE PoC ASUS wifi router RCE vulnerability This PoC is for learning and research purposes only. Do not use it for illegal activities; you are solely responsible for any legal consequences. This is a test conducted after code modifications based on this PoC, as the original PoC migh...

Firmware-analysis

This repository does not have a README...

EUVD-2026-72776

An issue in the l2caphandledata function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

EUVD-2026-72778

An issue in the btmaclhandle function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

CVE-2026-79378

CVE-2026-79378 affects the btm_acl_handle() function in the Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware version 3.x and earlier . An unauthenticated, remote attacker can trigger a Denial of Service by sending a crafted L2CAP packet, with no user interaction required (CVSS 3.1: 7.5 HI...

Skullcandy Dime 3 wireless earbuds contain an unauthenticated Bluetooth pairing vulnerability

Overview Skullcandy Dime 3 wireless earbuds, running firmware version 1.0.0.28, accept a new Bluetooth Classic BR/EDR pairing request from an unpaired device without requiring the earbuds to be placed into pairing mode or requiring any physical confirmation or interaction from the owner...

tesla-security-research

Investigación de Seguridad en Tesla Investigación de vulnerabilidades en el sistema de infoentretenimiento del Tesla Model 3/Y Intel Atom MCU, Linux 4.14.235, divulgadas de manera responsable a Tesla a través de Bugcrowd. Se obtuvo acceso root persistente en un Tesla Model 3 de producción mediant...

rpef

路由器后渗透框架 目前，该框架包含若干固件镜像模块： root@kitploit: 'Verified' - 该模块已确认可正常工作，且状态稳定。 'Unverified' - 该模块预计能够运行，或只需少量额外工作即可运行， 但尚待在实际设备上进行测试。 'Testing' - 该模块目前仍在开发中，暂时不稳定。用户应将其视为 “进行中的工作”。 'Roadblock' - 目前存在一些阻碍，导致该模块的进展暂时停滞。可能需要 某些无法获取的实用工具，或需要开展大量逆向工程工作。 如需查看可用选项列表，请运行： root@kitploit: ./rpef.py -h...

CVE-2017-3881

CVE-2017-3881 Ejecución remota de código en Cisco IOS Este repositorio contiene código de Prueba de Concepto para explotar la vulnerabilidad de ejecución remota de código divulgada por Cisco Systems el 17 de marzo de 2017 -...

CVE-2010-4231-EXPLOIT

CVE-2010-4231 - Directory Traversal Vulnerability in Camtron and TecVoz IP Cameras CVE-2010-4231 is a directory traversal vulnerability that exists in the web-based administration interface of the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera. The vulnerability allows...

CVE-2022-29593

CVE-2022-29593 - Authentication Bypass by Capture Replay Dingtian-DT-R002 Title Authentication Bypass by Capture-replay Published: Version: 1.0 Vendor: Shenzhen Dingtian Technologies Co.,Ltd Product: 2 Channel Relay Board/Relay Card Version affected: Firmware V3.1.276A Product - Dingtian DTR004 A...

watchTowr-vs-WatchGuard-CVE-2025-9242

watchTowr-vs-WatchGuard-CVE-2025-9242 Detection Artifact Generator for WatchGuard CVE-2025-9242 https://github.com/user-attachments/assets/097f099b-ba60-4223-adea-04279570460f See our blog post for technical details Detection in Action root@kitploit: python watchTowr-vs-WatchGuard-CVE-2025-9242.p...

PS4-6.20-WebKit-Code-Execution-Exploit

PS4 6.20 WebKit Code Execution PoC This repo contains a proof-of-concept PoC RCE exploit targeting the PlayStation 4 on firmware 6.20 leveraging CVE-2018-4441. The exploit first establishes an arbitrary read/write primitive as well as an arbitrary object address leak in wkexploit.js. It will then...

CVE-2021-4045

TP-Link Tapo c200 1.1.15 - Ejecución Remota de Código RCE CVE-2021-4045 🔐 "PWNTAPO: Revelando Inyección de Comandos en Cámaras TP-Link Tapo C200 = v1.1.16 Build 211209" 🔓 Lee sobre el exploit en exploit db Se trata de una vulnerabilidad de inyección de comandos que afecta a todas las versiones de...

schrodingers-toctou

Schrödinger's TOCTOU "...the definition of 'sane compiler' grows ever looser." The binary you run is not the program you wrote. The compiler optimizer rewrites your source in ways you never see — and some of those changes can silently and legally turn seemingly secure code into vulnerable binarie...

cve-2025-29384-poc

CVE-2025-29384 Proof-of-Concept Exploit Overview This repository contains an advanced proof-of-concept PoC exploit for CVE-2025-29384 , a critical stack-based buffer overflow vulnerability discovered in the Tenda AC9 router running firmware version V15.03.05.14multi. This vulnerability allows...

CVE-2026-1122-IoT-Firmware-Update-Signature-Bypass-via-Low-Order-Point-Injection

5. CVE-2026-1122 – IoT Firmware Update Signature Bypass via Low‑Order Point Injection Overview An IoT device’s OTA firmware verification uses a flawed Ed25519 implementation that does not reject public keys with small‑order components, allowing an attacker to forge a valid signature for malicious...

oieh-router-checker

OIEH Router Checker A Windows program that checks with a single click whether your router is affected by the Chinese backdoor ENDLESSDOORS No installation required · No administrator rights required · No external data transmission What Is This? In August 2026, security firm VulnCheck discovered a...

ps5-uart

24 pin header near salina EDM-010 root@kitploit: emc header 1 5v 2 5v 3 gnd 4 gnd 5 emc gpio a1. pulling low at emc boot causes emc rom to enter uart shell @ 460800 6 uart rx emc 115200 7 uart tx emc 115200 8 3v3, goes low when emc resets 9 0v? 10 gnd 11 titania uart0 tx efc fw: 460800, eap fw:...