kata-cve-2020-2023-poc

kata-cve-2020-2023-poc 1. Reproduce Environment Note: The environment needs support KVM https://github.com/ssst0n3/dockerarchive/tree/branchubuntu-20.04docker-ce-19.03.11containerd.io-1.4.9kata-1.11.0 $ git clone https://github.com/ssst0n3/dockerarchive.git $ cd dockerarchive $ git checkout...

CVE-2024-3400

CVE-2024-3400 Detección de dispositivos Palo Alto vulnerables a CVE-2024-3400. options: -h, --help show this help message and exit -r IP, --ip IP IP address for single request -R FILE, --file FILE File path containing list of IP addresses...

CVE-2025-36911-Wisper_Pair_Target_Finder

This is not an exploit for CVE-2025-36911!!! This is a detector for finding potentially vulnerable devices! Only use on your own devices! I am not responsible for damages! Tested only on Debian Based Distros using python3 Usage: sudo apt update && sudo apt install python3 && sudo apt install git...

whisper-pair

Fast Pair Vulnerability Scanner Security research tool for detecting Bluetooth accessories vulnerable to WhisperPair attacks 🌐 WhisperPair Research • 📦 Installation • 🚀 Usage • 🔬 Technical Details ⚠️ Disclaimer This tool is for authorized security testing and research only. Testing devices without...

CVE-2023-3722

CVE-2023-3722 Python POC for CVE-2023-3722 Avaya Aura Device Services Unrestricted File Upload RCE. This script will use a PUT request to upload a php file with an eight-digit randomly generated filename. Then it will make a GET request to retrieve this file and parse the output to get the comman...

CVE-2026-14780

A vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insufficient sanitization and access restrictions within the embedded execution engine. An authenticated user with administrative access to the management interface can supply a malicious script that...

CVE-2026-14780 PaperCut NG/MF: Remote Code Execution via Scripting Subsystem

A vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insufficient sanitization and access restrictions within the embedded execution engine. An authenticated user with administrative access to the management interface can supply a malicious script that...

EUVD-2026-85791

A vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insufficient sanitization and access restrictions within the embedded execution engine. An authenticated user with administrative access to the management interface can supply a malicious script that...

CVE-2026-14780

The PaperCut NG/MF platform contains a vulnerability in its device-scripting functionality caused by insufficient sanitization and access restrictions within the embedded execution engine . An authenticated user with administrative access to the management interface can provide a malicious script...

CVE-2026-96774

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.320181106 Build 107. This affects the function loadCfg of the file /ini/syscfg.txt of the component Configuration File Download. The manipulation results in information disclosure. The attack can be launched...

CVE-2026-96774 SPON Communications IP Network Audio Device XC-9603 Configuration File Download sys_cfg.txt loadCfg information disclosure

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.320181106 Build 107. This affects the function loadCfg of the file /ini/syscfg.txt of the component Configuration File Download. The manipulation results in information disclosure. The attack can be launched...

EUVD-2026-85761

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.320181106 Build 107. This affects the function loadCfg of the file /ini/syscfg.txt of the component Configuration File Download. The manipulation results in information disclosure. The attack can be launched...

CVE-2026-96774

A vulnerability exists in the SPON Communications IP Network Audio Device XC-9603 (version 1.2.3_20181106 Build 107). The flaw impacts the loadCfg function within the /ini/sys_cfg.txt file of the Configuration File Download component. This issue allows for information disclosure via a remote atta...

gardyn

Summary In February 2025 I conducted security research on a Gardyn Home 4.0 device. During my research, I discovered multiple vulnerabilities and poor security practices. By leveraging these vulnerabilities an attacker may be able to gain system level access to a Gardyn device and use it to stage...

CVE-2026-93223: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix ofnodeput on VIP parse errors tegravipchannelofparse initializes np from dev-ofnode without taking a reference, but its error paths drop one through the errnodeput label. This underflows the...

UBUNTU-CVE-2026-93217

In the Linux kernel, the following vulnerability has been resolved: mm/madvise: skip device-private PMDs in cold and pageout walks madvisecoldorpageoutpterange takes pmdtranshugelock, whose pmdishuge check returns true for a device-private PMD. The subsequent !pmdpresent branch has a VMBUGON...

CVE-2026-96774: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.320181106 Build 107. This affects the function loadCfg of the file /ini/syscfg.txt of the component Configuration File Download. The manipulation results in information disclosure. The attack can be launched...

CVE-2026-82164: Incorrect Permission Assignment for Critical Resource

Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-14780: Improper Control of Generation of Code

A vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insufficient sanitization and access restrictions within the embedded execution engine. An authenticated user with administrative access to the management interface can supply a malicious script that...

CVE-2026-97432: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix P2P-Device binding handling Our binding handling for P2P-Device can run into the following scenario, as observed by our testing: - a station interface is connected on some channel - the P2P-Device does a...