axiom

警告 : Axiom Classic 现已进入维护模式。我们鼓励您迁移到新的 Ax Framework。在接下来的几个月里，我们将在 2025 年之前为 Axiom Classic 引入必要的质量改进更新。Axiom 万岁！ Axiom 是一个动态基础设施框架 ，用于高效处理多云环境，构建和部署专注于进攻和防御安全的可重复基础设施。 Axiom 的工作原理是将您选择的工具预安装到“基础映像”上，然后使用该映像部署新实例。之后，您可以连接并立即访问许多对漏洞猎人和渗透测试人员有用的工具。借助不可变基础设施的强大功能，大部分工作已为您完成，您可以快速启动 15 个实例，执行分布式的...

CVE-2017-16744-and-CVE-2017-16748-Tridium-Niagara

PoC para CVE-2017-16744 y CVE-2017-16748 Prueba de concepto PoC CVE: 2017-16744 y 2017-16748 Fecha: 09/09/2019 Autor del exploit: GainSec - Jon Gaines Página web del proveedor: https://www.tridium.com/ Versión: Afecta a Tridium Niagara AX Versiones: 3.8 y anteriores, así como Niagara 4 Versiones:...

glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router

PoC de Triple RCE en GL.iNet Beryl AX PoC para tres vulnerabilidades de inyección de comandos sin autenticación CVE-2026-11450, CVE-2026-11451, CVE-2026-11452 en el firmware del router de viaje GL.iNet GL-MT3000 Beryl AX = 4.4.5. Artículo completo:...

The vulnerabilities of the functions ax25_release() and ax25_bind() in the net/ax25/af_ax25.c module, which are part of the networking functions of the Linux kernel, allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ax25release and ax25bind functions in the net/ax25/afax25.c module, which implements networking functions in the Linux kernel, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100358 advisory. In the Linux kernel, the following vulnerability has been resolved: ax25: properly unshare skbs in ax25kissrcv Bernard Pidoux reported a regression apparently caused...

EUVD-2023-50669

Certain GL.iNet devices with 4.x firmware allow authentication bypass resulting in administrative control of the device via a username that is both a valid SQL statement and a valid regular expression. For example, this affects version 4.3.7 on GL-MT3000 GL-AR300M GL-B1300 GL-AX1800 GL-AR750S...

EUVD-2026-20546

An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device,...

The vulnerability of the microprogramming software for Fortinet FortiSwitchAXFixed, related to deficiencies in access control, allows a intruder to execute arbitrary system commands.

The vulnerability of Fortinet FortiSwitchAXFixed microprogramming software is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary system commands using a specially created SSH configuration file...

CVE-2025-58345

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/apcertif11axmode write operation, leading to...

CVE-2025-58345

A vulnerability exists in the Wi-Fi driver of Samsung Mobile Processors and Wearable Processors (including Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000 ). The root cause is unbounded memory allocation triggered by a large buffer during a write operation to the /proc/...

The vulnerability of the form_fast_setting_wifi_set() function in the microprogrammed routing device Tenda AX-1803, which allows a hacker to trigger a service failure.

The vulnerability of the formfastsettingwifiset function in the Tenda AX-1803 router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the formSetMacFilterCfg() function in the Tenda AX-1806 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formSetMacFilterCfg function in the Tenda AX-1806 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the formSetWifiMacFilterCfg() function in the Tenda AX-1806 router’s microprogramming software allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the formSetWifiMacFilterCfg function in the Tenda AX-1806 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

CVE-2025-70644

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub60CFC function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70645

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70650

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70651

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70644

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub60CFC function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70644

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub60CFC function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70650

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...