CVE-2017-9476

CVE-2017-9476 नियतात्मक क्रेडेंशियल्स वाला छिपा हुआ एक्सेस पॉइंट AP। संकलन root@kitploit: cc xhscmmac2psk.c -o xhscmmac2psk उपयोग root@kitploit: ./xhscmmac2psk इस एल्गोरिदम को PSKracker में भी जोड़ा गया है। संदर्भ CVE-2017-9476 Bastille-18.home-security-wifi-network.txt DEFCON 25 श्वेतपत्र DEFCON...

bread

🍞 BREAD BREAD BIOS Reverse Engineering & Advanced Debugger ist ein 'injizierbarer' x86-Real-Mode-Debugger, der beliebigen Real-Mode-Code auf echter Hardware von einem anderen PC über ein serielles Kabel debuggen kann. Einführung BREAD entstand aus vielen fehlgeschlagenen Versuchen, Legacy-BIOS zu...

android_hid

androidhid Verwenden Sie Android als Rubber Ducky gegen gezielte Android-Geräte oder PCs HID-Angriff mit Android Verwenden von Android als Rubber Ducky gegen Android oder Windows. Dies ist keine neue Technik, sondern nur eine Demo, wie ein HID-Angriff mit Android anstelle eines Rubber Ducky...

ZTE Cable Modem Web Shell

ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests to webshellcmd.gch, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials. id: CVE-2014-2321 info: name: ZTE Cable Modem Web Shell author:...

Cable-modems

Análise de modems de ISP habilitados para WiFi Visão geral A SEARCH-LAB Ltd avaliou cinco modelos de gateways residenciais, todos eles usados por muitos provedores de serviços de internet em todo o mundo, mas os dispositivos reais foram operados por uma das operadoras de TV a cabo húngaras, a UPC...

sagemcom-fast-3890-exploit

Exploit do Sagemcom Fast 3890 Este exploit usa a vulnerabilidade Cable Haunt para obter um shell no modem a cabo Sagemcom F@ST 3890 50.10.19, a partir do acesso à rede local. A versão de firmware 50.10.21 ou superior deve ser segura contra o Cable Haunt. Esta prova de conceito foi especificamente...

android_hid

androidhid Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it ...

Cable

Cable Cable é uma ferramenta de pós-exploração utilizada para reconhecimento e exploração focada em Listas de Controle de Acesso Discricionário DACL em um ambiente Active Directory. Esta ferramenta foi criada principalmente para aprender mais sobre desenvolvimento ofensivo em .NET em um contexto ...

kernel: ALSA: aloop: Fix racy access at PCM trigger

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substream in the corresponding cable. Since both check and stop operations are...

CVE-2026-11410

An authenticated OS command injection vulnerability exists in the BigPond Cable BPA WAN configuration module in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges...

CVE-2026-11410

The CVE-2026-11410 entry concerns TL-WR940N v6 (BigPond Cable BPA WAN config) with an authenticated OS command injection caused by improper input sanitization in the configuration module. An administrator can trigger arbitrary command execution with elevated privileges on the device via the BPA W...

CVE-2026-11410 OS Command Injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940N

An authenticated OS command injection vulnerability exists in the BigPond Cable BPA WAN configuration module in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges...

CVE-2026-24444

SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints mgmt.php, npcmd.php that allows unauthenticated attackers to gain root access by submitting the hardcoded credential to the...

CVE-2026-24444 SDMC NE6037 Hardcoded Password via mgmt.php/npcmd.php

SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints mgmt.php, npcmd.php that allows unauthenticated attackers to gain root access by submitting the hardcoded credential to the...

PT-2026-44402

SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9 B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints mgmt.php, npcmd.php that allows unauthenticated attackers to gain root access by submitting the hardcoded credential to the...

EUVD-2026-32473

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopbackcheckformat may stop the capture side when playback starts with parameters that no longer match a running capture stream. Commit 826af7fa62e3 "ALSA: aloop: Fix...

CVE-2026-46090 ALSA: aloop: Fix peer runtime UAF during format-change stop

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopbackcheckformat may stop the capture side when playback starts with parameters that no longer match a running capture stream. Commit 826af7fa62e3 "ALSA: aloop: Fix...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qla2xxx: Fix command flush on cable pull The system crashed due to a command failing to be flushed back to the SCSI layer. BUG: Unable to handle a NULL pointer dereferencing in the kernel at 0000000000000000 PGD 0 P4D 0...

kernel: ALSA: aloop: Fix racy access at PCM trigger

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substream in the corresponding cable. Since both check and stop operations are...

kernel: ALSA: aloop: Fix racy access at PCM trigger

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substream in the corresponding cable. Since both check and stop operations are...