zafrida-ui

中文 | English ZAFrida UI - PyCharm Frida Plugin Current Version: 0.3.6 Project Introduction Frida GUI Tool for PyCharm/IntelliJ ZAFrida UI is a Frida graphical interface plugin integrated into PyCharm and JetBrains IDEs. It aims to solve the complexity of Frida command-line operations and script...

simvyn

simvyn Universal mobile devtool — control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI Table of Contents Quick Start Installation AI Coding Agents Features Module Showcases Collections Guide CLI Reference How It Works Supported Platforms Contributing Securit...

adbsploit

ADBSploit 一个基于Python的工具，用于通过ADB利用和管理Android设备 当前开发中 屏幕录制 流式屏幕录制 提取联系人 提取短信 提取即时通讯应用聊天记录（WhatsApp/Telegram/Line） 安装后门 以及更多... 安装 root@kitploit: 首先下载或克隆仓库 git clone https://github.com/mesquidar/adbsploit.git 进入目录 cd adbsploit 安装 python setup.py install 执行 adbsploit 尽情享受！ 要求 Python 3.X 使用说明...

adbsploit

ADBSploit A python based tool for exploiting and managing Android devices via ADB Currently on development Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor And more... Installation root@kitploit: First Download or...

frida-ui

Frida UI A modern, lightweight, web-based user interface for Frida, designed for Android application penetration testing. It allows you to interact with devices, processes, and scripts directly from your browser. Quick Start root@kitploit: Install using uv recommended or pipx/pip uv tool install...

thingsboard

开源物联网平台，用于数据收集、处理、可视化及设备管理。 💡 开始使用 • 🌐 网站 • 📚 文档 • 📔 博客 • 🔗 LinkedIn 🚀 安装选项 在本地安装ThingsBoard，或使用ThingsBoard Cloud。 💡 开始使用ThingsBoard 请查看我们的入门指南或观看视频，了解ThingsBoard的基础知识并创建你的第一个仪表板！你将学习： 将设备连接到ThingsBoard 从设备推送数据到ThingsBoard 构建实时仪表板 创建客户并为其分配仪表板 定义阈值并触发告警 通过电子邮件、短信、移动应用设置通知，或集成第三方服务 ✨ 特性 配置和管理 设备及资...

CVE-2026-22011-iOS-MDM-Profile-Delivery-over-HTTP

CVE-2026-22011 – Entrega de perfiles MDM de iOS a través de HTTP Código del programa servidor MDM Python Flask root@kitploit: mdmserver.py - Serves enrollment profile over plain HTTP from flask import Flask, sendfile app = Flaskname @app.route'/enroll.mobileconfig' def serveprofile: Vulnerability...

EUVD-2026-82467

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...

CVE-2026-52483

MitraStar GPT-2741GNAC-N2-SV routers running firmware BR_g8.10_1.11(WVK.0)b46 allow authenticated users to execute arbitrary OS commands via concatenated parameters in a crafted POST request to the endpoint /cgi-bin/device-management-utilities-internet.cgi, which handles ping diagnostics and simi...

YeaLink DM 3.6.0.20 - Remote Command Injection

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. id: CVE-2021-27561 info: name: YeaLink DM 3.6.0.20 - Remote Command Injection author: shifacyclewala,hackergautam severity: critical description: Yealink...

CVE-2026-73173

Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to invoke critical device-management functions, including...

CVE-2026-73173

Nozomi Networks Labs identified a CWE-306 (Missing Authentication for Critical Function) vulnerability in the edgserver management protocol of the Advantech EKI-1242EIMS industrial Ethernet switch running firmware version V1.06.01 . A remote unauthenticated attacker can invoke critical device-man...

CVE-2026-73173

Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to invoke critical device-management functions, including...

CVE-2026-52484

An issue in MitraStar GPT-2742GX4X5v6-SV GLg2.5100XNT0b233 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/device-management-utilities-internet.cgi component...

CVE-2026-32646

CVE-2026-32646：管理设备管理端点缺乏身份验证 公告 字段| 值 ---|--- CVE| CVE-2026-32646 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 7.5 High 向量| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CWE| CWE-306 关键功能缺少身份验证 研究人员| Michael Groberman — Gr0m 发布时间| 2026-04-02 Update A 产品 字段| 值 ---|--- 供应商| Gardyn 产品| Gardyn Home Kit 1....

EUVD-2026-78943

An issue in MitraStar GPT-2742GX4X5v6-SV GLg2.5100XNT0b233 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/device-management-utilities-internet.cgi component...

CVE-2026-73022

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-73003

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

EUVD-2026-73654

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-69377

CVE-2026-69377 affects Windows Modern Device Management (MDM) , where a missing authorization check allows a low-privileged local attacker to escalate privileges with high impact on confidentiality, integrity, and availability. The assigned CVSS 3.1 score is 7.8 (HIGH) with the vector AV:L/AC:L/P...