frida-ui

Frida UI 一个现代、轻量、基于网页的用户界面，用于 Frida，专为 Android 应用程序渗透测试 设计。它允许您直接从浏览器与设备、进程和脚本进行交互。 快速开始 使用 uv（推荐）或 pipx/pip 安装 uv tool install frida-ui 或者：pipx install frida-ui 或者：pip install frida-ui 启动服务器 frida-ui 打开您的浏览器并访问：http://localhost:8000 功能特性 📱 设备管理 自动发现 ：自动检测连接的 USB 和本地设备。 远程设备 ：轻松添加和管理远程 Frida 服务器（...

CVE-2026-22011-iOS-MDM-Profile-Delivery-over-HTTP

CVE-2026-22011 – Entrega de perfiles MDM de iOS a través de HTTP Código del programa servidor MDM Python Flask mdmserver.py - Serves enrollment profile over plain HTTP from flask import Flask, sendfile app = Flaskname @app.route'/enroll.mobileconfig' def serveprofile: Vulnerability: profile...

zafrida-ui

中文 | English ZAFrida UI - PyCharm Frida Plugin 当前版本： 0.3.7 0.3.7 主要更新 每个 ZAFrida Project 可独立选择或共享 Python/Frida 环境，默认使用当前 PyCharm 项目解释器，支持 venv、Conda、uv、Poetry、Pipenv、Hatch 等本地环境。 重新设计 Session UI 与 Project Settings，完整显示插件、Python 和 Frida 版本信息，并优化自适应、可拖动日志面板与会话状态。 完整支持 .js / .ts、Frida 16/17、多项目环境切换，...

simvyn

simvyn 通用移动开发工具 — 通过单一仪表板和 CLI 控制 iOS 模拟器、Android 模拟器和真实设备 目录 快速开始 安装 AI 编码代理 功能特性 模块展示 集合指南 CLI 参考 工作原理 支持的平台 贡献 安全 许可证 快速开始bash npx simvyn 启动本地服务器，在浏览器中打开 Web 仪表板，并自动发现所有已连接的模拟器、仿真器和通过 USB 连接的物理设备。 安装 全局安装：bash npm install -g simvyn 一次性使用（无需安装）： bash npx simvyn 环境要求： - Node.js 22（22.14.0+）或 24+...

thingsboard

一体化物联网平台，用于数据采集、处理、可视化和设备管理。 💡 快速开始 • 🌐 网站 • 📚 文档 • 📔 博客 • 🔗 LinkedIn 🚀 安装选项 在本地安装 ThingsBoard，或使用 ThingsBoard Cloud。 💡 ThingsBoard 快速入门 查看我们的快速入门指南，了解 ThingsBoard 的基础知识并创建您的第一个仪表板！您将学会： 将设备连接到 ThingsBoard 将数据从设备推送到 ThingsBoard 构建实时仪表板 创建客户并为其分配仪表板。 定义阈值并触发告警 通过电子邮件、短信、移动应用设置通知，或与第三方服务集成。 ✨ 功能特性...

YeaLink DM 3.6.0.20 - Remote Command Injection

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. id: CVE-2021-27561 info: name: YeaLink DM 3.6.0.20 - Remote Command Injection author: shifacyclewala,hackergautam severity: critical description: Yealink...

CVE-2026-32646

CVE-2026-32646：管理设备管理端点缺乏身份验证 公告 字段| 值 ---|--- CVE| CVE-2026-32646 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 7.5 High 向量| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CWE| CWE-306 关键功能缺少身份验证 研究人员| Michael Groberman — Gr0m 发布时间| 2026-04-02 Update A 产品 字段| 值 ---|--- 供应商| Gardyn 产品| Gardyn Home Kit 1....

PAGASUS-PRO

██████╗ ███████╗ ██████╗ █████╗ ███████╗██╗ ██╗███████╗ ██╔══██╗██╔════╝██╔════╝ ██╔══██╗██╔════╝██║ ██║██╔════╝ ██████╔╝█████╗ ██║ ███╗███████║███████╗██║ ██║███████╗ ██╔═══╝ ██╔══╝ ██║ ██║██╔══██║╚════██║██║ ██║╚════██║ ██║ ███████╗╚██████╔╝██║ ██║███████║╚██████╔╝███████╗ ╚═╝ ╚══════╝ ╚═════╝...

adbsploit

ADBSploit A python based tool for exploiting and managing Android devices via ADB Currently on development Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor And more... Installation First Download or clone repo git...

adbsploit

ADBSploit 一个基于Python的工具，用于通过ADB利用和管理Android设备 当前开发中 屏幕录制 流式屏幕录制 提取联系人 提取短信 提取即时通讯应用聊天记录（WhatsApp/Telegram/Line） 安装后门 以及更多... 安装 首先下载或克隆仓库 git clone https://github.com/mesquidar/adbsploit.git 进入目录 cd adbsploit 安装 python setup.py install 执行 adbsploit 尽情享受！ 要求 Python 3.X 使用说明 执行命令：devices...

Why Mobile Device Management Needs Its Own Threat Model

Allowing employees to use their own phones for work sounds simple. Deciding how much control IT should have…...

CVE-2026-101187

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

CVE-2026-101187 Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

CVE-2026-101187

A command injection vulnerability exists in the USB Device Management API of Ziroom ZHOME A0101 version 1.0.1.0. The flaw is located in the pop_usb_device function within the file usr/lib/lua/luci/controller/api/zrUsb.lua. By manipulating the argument path, an attacker can execute arbitrary comma...

CVE-2026-101187 Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

EUVD-2026-88546

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

CVE-2026-101187: Improper Neutralization of Special Elements used in a Command

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

PT-2026-102358

Name of the Vulnerable Software and Affected Versions Ziroom ZHOME A0101 version 1.0.1.0 Description An issue exists in the USB Device Management API within the file usr/lib/lua/luci/controller/api/zrUsb.lua. A remote attacker can perform command injection by manipulating the path argument passed...

CVE-2026-52483

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...

CVE-2026-52483

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...