simvyn

simvyn Universal mobile devtool — control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI Table of Contents Quick Start Installation AI Coding Agents Features Module Showcases Collections Guide CLI Reference How It Works Supported Platforms Contributing Securit...

thingsboard

Plataforma IoT todo en uno para la recopilación, el procesamiento y la visualización de datos, y la gestión de dispositivos. 💡 Comenzar • 🌐 Sitio web • 📚 Documentación • 📔 Blog • 🔗 LinkedIn 🚀 Opciones de instalación Instala ThingsBoard on-premises o utiliza ThingsBoard Cloud. 💡 Primeros pasos con...

zafrida-ui

中文 | English ZAFrida UI - PyCharm Frida Plugin Versión actual: 0.3.7 Principales novedades de 0.3.7 Cada ZAFrida Project puede seleccionar o compartir de forma independiente el entorno Python/Frida; por defecto se usa el intérprete del proyecto PyCharm actual, con soporte para entornos locales co...

frida-ui

Frida UI Una interfaz de usuario moderna, ligera y basada en web para Frida, diseñada para pruebas de penetración en aplicaciones Android. Te permite interactuar con dispositivos, procesos y scripts directamente desde tu navegador. Inicio rápido Instalar usando uv recomendado o pipx/pip uv tool...

PAGASUS-PRO

██████╗ ███████╗ ██████╗ █████╗ ███████╗██╗ ██╗███████╗ ██╔══██╗██╔════╝██╔════╝ ██╔══██╗██╔════╝██║ ██║██╔════╝ ██████╔╝█████╗ ██║ ███╗███████║███████╗██║ ██║███████╗ ██╔═══╝ ██╔══╝ ██║ ██║██╔══██║╚════██║██║ ██║╚════██║ ██║ ███████╗╚██████╔╝██║ ██║███████║╚██████╔╝███████╗ ╚═╝ ╚══════╝ ╚═════╝...

adbsploit

ADBSploit Una herramienta basada en Python para explotar y gestionar dispositivos Android a través de ADB Actualmente en desarrollo Screenrecord Stream Screenrecord Extraer Contactos Extraer SMS Extraer chats de aplicaciones de mensajería WhatsApp/Telegram/Line Instalar Backdoor Y más...

adbsploit

ADBSploit A python based tool for exploiting and managing Android devices via ADB Currently on development Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor And more... Installation First Download or clone repo git...

YeaLink DM 3.6.0.20 - Remote Command Injection

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. id: CVE-2021-27561 info: name: YeaLink DM 3.6.0.20 - Remote Command Injection author: shifacyclewala,hackergautam severity: critical description: Yealink...

CVE-2026-22011-iOS-MDM-Profile-Delivery-over-HTTP

CVE-2026-22011 – iOS MDM Profile Delivery over HTTP Program Code Python Flask MDM server mdmserver.py - Serves enrollment profile over plain HTTP from flask import Flask, sendfile app = Flaskname @app.route'/enroll.mobileconfig' def serveprofile: Vulnerability: profile delivered without HTTPS...

CVE-2026-32646

CVE-2026-32646: Falta de autenticación en el endpoint administrativo de gestión de dispositivos Aviso Campo| Valor ---|--- CVE| CVE-2026-32646 ICSA| ICSA-26-055-03 Actualización A CVSS 3.1| 7.5 Alto Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CWE| CWE-306 Falta de autenticación para...

CVE-2026-101187

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

CVE-2026-101187 Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

CVE-2026-101187 Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

EUVD-2026-88546

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

CVE-2026-101187

A command injection vulnerability exists in the USB Device Management API of Ziroom ZHOME A0101 version 1.0.1.0. The flaw is located in the pop_usb_device function within the file usr/lib/lua/luci/controller/api/zrUsb.lua. By manipulating the argument path, an attacker can execute arbitrary comma...

PT-2026-102358

Name of the Vulnerable Software and Affected Versions Ziroom ZHOME A0101 version 1.0.1.0 Description An issue exists in the USB Device Management API within the file usr/lib/lua/luci/controller/api/zrUsb.lua. A remote attacker can perform command injection by manipulating the path argument passed...

CVE-2026-101187: Improper Neutralization of Special Elements used in a Command

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

CVE-2026-52483

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...

CVE-2026-52483

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...

CVE-2026-52483

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...