CVE-2026-59177

The ESPHome Device Builder Dashboard (versions prior to 1.0.10 ) is vulnerable to unauthenticated access when running as a Home Assistant add-on using host networking. The issue arises because the trusted ingress site binds to 0.0.0.0, allowing any device on the local network to bypass the superv...

CVE-2026-59177 ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces

ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to 1.0.10, the Home Assistant add-on's trusted ingress site binds to 0.0.0.0 while intentionally skipping dashboard authentication because the supervisor is expected to authenticate requests upstream...

PcapXray

PcapXray A network forensics tool — visualize PCAP files or live traffic as an annotated network diagram with device identification, protocol classification, Tor detection, and malicious traffic flagging. Module Overview graph TD UIuserinterface.py\nGUI controller -- PRpcapreader\nFile + Live...

CVE-2024-23700

CVE-2024-23700 - Android Companion Device Privilege Escalation PoC This project demonstrates CVE-2024-23700, a privilege escalation vulnerability related to the Companion Device mechanism on Android. The PoC shows how an app can exploit the companion device association flow to obtain certain...

awesome-flipperzero

A collection of Awesome resources for the Flipper Zero device. 👋 New to Flipper Zero? Got questions? Check out the FAQ Document❗ | 🚫 Not affiliated with Flipper Devices Inc. ---|--- Table of Contents Expandable Databases & Dumps General Sub-GHz NFC/RFID Infrared BadUSB Music Other Applications &...

Sapito

Sapito Authors: Sebastian Garcia [email protected], @eldracote, Veronica Valeros [email protected], @verovaleros About Sapito Sapito is a multicast DNS mDNS sniffer and interpreter written in Python. Sapito sniffs packets from a pcap or interface and interprets the findings. This means...

HomePWN

HomePwn - Swiss Army Knife for Pentesting of IoT Devices . | | \ \ | | \ / \ / / | /\ / / / \ | Y Y Y \ /| | \ / | \ || //||| /\ | //|| / / / / / ☠ HomePwn - IoT Pentesting & Ethical Hacking ☠ Created with ♥ by: 'Ideas Locas CDO Telefonica' HomePwn is a framework that provides features...

device_renesas_kernel_AOSP10_r33_CVE-2022-0492

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

DVR_Sploit

DVRSploit Simple python3 script to automate CVE-2018-9995 Requirements: requests pip install requests Usage: root@fuckmachine: python3 dvrsploit.py Enter DVR host: 192.168.69.69 Enter DVR port: 88 Device list:...

CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 is a vulnerability I submitted to NVIDIA PSIRT. Personally, it may lead to high security risks in multi-tenant HPC clusters, especially in cloud machine-learning platforms. This repository simply demonstrates the vulnerability on GPU containers created by...

blackleak

BlackLeak Proof of Concept for CVE-2024-30212 Table of Contents 1. About The PoC 2. Getting Started Prerequisites Installation 3. Usage 4. License 5. Contact 6. Acknowledgments About The PoC This is the proof of concept for CVE-2024-30212. For more details check...

bluesnoop

bluesnoop A simple Bluetooth Low Energy BLE sniffer using Python and the Bleak library Features Identify nearby device UUIDs and names Persistent tracking of first and last appearance Translation of cryptic model IDs Export intelligence for external analysis Demo Gallery Timed Snoop --- Limitless...

Awesome-MoAI-Security

Awesome Mobile On-Device AI Security SoK: Attack and Defense Landscape of Mobile On-device AI Systems Mobile on-device AI systems execute AI models locally through ML frameworks such as LiteRT/TFLite , Core ML , ExecuTorch , ONNX , and hardware-backed accelerators. This repo tracks the security...

CVE-2024-31320-

CVE-2024-31320- Get GeoLocation of Exploited Device using CVE-2024-31320& bluetooth...

Microsoft365_devicePhish

Microsoft365devicePhish Abusing Microsoft 365 OAuth Authorization Flow for Phishing Attack This is a simple proof-of-concept script that allows an attacker to conduct a phishing attack against Microsoft 365 OAuth Authorization Flow. Using this, one can connect to Microsoft's OAuth API endpoints t...

mousejack

MouseJack device discovery and research tools For information on the MouseJack vulnerabilities, please visit mousejack.com. Requirements SDCC minimum version 3.1.0 GNU Binutils Python PyUSB platformio Install dependencies on Ubuntu: sudo apt-get install sdcc binutils python python-pip sudo pip...

kata-cve-2020-2023-poc

kata-cve-2020-2023-poc 1. Reproduce Environment Note: The environment needs support KVM https://github.com/ssst0n3/dockerarchive/tree/branchubuntu-20.04docker-ce-19.03.11containerd.io-1.4.9kata-1.11.0 $ git clone https://github.com/ssst0n3/dockerarchive.git $ cd dockerarchive $ git checkout...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Guide 中文 📋 Quick Exploitation Steps Step 1: Prepare XFS Image Local Machine Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xfs xfs.image mnt sudo cp...

American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed

Modern phishing campaigns can compromise American businesses without relying on traditional credential theft. Attackers can abuse legitimate cloud services, authentication mechanisms, and trusted business workflows to gain access to corporate accounts while leaving fewer obvious signs behind...

Tool_Camera_Exploit_Netwave_CVE-2018-6479

ToolCameraExploitNetwaveCVE-2018-6479 Vulnerability allowing denial of service on Netwave Camera CVE-2018-6479. CVE-2018-6479: https://vulners.com/cve/CVE-2018-6479 a. Access the camera: b. Proceed to use the tool to exploit the denial of service vulnerability on the device: Enter the device's IP...