6487 matches found
Firmware-CVE-2025-7545
Preparazione per il download del repository 1. Aggiorniamo i pacchetti: sudo apt-get update 2. Se necessario, installa git: sudo apt install -y git Download del repository, installazione di Binutils vulnerabile e configurazione dell'ambiente 1. Scarichiamo il repository: git clone...
CVE-2022-30525_check
CVE-2022-30525check Descrizione: Questo script verifica la presenza della vulnerabilità di iniezione dei comandi del sistema operativo CVE-2022-30525 nei dispositivi Zyxel USG FLEX che eseguono versioni del firmware dalla 5.00 alla 5.21 Patch 1. La vulnerabilità consente a un attaccante di...
CVE-2025-57174
CVE-2025-57174 - Serie Siklu EtherHaul - Esecuzione remota di comandi non autenticata CVE-2025-57174 Esecuzione remota di comandi non autenticata Versioni interessate: Firmware 7.4.0 - 10.7.3 probabilmente tutte le versioni dalla 7.4.0 Come usare root@kitploit: python3 CVE-2025-57174.py...
CVE-2019-13025
Connect Box CH7465LG CVE-2019-13025 Informazioni Questo repository contiene due PoC per il Connect Box CH7465LG con firmware CH7465LG-NCIP-6.12.18.24-5p8-NOSH o precedenti. Per maggiori informazioni, dai un'occhiata al mio blog. Utilizzo Esecuzione Remota di Codice non Autenticata $ python3...
CVE-2024-24919
Strumento di Exploit RCE per Check Point Security Gateway CVE-2024-24919 Panoramica Questo repository contiene uno strumento per sfruttare la vulnerabilità CVE-2024-24919 nei Check Point Security Gateway. Lo strumento è un multi-scanner in grado di identificare dispositivi vulnerabili e un exploi...
CVE-2024-29973
CVE-2024-29973 PoC e Scanner di Massa Panoramica Questo è un proof-of-concept PoC e scanner di massa per CVE-2024-29973: vulnerabilità di iniezione di comandi nei firmware Zyxel NAS326 versioni precedenti alla V5.21AAZF.17C0 e NAS542 versioni precedenti alla V5.21ABAG.14. Versione 1.0.2...
CVE-2024-36877
CVE-2024-36877 POC dell'exploit per CVE-2024-36877 Un resoconto dettagliato è disponibile sul mio blog - https://jjensn.com/at-home-in-your-firmware https://github.com/user-attachments/assets/71f30cda-61e3-49ea-b856-959746349f2d...
CVE-2026-24225
NVIDIA DGX Spark is affected by an out-of-bounds read in the standalone MM firmware , which could allow an attacker with local and high privileges to cause information disclosure . The CVSS v3.1 score is 6.0 (MEDIUM) with a changed scope and high confidentiality impact. No in-the-wild exploitatio...
remote-bitlocker-encryption-report
remote-bitlocker-encryption-report Questo script PowerShell prende un elenco di PC come input, ottiene il loro tipo di crittografia BitLocker in remoto e produce l'elenco come file CSV per aiutare a mitigare la vulnerabilità CVE-2018-12038. Prevenire la vulnerabilità CVE-2018-12038 Descrizione di...
ADB/Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure
ADB formerly Pirelli Broadband Solutions P.DGA4001N router with firmware PDGTEFSP4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service device restart as demonstrated by a direct request to 1...
Four-Faith F3x36 - Authentication Bypass
Four-Faith F3x36 router with firmware v2.0.0 contains an authentication bypass caused by hard-coded credentials in the administrative web server, letting attackers with knowledge of credentials gain administrative access via crafted HTTP requests. id: CVE-2024-9643 info: name: Four-Faith F3x36 -...
Tattile Camera < 1.181.5 - Default Login
Tattile Smart+, Vega, and Basic device families firmware = 1.181.5 contain a broken authentication caused by default credentials not forced to be changed, letting attackers with management interface access gain administrative privileges. id: CVE-2026-26341 info: name: Tattile Camera 1.181.5 -...
blogpost_cve-2018-19987-analysis
CVE-2018-19987 D-Link OS command injection – Analyse Hallo zusammen! In diesem kurzen Blogbeitrag stelle ich eine schnelle Analyse vor, die ich durchgeführt habe, um die Details hinter CVE-2018-19987 besser zu verstehen. Zunächst bin ich dieser CVE nachgegangen, weil ich dachte, dass es keine...
CVE-2025-26237
D-Link DI-7001 MINI_5G (firmware 19.10.31A1 ) contains a code execution vulnerability in the flag parameter of the msp_info handler. An attacker can exploit this flaw to execute arbitrary commands on the device. The provided documents do not specify the exact injection mechanism (e.g., shell meta...
aziot-cctv-cve-2025-50777
aziot-cctv-cve-2025-50777 CVE-2025-50777: Accesso root ed esposizione di credenziali in chiaro in AZIOT Smart CCTV Riepilogo È stata identificata una vulnerabilità nel controllo degli accessi locali CVE-2025-50777 nel firmware della AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera versione...
CVE-2026-75616 Command Injection in Router Web Management Interface
An OS command injection vulnerability exists in the web management interface of Archer C20 v6 firmware when processing certain WAN-related configuration operations. An authenticated administrator may exploit insufficient input validation to execute arbitrary system commands, potentially resulting...
EUVD-2026-62417
Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tokens by extracting the secret from the firmware image. Attackers can use the...
PT-2026-78582
Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30 IBM Power Systems Firmware versions FW1060.00 through FW1060.80 IBM Power Systems Firmware versions FW950.00 through FW950.H2 IBM Power System...
PT-2026-78574
Name of the Vulnerable Software and Affected Versions IBM Power Firmware version FW1120.00 IBM Power Firmware versions FW1110.00 through FW1110.30 IBM Power Firmware versions FW1060.00 through FW1060.80 Description A flaw in the host firmware allows an attacker with service access to the service...
