security_articles

securityarticles- Vulnerabilities in Connected V16 Beacons Article where I explain several vulnerabilities found in the Help Flash IoT V16 beacon. These vulnerabilities affect the beacon's communications and a WiFi software update mechanism. DEC-2025...

fish-live-in-trees

Fish Live in Trees Production LLM Runtime Alignment Context Injection RACI Author: Sean Kavanagh Date: 2026-02-16 Environment: Gemini 3 Flash Free Tier - Public Production Interface Exploit Type: Contextual Pivot Factual Accuracy → Interpersonal Authenticity No jailbreak payloads. No special tool...

CVE-2017-4878-Samples

CVE-2017-4878-Samples CVE-2017-4878 Samples - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Flash exploits fec71b8479f3a416fa58580ae76a8c731c2294c24663c601a1267e0e5c2678a0 -...

flash-xdomain-xploit

Author: Gursev Singh Kalra [email protected] Bypassing Same Origin Policy with Flash and Insecure crossdomain.xml Compiling and deploying the Proof of Concept ActionScript code 1. Download and install Apache Flex SDK. It comes with an ActionScript compiler. 2. Copy the ActionScript code to...

spidump

spidump — SPI/QSPI trace capture & reconstruction spidump parses logic-analyzer captures of a device reading its SPI/QSPI NOR flash at boot and reconstructs the flash image from the read traffic — no direct chip read required. The flash command set is modelled with Scapy, so a read transaction is...

CVE-2018-15982

CVE-2018-15982 Flash sources for CVE-2018-15982 used by NK this is a dump of a fully weaponized activex obj used by NK https://threatpost.com/adobe-patches-zero-day-vulnerability-in-flash-player/139629/ Payloads are in Class 6 and 7...

CVE-2025-57428

⚠️ This repository is maintained only as a reference for CVE-2025-57428. For other advisories and updates, please refer to: security-advisories. CVE-2025-57428 - Telnet debug interface enabled by default allows low-level flash/register access Affected Product Vendor/Brand: Each Italy Device:...

CVE-2018-4878

Author and Credits Author: Vincent Yiu @vysecurity Credits: @evi1cg: Helping me test and keep me motivated @smgoreli: Original Calc.exe PoC @kbandla: He knows, and I know. ; Disclaimer Developed to encourage more Aggressor script development. Use only in authorized penetration testing! Descriptio...

SpiMitm

+OPTIONS: ^: SpiMitm - SPI flash read MitM attack PoC for anti-firmware forensics This PoC is focused on https://up-board.org/upsquared/specifications/UP Squared. How to use Follow Alan Sguigna's build process explained...

Tenda-F3-V4

Tenda F3 Router Exploit & File Downloader This project is a tool for downloading various files from the Tenda F3 router v3/v4 through an unauthenticated vulnerability CVE-2020-35391. It allows you to get the configuration file, system log, and flash dump from a vulnerable router. Overview The...

Arlo

Arlo Extract executable binaries from Arlo dump & updates See blogpost at https://www.synacktiv.com/publications/arlo-im-watching-you Parser arlo.py is used to parse a Flash memory dump, download and parse updates or list knwon models. It requires cryptography, asn1crypto and requests pip package...

SoftwareSystemSecurity-2019

SoftwareSystemSecurity-2019 Software System Security Final Assignment: Vulnerability Reproduction CVE-2018-4878 Flash 0day...

CVE-2015-0311

Reupload of an old Linux/Firefox port of an exploit for CVE-2015-0311 Use-after-free in Adobe Flash Player I created for educational purposes...

adobe-flash-cve2018-15982

Adobe Flash CVE-2018-15982 This script creates a swf payload for CVE-2018-15982, which is based off of the PoC from https://github.com/smgorelik/Windows-RCE-exploits. The vulnerability was discovered by Chenming Xu and Ed Miles of Gigamon ATR. The vulnerability is a use-after-free flaw enabling...

CVE-2021-40154

CVE-2021-40154 LPC55S69 and K82 USB In-System Programming ISP Buffer Over Read Vulnerabilities POC to test the BootROM vulnerability found in LPC55S69 and K82 Series Revision A2. The vulnerability is fixed in newer devices with newe Revision A3 for LPC55S69. Vulnerable Devices: Confirmed: LPC55S6...

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383 Vulnerability Description: During the security assessment of the Router firmware, it was observed that sensative information regarding the devices connected to router such as Mobile phone,Laptos, Tablets is...

pyLoad CVE-2023-0297 pyimport RCE

CVE-2023-0297 pyLoad-ng 0.5.0b3.dev31: unauthenticated POST /flash/addcrypted2 evaluates the jk form field via js2py without disablepyimport, allowing pyimport os; os.system.... !/usr/bin/env python3 -- coding: utf-8 -- """pyLoad CVE-2023-0297 pre-auth pyimport RCE via /flash/addcrypted2.""" from...

bd-alaris-firmware-analysis

BD Alaris 8015 Firmware Security Analysis Firmware Security Analysis of the BD Alaris 8015 PC Unit: Unencrypted Wi-Fi Credential Storage and Compound Vulnerabilities CVE-2016-9355 -orange Overview This project presents a firmware security analysis of the BD Alaris 8015 Point-of-Care PC infusion...

CheckFlashPlayerVersion

CheckFlashPlayerVersion Check the Browser's FlashPlayer version to check if it is vulnerable to exploit CVE-2016-7855 Usage: Clone this repository and then open the html file in the browser where you want to check the Flash Player version...

Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-

Extracting-User-credentials-For-Hathway-Router Via SPI flash-CVE-2024-44815 Vulnerability Description: During the security assessment of the Router firmware, it was observed that router login credentials of both web portal and Wi-Fi access point are stored in plain text in SPI flash memoey...