power-pwn

Поддерживается: Безопасные AI-агенты повсюду. Обзор Power Pwn — это набор инструментов для атакующей и защитной безопасности для Microsoft 365 Power Platform и сервисов AI. Основные возможности, среди прочего: 💾 PowerDump : Комплексное сканирование и сбор данных арендатора 🚪 BackDoor :...

uhubctl

uhubctl uhubctl is utility to control USB power per-port on smart USB hubs. Smart hub is defined as one that implements per-port power switching. Original idea for this code was inspired by hub-ctrl.c by Niibe Yutaka: https://www.gniibe.org/development/ac-power-control-by-USB-hub Compatible USB...

power-tracks-research

Power Tracks 研究 "Power Tracks"、"Stock Galaxy"、"Warped Prism" のマーケットメカニクスに関する包括的な研究リポジトリ。このコードベースには、現代のマーケットマイクロストラクチャにおける体系的な異常を発見・マッピングするために使用されたツール、パイプライン、検証スイートが含まれています。 構成 研究は3つの主要な柱に分かれています。 I. シグナル: Power Tracks & ステガノグラフィ 異常な「ハートビート」と隠されたデータチャンネルを検出する。 フェーズ57 : 検出スタック - Power Tracks...

Eaton-Intelligent-Power-Manager-Local-File-Inclusion

Eaton-Intelligent-Power-Manager-локальное-включение-файлов Локальное включение файлов в Eaton Intelligent Power Manager v1.6 позволяет злоумышленнику включить файл, что может привести к раскрытию конфиденциальной информации, отказу в обслуживании и выполнению кода. CVE-2018-12031 Чтобы...

power_analysis

Attaque par analyse de puissance sur RSA Index Index Introduction Attaques par analyse de puissance RSA : Une brève introduction Exemple RSA Équipement Mesure de la puissance : Une brève introduction Loi d'Ohm Loi des tensions de Kirchhoff LTK Diviseur de tension Résistance shunt Exemple de mesur...

CVE-2023-28343

CVE-2023-28343 Altenergy Power System Control Software settimezone RCE Vulnerability CVE-2023-28343 Название на китайском: Altenergy Power System Control Software settimezone 远程命令执行漏洞（CVE-2023-28343） CVSS core:9.0 Описание : Altenergy Power System Control Software — это программное обеспечение дл...

Exploits

익스플로잇 원본 CVE, 익스플로잇 PoC 및 보안 권고 작성자: @kmkz · boffsec-services.com · @kmkzsecurity 2026 파일| 대상| 유형| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| 권고 3-CVE 체인| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghelli Sicuro24| PoC mitmproxy| 9.3...

Eaton Intelligent Power Manager 1.6 - Directory Traversal

Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via directory traversal, which can lead to sensitive information disclosure, denial of service and code execution. id: CVE-2018-12031 info: name: Eaton Intelligent Power Manager 1.6 - Directory Traversal author: daffainfo...

Powertek Firmware <3.30.30 - Authorization Bypass

Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...

Altenergy Power Control Software C1.2.5 - Remote Command Injection

Altenergy Power Control Software C1.2.5 is susceptible to remote command injection via shell metacharacters in the index.php/management/settimezone parameter, because of settimezone in models/managementmodel.php. An attacker can potentially obtain sensitive information, modify data, and/or execut...

Overglade-Badges

Overglade 해커톤 배지 이것은 싱가포르의 overglade 해커톤을 위해 제가 디자인한 무전력 해커톤 배지입니다! RP2040으로 구동되며, 수동 NFC와 온보드 e-잉크 드라이버가 내장되어 있습니다! 맞춤 기능 원하는 대로 사용할 수 있는 수동 NFC 태핑 배터리가 필요 없는 e-잉크 지원 프로그래밍을 위해 헤더 핀으로 연결된 20개의 GPIO 더 복잡한 작업을 원할 경우 활성 NFC 모드 무전력, 핵심 기능에 전력이 필요 없는 보드 4MB 플래시 메모리를 갖춘 RP2040 SoC 멋진 PCB와 노출된 구리 아트 PC...

Android-Forensics-References

Android 포렌식 참고 자료 마지막 업데이트: 2025년 9월 22일 USERDATA 파티션 "/log" 폴더 /log/wifi/iwc/iwcdump.txt Cellebrite CTF 2023 요약: Sharon의 Android에 대한 답변 https://cellebrite.com/en/cellebrite-ctf-2023-recap-sharons-android/ /log/netstats /log/batterystats Cellebrite CTF 2021 - Heisenberg의 Android...

EUVD-2026-71278

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usbaudioresume jumps to errout when sndusbpcmresume or sndusbmixerresume fails. The error path skips th...

CVE-2026-80828 ALSA: usb-audio: Complete cleanup after system-resume errors

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usbaudioresume jumps to errout when sndusbpcmresume or sndusbmixerresume fails. The error path skips th...

EUVD-2026-70797

Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...

CVE-2026-65818

Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...

CVE-2026-65818

Power Automate (Microsoft) is affected by a server-side request forgery (SSRF) vulnerability that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.5 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating that while exploitation requires ...

CVE-2026-65818 Power Automate Elevation of Privilege Vulnerability

...

Power Automate Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...

wyze-bulb-color-pwned

wyze-bulb-color-pwned Беспроводная эксплуатация для цветной лампы Wyze WLPA19CV2 Обзор Цветные лампы Wyze Color WLPA19CV2 имеют заводской тестовый режим, который позволяет беспроводным способом прошить пользовательский OTA-образ через определённую последовательность циклов включения/выключения...