zyxel-p870hn-hardware-hacking

むき出しのPCBからrootへ: UART経由でZyXEL P-870HNをハードウェアハッキング ラベルのないルーター基板のスマホ写真2枚 → シリアルコンソール → 認証バイパス → rootシェル — 私が所有するハードウェア上で、実在し、いまだパッチ未適用の連鎖 CVE-2025-0890 （隠しsupervisorアカウント）+ CVE-2024-40891 （CLIコマンドインジェクション）を再現する。 damik0 著 · 2026-08-13 · ハードウェアハッキングのウォークスルー 📷 PCB photos ─▶ 🔬 chip recon ─▶ 🏷️ model ID...

BIT-RCLONE-2026-93986 rclone before 1.75.1 Path Traversal via Directory Listing Names

rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object names. Attackers can craft special names containing forward slashes and parent directory references to potentially write outside the...

ROOT-APP-NPM-CVE-2025-71330 CVE-2025-71330 in image-size - Patched by Root

Root has patched CVE-2025-71330 in the image-size package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-71329 CVE-2025-71329 in image-size - Patched by Root

Root has patched CVE-2025-71329 in the image-size package for Root:npm. Multiple fixed versions available...

cve-2025-50946

cve-2025-50946 CVE-2025-50946 OliveTin get-theme RCE에 대한 익스플로잇 스크립트입니다. 문자 요구 사항이 까다로워 여러 인수를 포함하는 많은 명령이 제대로 실행되지 않을 수 있습니다. 근본 원인을 추적하거나 스크립트를 더 강력하게 만들 시간을 투자하지 않았습니다. 필요한 것이 있으면 저에게 연락하거나 PR을 열어주세요. 이 스크립트의 기반이 된 원본 연구를 제공한 chrisWalker11에게 감사드립니다: link 사용 예 기본 PoC: python cve-2025-50946.py -t...

Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-

Webmin 1.580 RCE 실행 가이드 Webmin 1.580의 /file/show.cgi 구성 요소를 통해 인증된 원격 코드 실행RCE을 수행하기 위한 빠른 참고 자료입니다. 1. 공격 머신 리스너 페이로드를 실행하기 전에 로컬 머신에서 다음 명령을 실행하여 들어오는 연결을 캐치하세요: rlwrap nc -lnvp 4444 2. 대상 익스플로잇 페이로드 다음 URL을 브라우저 주소 표시줄에 직접 붙여넣으세요 먼저 Webmin 대시보드에 로그인되어 있는지 확인하십시오:...

CVE-2026-11834

CVE-2026-11834 PoC TP-Link DHCP Option 66 비인증 RCE CVE-2026-11834 개요 TP-Link 라우터 펌웨어의 DHCP Option 66"TFTP Server Name" 처리에서 발생하는 명령 주입 취약점CWE-78으로 인해 동일 네트워크 세그먼트의 비인증 공격자가 루트 권한으로 임의의 명령을 실행할 수 있습니다. 장치가 WAN 인터페이스에서 DHCP 클라이언트로 작동할 때, 임대에서 반환된 Option 66 값은 libcmm.so 내의 tftp 셸 명령에 검증되지 않은 채 연결됩니다...

aquos-r6-ghostlock

AQUOS R6 GhostLock 一時 root Sharp AQUOS R6 向けの GhostLock CVE-2026-43499 のデバイス固有 Linux 5.4 ポート。検証済みのターゲットは SoftBank A101SH Judau で、Android 11 ビルド S0029 / 01.00.06、カーネル 5.4.61-qgki が動作している。 ghostlock54 ターゲットは実際の UID/GID 0 を取得し、SELinux を permissive に変更し、既存の ADB トランスポートを介して直接インタラクティブな root シェルを開く。TCP...

CVE-2026-10520

🎯 CVE-2026-10520 & CVE-2026-10523 - Ivanti Sentry Pre-Authentication Remote Code Execution + Authentication Bypass Author: Ashraf Zaryouh "0xBlackash" 📌 Overview Two critical vulnerabilities affecting Ivanti Sentry formerly MobileIron Sentry: CVE-2026-10520 → CVSS 10.0 - Pre-auth OS Command...

ROOT-APP-NPM-GHSA-2CM2-M3W5-GP2F GHSA-2cm2-m3w5-gp2f in vm2 - Patched by Root

Root has patched GHSA-2cm2-m3w5-gp2f in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44000 CVE-2026-44000 in vm2 - Patched by Root

Root has patched CVE-2026-44000 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-43999 CVE-2026-43999 in vm2 - Patched by Root

Root has patched CVE-2026-43999 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44002 CVE-2026-44002 in vm2 - Patched by Root

Root has patched CVE-2026-44002 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-43715 CVE-2026-43715 in webkit2gtk - Patched by Root

Root has patched CVE-2026-43715 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-43660 CVE-2026-43660 in webkit2gtk - Patched by Root

Root has patched CVE-2026-43660 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-28953 CVE-2026-28953 in webkit2gtk - Patched by Root

Root has patched CVE-2026-28953 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-28847 CVE-2026-28847 in webkit2gtk - Patched by Root

Root has patched CVE-2026-28847 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-4367 CVE-2024-4367 in webkit2gtk - Patched by Root

Root has patched CVE-2024-4367 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-28946 CVE-2026-28946 in webkit2gtk - Patched by Root

Root has patched CVE-2026-28946 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-28942 CVE-2026-28942 in webkit2gtk - Patched by Root

Root has patched CVE-2026-28942 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...