CVE-2026-3227-TP-Link-authenticated-RCE

CVE-2026-3227: TP-Link 라우터 OS 명령 삽입 자세한 정보는 https://vulners.com/cve/CVE-2026-3227 를 참조하세요. 영구적이며 인증된 OS 명령 삽입 취약점으로, TP-Link 라우터 펌웨어에서 기기를 벽돌로 만들거나 LAN 장악이 가능합니다. 면책 조항 : 이 저장소는 패치된 취약점에 대한 개념 증명PoC 코드를 포함하고 있습니다. 교육 목적 및 보안 연구자들을 위해 제공됩니다. 요약 여러 TP-Link 라우터TL-WR802N, TL-WR841N, TL-WR840N 포함의 구성...

CVE-2023-33768

CVE-2023-33768 Описание Неверная проверка подписи прошивки во время процесса обновления прошивки устройства Belkin Wemo Smart Plug WSP080 v1.2 позволяет злоумышленникам вызвать отказ в обслуживании DoS с помощью специально созданного файла прошивки. Дополнительная информация При обновлении прошив...

CVE-2020-0443

CVE-2020-0443 이것은 CVE-2020-0443을 악용하여 모든 Android 기기를 벽돌 상태로 만드는 개념 증명 앱입니다. 앱을 실행하고 재부팅하면 기기가 부팅 애니메이션을 계속 반복합니다. 이 취약점에 대한 패치는 2020년 11월 Android 보안 게시판에서 공개되었습니다. 이 취약점으로 인해 벽돌 상태가 된 기기는 공장 초기화를 통해 복구할 수 있으며, 부트 루프 중 ADB에 접근할 수 있는 경우 다음 명령어를 사용할 수 있습니다: adb shell settings put system systemlocale...

CatSniffer-Firmware

CatSniffer 펌웨어 이 도구를 사용하기 위한 다양한 펌웨어를 여기에서 찾을 수 있습니다. v3.x에서 메인 마이크로컨트롤러가 변경되었기 때문에, 보유한 CatSniffer 버전을 확인하는 것이 중요합니다. 서로 다른 프로세서와 프로토콜 간의 호환성을 추적해야 했기 때문입니다. 버전별 펌웨어 CatSniffer를 프로그래밍하려면 먼저 보유한 버전을 확인해야 합니다. 이는 매우 중요합니다. 보유한 CatSniffer 버전과 다른 펌웨어 버전을 선택하면 CatSniffer가 벽돌BRICK이 됩니다 벽돌이 된 CatSniffe...

Exploit for OS Command Injection in Tp-Link Tl-Wr802N_Firmware

CVE-2026-3227: TP-Link Router OS Command Injection !CVEhtt...

CVE-2026-44089

Totolink EX1200L router is vulnerable to Buffer Overflow in the login functionality in cgi-bin/cstecgi.cgi endpoint. This vulnerability could be exploited to cause the program to crash and to execute code remotely. This allows the attacker to perform actions as root including reading and editing...

CVE-2026-44089 Buffer Overflow in Totolink EX1200L router

Totolink EX1200L router is vulnerable to Buffer Overflow in the login functionality in cgi-bin/cstecgi.cgi endpoint. This vulnerability could be exploited to cause the program to crash and to execute code remotely. This allows the attacker to perform actions as root including reading and editing...

EUVD-2026-38425

Totolink EX1200L router is vulnerable to Buffer Overflow in the login functionality in cgi-bin/cstecgi.cgi endpoint. This vulnerability could be exploited to cause the program to crash and to execute code remotely. This allows the attacker to perform actions as root including reading and editing...

PT-2026-51497

Totolink EX1200L router is vulnerable to Buffer Overflow in the login functionality in cgi-bin/cstecgi.cgi endpoint. This vulnerability could be exploited to cause the program to crash and to execute code remotely. This allows the attacker to perform actions as root including reading and editing...

EUVD-2021-25018

Malware in sbrugna...

EUVD-2022-34347

Malicious code in bioql PyPI...

📄 Glass Cage Zero-Click iMessage Exploit Details

Glass Cage, a vulnerability chain discovered on iOS 18.2, enables an attacker to compromise a device silently by sending a single malicious PNG image via iMessage. The exploit bypasses multiple layers of Apple's defenses, including BlastDoor, WebKit sandboxing, and CoreMedia memory protections...

New Critical AMI BMC Vulnerability Enables Remote Server Takeover and Bricking

A critical security vulnerability has been disclosed in AMI's MegaRAC Baseboard Management Controller BMC software that could allow an attacker to bypass authentication and carry out post-exploitation actions. The vulnerability, tracked as CVE-2024-54085 , carries a CVSS v4 score of 10.0,...

CVE-2024-28754

RaspAP aka raspap-webgui through 3.0.9 allows remote attackers to cause a persistent denial of service bricking via a crafted request...

CVE-2024-28754: Undefined Security Weakness

RaspAP aka raspap-webgui through 3.0.9 allows remote attackers to cause a persistent denial of service bricking via a crafted request...

CVE-2024-28754

RaspAP aka raspap-webgui through 3.0.9 allows remote attackers to cause a persistent denial of service bricking via a crafted request...

HP Claims Monopoly on Ink, Alleges 3rd-Party Cartridge Malware Risk

By Deeba Ahmed HP CEO Enrique Lores defended HP's practice of bricking printers when loaded with third-party ink. This is a post from HackRead.com Read the original post: HP Claims Monopoly on Ink, Alleges 3rd-Party Cartridge Malware Risk...

Unsafe use of balanceOf(address(this))

Lines of code Vulnerability details Impact AfEth.deposit can be bricked. Proof of Concept AfEth makes use of its own balance of afEth as a temporary store of afEth for withdrawal requests. On requestWithdraw afEth is transferred to the AfEth contract and these are then burned on withdraw. The...

Code injection

fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows an Unauthenticated Remote attacker to send a malicious firmware update via BLE and brick the device...

CVE-2021-35954

fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug SWD feature...