DCS932L-Emulation-CVE-2024-37606-Attack

エミュレーションを再び簡単に ようこそ！このリポジトリは、D-Link DCS-932L ファームウェアをエミュレートし、CVE-2024-37606 の脆弱性を実証するためのツールと環境を提供します。パッチ適用済みのバイナリと必要なライブラリが含まれており、Ghidra などのツールを使った手動パッチ適用を必要とせず、エミュレーションのセットアップを簡略化します。 CVE-2024-37606 このプロジェクトには、CVE-2024-37606 の概念実証エクスプロイト CVE-2024-37606-DCS932L.py が含まれています。この脆弱性は、alphapd...

PT-2026-114748

Уязвимость функции mpfd decode файла bootloader region.bin компонента Emergency HTTP Recovery Server микропрограммного обеспечения Wi-Fi камер D-Link DCS-930L связана с недостаточной проверкой подлинности данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать...

PT-2026-110355

Name of the Vulnerable Software and Affected Versions D-Link DCS-930L version B1.08B4 Description A flaw in the Emergency HTTP Recovery Server component allows remote attackers to bypass cryptographic signature verification. This occurs through the manipulation of the firmware argument within the...

openSUSE 16 Security Update : chirp (openSUSE-SU-2026:21866-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21866-1 advisory. Changes in chirp: - Update to version 20260911: ftm300d: Experimental Yaesu FTM-300DR driver Update Ukrainian localization ar8200: Fix importing memorie...

Security update for chirp (important)

openSUSE security update: security update for chirp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21866-1 Rating: important References: bsc1280123 Cross-References: CVE-2026-78136 Affected Products: openSUSE Leap 16.0...

OPENSUSE-SU-2026:21866-1 Security update for chirp

This update for chirp fixes the following issues: Changes in chirp: - Update to version 20260911: ftm300d: Experimental Yaesu FTM-300DR driver Update Ukrainian localization ar8200: Fix importing memories with AM mode Unify Baofeng setting descriptions across drivers Add Yaesu FT5D uvb5: Fix Rever...

D-Link DCS-932L Subroutine Arbitrary Command Execution

The vulnerability of the sub42EF14 function /bin/alphapd of the D-Link DCS-932L microprogrammed surveillance camera is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

D-Link DCS-930L Auth RCE

Module exploits D-Link DCS-930L Remote Code Execution vulnerability which allows executing command on the device. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DCS-930L Auth RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.exploit.handler import...

D-Link DCS Cameras Authentication Bypass

D-Link DCS web cameras allow unauthenticated attackers to obtain the configuration of the device remotely. A copy of the device configuration can be obtained by accessing unprocteted URL. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DCS Cameras Authentication Bypass""" import re from...

SUSE CVE-2026-72913

Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, where handleremoteecho accepts printable shell command characters and handleremotessh calls getsshdata in...

Linux Distros Unpatched Vulnerability : CVE-2026-72913

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the...

CVE-2026-72913

Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, where handleremoteecho accepts printable shell command characters and handleremotessh calls getsshdata in...

DEBIAN-CVE-2026-72913

Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, where handleremoteecho accepts printable shell command characters and handleremotessh calls getsshdata in...

CVE-2026-72913

Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, where handleremoteecho accepts printable shell command characters and handleremotessh calls getsshdata in...

UBUNTU-CVE-2026-72913

Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, where handleremoteecho accepts printable shell command characters and handleremotessh calls getsshdata in...

EUVD-2026-55835

Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, where handleremoteecho accepts printable shell command characters and handleremotessh calls getsshdata in...

CVE-2026-72913 Kitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences

Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, where handleremoteecho accepts printable shell command characters and handleremotessh calls getsshdata in...

CVE-2026-72913 Kitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences

Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, where handleremoteecho accepts printable shell command characters and handleremotessh calls getsshdata in...

CVE-2026-72913

Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, where handleremoteecho accepts printable shell command characters and handleremotessh calls getsshdata in...

CVE-2026-72913

CVE-2026-72913 affects Kitty terminal (GPU-based, cross-platform) prior to version 0.48.2. The vulnerability arises from misbehavior in the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py, which write unauthenticated data to the child shell’s stdin. The handle_remote_echo path accepts ...