scrcpy

此 GitHub 仓库（https://github.com/Genymobile/scrcpy）是该项目的唯一官方来源。请勿从随机网站下载发行版，即使其名称包含 scrcpy。 scrcpy v4.0 发音为 "scr een c opy " 此应用将 Android 设备（视频和音频）通过 USB 或 TCP/IP 连接镜像到电脑，并允许使用电脑的键盘和鼠标进行控制。它不需要 root 权限或在设备上安装应用。支持 Linux 、 Windows 和 macOS 。 它专注于： 轻量 ：原生，仅显示设备屏幕 性能 ：30120fps，取决于设备 质量 ：1920×1080 或更高 低...

AdbNet

adb - 一款用于安卓设备的利用工具。 一款允许你在全球范围内搜索易受攻击的安卓设备并对其进行利用的工具。 Features root@kitploit: Features: - Post-Exploitation modules to control and tinker with the device you are connected to. - Scanners to search for vulnerable android devices across the world to exploit. - Options for managing how many devices...

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198是思科IOS XE软件Web UI功能中的一个严重漏洞，允许未经身份验证的远程攻击者在受影响的系统上创建具有特权级别15的账户，从而完全控制设备。 该漏洞的产生主要源于Web UI功能中路径解析的不当处理。攻击者通过精心构造的HTTP请求，利用双重URL编码绕过Nginx的路径过滤机制，直接访问受保护的内部端点，如/webuiwsmahttp。通过这些端点，攻击者可以发送特制的SOAP请求，执行任意CLI命令或进行配置更改。...

CVE-2020-25749

CVE-2020-25749 Descripción sugerida El servicio Telnet de las cámaras Rubetek RV-3406, RV-3409 y RV-3411 versiones de firmware v342, v339 podría permitir que un atacante remoto tome el control completo del dispositivo con una cuenta de altos privilegios. La vulnerabilidad existe porque una cuenta...

ASUS-SmartHome-Exploit

ASUS-SmartHome-Exploit IDs de CVE CVE-2019-11061 : Control de acceso roto en HG100 Productos afectados : ASUS SmartHome Gateway HG100 Versión de firmware Productos afectados : Aplicación ASUS SmartHome Android APP versión 3.0.45190701 Descripción Si el atacante está en la misma red interna que el...

WAVLINK - Access Control

Wavlink WN530HG4, WN531G3, WN533A8, and WN551K are susceptible to improper access control via /cgi-bin/ExportAllSettings.sh, where a crafted POST request returns the current configuration of the device, including the administrator password. No authentication is required. The attacker must perform...

lamda

FIRERPA Android ｜ AI-Powered Automation 一个集下一代技术于一体的全能型 Android 自动化框架，融合了强大的端侧服务、AI 就绪型智能体以及可扩展的工具调用能力。 Documentation | 使用文档 | TELEGRAM | QQ 群 | SKILLS | llms-full.txt | 中文版本 FIRERPA 是面向 Android 的一体化设备控制平台 。服务端直接在设备上运行，无需额外运行时依赖 ；适配多代 Android 系统 ，无论是否 Root 均可使用 。PC 端通过 Python 客户端库统一调度，将 UI...

CVE-2023-45866_WIP

h0nkbtexploit Samsung devices are vulnerable to a critical Bluetooth security vulnerability that allows an attacker to control the targeted device as if they were attached by a Bluetooth keyboard, performing various functions remotely depending on the endpoint. This vulnerability, tracked as...

PT-2026-83774

Name of the Vulnerable Software and Affected Versions IObit Unlocker version 1.3.0.12 Description Improper privilege management occurs within the IRP MJ DEVICE CONTROL Handler component of the IObitUnlocker.sys library. Specifically, the issue resides in the ZwTerminateProcess function. This flaw...

CVE-2026-76784

Multiple TP-Link Kasa smart home devices are affected by insufficient cryptographic protections in the local device communication protocol. An attacker on an adjacent network can intercept, replay, or forge locally exchanged control messages, leading to unauthorized device control , state manipul...

PT-2026-82235

Name of the Vulnerable Software and Affected Versions TP-Link Kasa affected versions not specified Description Multiple smart home devices have insufficient cryptographic protections in the local device communication protocol. An attacker on the same network can intercept, replay, or forge locall...

CVE-2026-73669 Signify Philips Hue Bridge Pro MQTT broker missing authentication

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with network access to the MQTT service on a vulnerable system can read data and control connected lights. Fixed in...

Philips Hue Bridge Pro

RISK EVALUATION The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...

PT-2026-71799

Name of the Vulnerable Software and Affected Versions Signify Philips Hue Bridge Pro versions prior to 1.77.2071318010 Description The firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces with anonymous access enabled and no firewall restrictions. This allows an...

CVE-2026-73296

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, createmobiledatacollectionserver and createmobileactionserver in ufo/client/mcp/httpservers/mobilemcpserver.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without...

CVE-2026-73296 Microsoft UFO: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosure

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, createmobiledatacollectionserver and createmobileactionserver in ufo/client/mcp/httpservers/mobilemcpserver.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without...

SUSE CVE-2026-67303

FreeRDP before 3.29.0 contains a reachable assertion WINPRASSERTOutputBufferLength == BytesReturned in serialprocessirpdevicecontrol in channels/serial/client/serialmain.c. When serial device redirection is enabled and a server-controlled IRPMJDEVICECONTROL request specifies an unsupported IOCTL...

Linux Distros Unpatched Vulnerability : CVE-2026-67303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.29.0 contains a reachable assertion WINPRASSERTOutputBufferLength == BytesReturned in serialprocessirpdevicecontrol in...

CVE-2026-67303

FreeRDP before 3.29.0 contains a reachable assertion WINPRASSERTOutputBufferLength == BytesReturned in serialprocessirpdevicecontrol in channels/serial/client/serialmain.c. When serial device redirection is enabled and a server-controlled IRPMJDEVICECONTROL request specifies an unsupported IOCTL...

UBUNTU-CVE-2026-67303

FreeRDP before 3.29.0 contains a reachable assertion WINPRASSERTOutputBufferLength == BytesReturned in serialprocessirpdevicecontrol in channels/serial/client/serialmain.c. When serial device redirection is enabled and a server-controlled IRPMJDEVICECONTROL request specifies an unsupported IOCTL...