internalblue

Broadcom chips are used in approximately a billion of devices, such as all iPhones , MacBooks , the Samsung Galaxy S series, the older Google Nexus series, older Thinkpads , Raspberry Pis , various IoT devices, and more. In 2016, Cypress acquired the IoT division of Broadcom. Since then, firmware...

Azure-App-Tools

Azure-App-Tools مجموعة من الأدوات لاستخدامها مع تطبيقات Azure. https://azure.microsoft.com/en-us/get-started/apps/ المتطلبات الأساسية Azure Powershell Module https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-3.8.0 أمثلة: رموز الأجهزة الديناميكية إثبات المفهوم الأصلي بواسطة...

AirWatch

AirWatch What is AirWatch? AirWatch is a simple menu bar app which helps prevent device snatching attacks. As an example, such an attack was carried out against Ross Ulbricht. An agent grabbed his device and ran, thus preventing him from rebooting it. How does it work? AirWatch monitors the curre...

CVE-2024-3400

ثغرة CVE-2024-3400 الوصف ثغرة CVE-2024-3400 هي ثغرة أمنية تؤثر على جدران الحماية PAN-OS في الإصدارات 10.2 و11.0 و11.1. تُستغل هذه الثغرة عندما تكون إعدادات بوابة GlobalProtect وتليمترية الأجهزة مفعّلة. يمكن للمهاجم استغلال هذه الثغرة لتنفيذ أوامر خبيثة والمساس بأمان النظام. التفاصيل التقنية CVE :...

ghostscript-CVE-2023-43115

ghostscript-CVE-2023-43115 A small write-up with examples to help understand CVE-2023-43115. !WARNING I wrote this mainly for myself to understand the problem and to learn about cybersecurity. So there may be errors. The Problem To utilize the IJS device Improved Inkjet Printing, Ghostscript is...

CVE-2022-4096

CVE 2022 -4096 Amine TITROFINE | January 21, 2023 This experiment is destinated to demonstrate how the DNS rebinding attack works on an emulated IoT. In the setup, we have a simulated IoT device, which can be controlled through a web interface this is typical for many IoT devices. Many IoT device...

dlkploit600

DLKPloiT600.py Simple Python script for D-Link vulnerability scan and test CVE-2019-13101 https://nvd.nist.gov/vuln/detail/CVE-2019-13101 https://www.cvedetails.com/cve/CVE-2019-13101/ https://us.dlink.com/en/security-advisory https://www.dlink.com/en/security-bulletin Requirements: python3.x...

CVE-2026-80112 PassMark PerformanceTest, BurnInTest, and OSForensics Improper Access Control via DirectIo64.sys

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an improper access control vulnerability in the DirectIo64.sys kernel driver that allows unprivileged local users to perform privileged hardware operations by opening...

adaudit

adaudit This PowerShell script is designed to conduct a comprehensive audit of Microsoft Active Directory, focusing on identifying common security vulnerabilities and weaknesses. Its execution facilitates the pinpointing of critical areas that require reinforcement, thereby fortifying your...

wifitap

wifitap.py --- WiFi injection tool through tun/tap device Cedric Blancher [email protected] http://sid.rstack.org/index.php/Wifitap french http://sid.rstack.org/index.php/WifitapEN english...

cve-2023-20198

cve-2023-20198 Описание. 1vere$k POC на основе CVE-2023-20198 из Blog. Также включает проверку шестнадцатеричного ответа в соответствии с оригинальной статьёй Cisco. Скрипт работает в двух режимах: check — просто устанавливает соединение по указанному URL и проверяет код ответа. Если код 200 OK и...

Juniper-exploit-CVE-2023-36845

CVE-2023-36845 الوصف تمثل CVE-2023-36845 ثغرة بارزة في معالجة متغيرات بيئة PHP تؤثر على جدران الحماية Juniper SRX ومفاتيح EX. على الرغم من أن Juniper صنفت هذه الثغرة على أنها متوسطة الخطورة، إلا أننا في هذه المقالة سنوضح كيف يمكن استغلال هذه الثغرة الواحدة لتنفيذ أوامر عن بعد دون مصادقة. البحث -...

CVE-2026-80905

Linux kernel tap driver vulnerability in tap_get_user_xdp(). When processing VLAN-tagged frames (e.g., ETH_P_8021Q), skb_set_network_header() was called before skb_probe_transport_header(), causing the flow dissector to misinterpret the inner protocol header (e.g., an IP header) as a VLAN header....

EUVD-2026-71664

In the Linux kernel, the following vulnerability has been resolved: net: tap: fix wrong transportheader when sending VLAN-tagged frame In tapgetuserxdp, when processing a VLAN-tagged frame e.g. ETHP8021Q, skbsetnetworkheader is called first to advance networkheader past the VLAN tag to the inner...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

CVE-2026-80874

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: renesas: ironhide: Describe inline ECC carveouts The DBSC5 DRAM controller protects DRAM content using inline ECC. The inline ECC utilizes areas of DRAM for its operation, which are in the DRAM address range, but must...

CVE-2026-80872

CVE-2026-80872 affects the Linux kernel 's ALSA HDA TAS2781 driver (I2C and SPI variants). The TAS2781 driver queues RCA firmware loading via request_firmware_nowait(), whose async callback uses driver-private HDA state. During component unbind, controls and DSP state are removed immediately, and...

CVE-2015-2291

CVE-2015-2291 1 IQVW32.sys 1.3.1.0 से पहले और 2 IQVW64.sys 1.3.1.0 से पहले इंटेल ईथरनेट डायग्नोस्टिक्स ड्राइवर विंडोज के लिए स्थानीय उपयोगकर्ताओं को a 0x80862013, b 0x8086200B, c 0x8086200F, या d 0x80862007 IOCTL कॉल के माध्यम से सेवा से इनकार या कर्नेल विशेषाधिकारों के साथ मनमाना कोड निष्पादित...

Hardware Hacking Cheatsheet

Шпаргалка по аппаратному хакингу TOC Дисклеймер Я новичок, который пытается освоить подобные вещи, так что что-то может быть не на 100% правильно Простите за плохой английский Заметки Следуйте методологии «сначала самый лёгкий путь» Иногда потребуется паять; здесь краткая и простая инструкция...

CVE-2026-80852

CVE-2026-80852 is an out-of-bounds write in the Linux kernel's TLS device offload path (net/tls/tls_device.c). The root cause is that tls_push_data() skips its fragment-count check on an early MSG_MORE break, allowing num_frags to exceed MAX_SKB_FRAGS (17) when splice(SPLICE_F_MORE) calls are iss...