CVE-2026-80750

CVE-2026-80750 is a use-after-free in the Linux kernel's pmdomain: mediatek driver, specifically in scpsys_get_bus_protection_legacy(). Two error paths call of_node_put() before verifying the regmap lookup succeeded, then pass the potentially freed device node to dev_err_probe() with the %pOF spe...

CVE-2026-80750 pmdomain: mediatek: fix remaining %pOF after of_node_put()

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix remaining %pOF after ofnodeput scpsysgetbusprotectionlegacy looks up several legacy bus protection regmaps from device-tree nodes. Two error paths put the device node before checking whether the regmap...

CVE-2026-80750 pmdomain: mediatek: fix remaining %pOF after of_node_put()

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix remaining %pOF after ofnodeput scpsysgetbusprotectionlegacy looks up several legacy bus protection regmaps from device-tree nodes. Two error paths put the device node before checking whether the regmap...

CVE-2026-80732 ata: pata_sl82c105: fix bridge revision use-after-free

In the Linux kernel, the following vulnerability has been resolved: ata: patasl82c105: fix bridge revision use-after-free pcigetslot returns a referenced PCI device. Commit 44c10138fd4b "PCI: Change all drivers to use pcidevice-revision" replaced a configuration-space read with direct access to t...

CVE-2025-25257

Fortinet FortiWeb CVE-2025-25257 Vulnerability Tester Description This PowerShell script is designed for authorized penetration testing purposes only. It tests Fortinet FortiWeb appliances for CVE-2025-25257, an unauthenticated SQL injection vulnerability in the /api/fabric/device/status endpoint...

CVE-2026-66804-CrossDevice-Service-EoP

CVE-2026-66804: Elevación de Privilegios de la Cámara Virtual Cross Device Descubrí y reporté de forma independiente el problema que ahora se sigue como CVE-2026-66804. MSRC confirmó que mi envío era un duplicado de un informe anterior con la misma causa raíz subyacente de Windows Camera...

Brother MFC-L9570CDW - Information Disclosure

An unauthenticated attacker who can access either the HTTP service TCP port 80, the HTTPS service TCP port 443, or the IPP service TCP port 631, can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mntinfo.csv can be accessed via a GET request and no...

CVE-2026-52200

UZ801 / ES-U3TS MifiService Control de Acceso Roto Aviso de seguridad y notas técnicas sobre un problema de control de acceso roto en la API de gestión web embebida expuesta por MifiService.apk en la plataforma OEM / marca blanca UZ801v2.1 de Wi-Fi móvil 4G LTE, también comercializada como ES-U3T...

device_renesas_kernel_AOSP10_r33_CVE-2021-33034

Linux kernel Existen varias guías para desarrolladores y usuarios del kernel. Estas guías pueden generarse en varios formatos, como HTML y PDF. Por favor, lea primero Documentation/admin-guide/README.rst. Para construir la documentación, use make htmldocs o make pdfdocs. La documentación formatea...

CVE-2026-31280-Insecure-Bluetooth-RFCOMM-Leading-to-Device-Crash-in-Parani-M10-Intercom

CVE-2026-31280-Insecure-Bluetooth-RFCOMM-Leading-to-Device-Crash-in-Parani-M10-Intercom Un servicio Bluetooth Classic RFCOMM del intercomunicador Parani M10 está expuesto sin aplicar autenticación segura ni un control de acceso adecuado. Una vez dentro del alcance, cualquier dispositivo puede...

qualcomm-vulnerability-scanner

Qualcomm Vulnerability Scanner The Qualcomm Vulnerability Scanner is a tool designed to scan Android devices for the recently exploited Qualcomm flaw CVE-2026-21385. This tool provides a simple and efficient way to identify vulnerable devices and apply necessary patches. Features Scan Android...

CVE-2025-6018

Guía de escalada de privilegios CVE-2025-6018 + CVE-2025-6019 中文 📋 Pasos rápidos de explotación Paso 1: Preparar imagen XFS Máquina local root@kitploit: Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xf...

Best-Practices-Cybersecurity-Otanata-Project

CP3418BestPracticesCybersecurityOTANATAProject CVE-2024-3273 — Informe de prueba de penetración autorizada NAS D-Link DNS-320L | Cliente: Otonata Resumen Este repositorio contiene el informe completo de evaluación de seguridad para una prueba de penetración autorizada realizada en un dispositivo...

dcsgonebadge

DEF CON 新加坡一号徽章 本项目管理 Circuit Crafters 首个项目的硬件设计，这是一款电子硬件徽章，计划在 新加坡滨海湾金沙会展中心 举办的 DEF CON 新加坡 2026 安全会议 上分发。 许可证 本项目基于 CERN 开源硬件许可证第 2 版 – 强互惠（CERN-OHL-S）进行许可。您可以根据 CERN-OHL-S 的条款重新分发和修改本项目。许可证副本包含在 LICENSE.txt 文件中。 设备形态 根据该硬件设计构建的设备是一款可穿戴设备，包含密码安全电路以及以硬件实现的众多黑客特性。...

CVE-2025-34152

⚠️ CVE-2025-34152 – RCE en el repetidor Wi-Fi M300 de Shenzhen Aitemi 🚨 Resumen El repetidor Wi-Fi M300 de Shenzhen Aitemi está afectado por una ejecución remota de código RCE no autenticada. No requiere inicio de sesión No reinicia el dispositivo Puede explotarse de forma remota 🛠 Versiones...

CVE-2026-27199-werkzeug-safe-join-bypass-PoC

CVE-2026-27199 PoC: Werkzeug safejoin Windows Device-Name Bypass Status: Publicly disclosed. Fixed in werkzeug 3.1.6. Severity: Moderate Reporter: @alimezar Advisory: GHSA-29vq-49wr-vm6x Affected Versions...

ME2-Writeup

Reverse Engineering ME2's USB with a Heat Gun and a Knife Background In 2024, bjiru uploaded a video about the ME2 handheld device, a toy produced around 2008 that featured the ability to use USB to synchronize points and gems between your device and an online world. The game was extremely niche,...

mousejack

MouseJack device discovery and research tools For information on the MouseJack vulnerabilities, please visit mousejack.com. Requirements SDCC minimum version 3.1.0 GNU Binutils Python PyUSB platformio Install dependencies on Ubuntu: root@kitploit: sudo apt-get install sdcc binutils python...

Stego-Lab

Stego-Lab 隐写术。EXIF。水印。解码。批量处理。 适用于 iPhone、iPad 和 macOS 的专业图片隐私工作流。 网站 · GitLab · 项目页面 · 隐私政策 · 媒体资料 · 支持 · 许可证 为什么选择 Stego-Lab Stego-Lab 将通常分散在多个应用中的工作流整合到一起：不可见隐写术、可见水印、EXIF 编辑、解码以及批量处理。 Stego-Lab 整合了通常分散在多个应用中的工作流：不可见隐写术、可见水印、EXIF 编辑、解码和批量处理。 它专为创作者、摄影师、注重取证的用户以及需要在 iPhone、iPad 和 Mac...

CVE-2026-20212

CVE-2026-20212 affects the Silicon One Hardware Abstraction Layer (S1HAL) in Cisco Nexus 9000 Series Switches . The root cause is that TCP ports 43210 and 43211 are accessible in the default Layer 3 VRF, allowing an unauthenticated, remote attacker to send crafted input that executes code with ro...