CVE-2025-24076

CVE-2025-24076 Vulnerabilidad de Elevación de Privilegios en el Servicio de Dispositivos Cruzados de Microsoft Windows Exploit Resumen Este script explota una vulnerabilidad en el Servicio de Dispositivos Cruzados de Windows que permite la escalada de privilegios en sistemas Windows 11 , Windows...

CVE-2012-6422

Exynos 漏洞利用 这是一个针对早期三星手机中/dev/exynos-mem漏洞的概念验证（POC）文件。出于对内核漏洞研究的兴趣以及作为CTF挑战的一部分而编写。 漏洞利用 这些手机中引入的漏洞在于exynos-mem设备的权限设置。它允许用户同时拥有读写权限，即使是非 root 用户！ exynos-mem 设备允许用户直接读取/写入/dev/mem，这意味着你可以直接写入内核代码/数据。 通过利用/proc/iomem，你可以快速找出哪些物理地址对应于操作系统中的哪部分内存，甚至还能找到内核代码/数据内存的位置。 该漏洞利用通过以下步骤实现获取 root 权限： 1. 由于我们...

vulnupnp

vulnupnp Descubrir dispositivos uPNP vulnerables a CVE-2013-0229 / CVE-2013-0230 / CVE-2012-5958 / CVE-2012-5959...

CVE-2023-45866_WIP

h0nkbtexploit Samsung devices are vulnerable to a critical Bluetooth security vulnerability that allows an attacker to control the targeted device as if they were attached by a Bluetooth keyboard, performing various functions remotely depending on the endpoint. This vulnerability, tracked as...

CVE-2026-51767

Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reset pairing state and reboot the device via sending a crafted MQTT message to the csbroker component...

EUVD-2026-69204

Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove a specified slave device from local mesh management data and reboot the system via sending a crafted MQTT message to the csbroker component...

PT-2026-84310

Name of the Vulnerable Software and Affected Versions gvfs affected versions not specified Description A flaw exists in the MTP backend of gvfs. When reading a file from a mounted MTP device, the do read function in gvfsbackendmtp.c trusts the data length returned by the device without limiting i...

CVE-2026-51767

Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reset pairing state and reboot the device via sending a crafted MQTT message to the csbroker component...

CVE-2026-51751

Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove a specified slave device from local mesh management data and reboot the system via sending a crafted MQTT message to the csbroker component...

CVE-2026-51767

CVE-2026-51767 is a critical (CVSS 3.1: 9.8 ) incorrect access control vulnerability in the recvClearPairCfg function of the TOTOLINK T6 mesh router (firmware 4.1.5cu.748_B20211015 ). An unauthenticated attacker on the network can send a crafted MQTT message to the cs_broker component to reset th...

Linux Distros Unpatched Vulnerability : CVE-2026-84270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the MTP backend in gvfs. When reading a file from a mounted MTP device, doread in gvfsbackendmtp.c trusts the data length returned by the...

cve-2019-2215-markw

Bad Binder para markw !CAUTION Todo lo que hagas es bajo tu propio riesgo. No soy responsable de tu dispositivo dañado. Adaptado con Deepseek V4 Flash Hecho para el último MIUI 10 Global. Resumen Objetivo principal: Obtener root temporal en el último miui oficial El root se puede usar para flashe...

CVE-2026-51729

Incorrect access control in the delDevice function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to request deletion of a managed slave device via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-77966 Ebyte NA111-M Missing Authorization

The affected Ebyte product does not provide separation between limited and administrative management functions. A low privileged authenticated attacker could access security sensitive configuration functions and modify settings that affect the confidentiality, integrity, or availability of the...

CVE-2020-27199

CVE-2020-27199 Magic Home Pro - 认证绕过 在 Magic Home Pro 移动应用中发现多个漏洞，该应用用于与 JadeHomic LED Strip RGB 套件交互。其中最严重的漏洞是认证绕过漏洞 CVE-2020-27199，该漏洞最终允许完全接管和控制受害者的整个设备组。 以下详细介绍了导致最终利用的枚举步骤，以及用于实施枚举和最终利用的 PoC 材料。 PoC 文件 magichome-forge.py - JWT 伪造器，用于自动化设备接管 magichome-sniffer.py -...

zephyr_cve-2021-3625

CVE-2021-3625 本仓库包含针对 CVE-2021-3625 的几个示例漏洞利用。 所有基于 Zephyr 的 USB 设备，直至（含）2.5.0 版本，均存在 缓冲区溢出漏洞，允许读取最多 65kB 数据。根据实际设备的不同， 这可能导致敏感数据（如加密密钥或凭据）泄露。 该问题可通过发出特制的 USB 控制传输请求来触发， 请求方向为 IN（读取，至主机），并带有特定的写入请求——例如 设置地址（0x05）。在这种情况下，向主机的写入并非预期操作，因此响应 长度不会更新，导致 request-wLength 保持初始设置值。 由于 wLength...

CVE-2026-80723

A flaw was found in the of: reservedmem component of the Linux kernel. When the device tree defines more dynamic regions than the MAXRESERVEDREGIONS array can hold, the fdtscanreservedmem function performs an out-of-bounds write. This vulnerability can lead to memory corruption, potentially...

CVE-2021-47881

CVE-2021-47881 Desbordamiento de búfer local basado en pila en dataSIMS Avionics ARINC 4.5.3 Data Device Corporation Hola, soy Kağan Çapar. En febrero de 2020 encontré un desbordamiento de búfer local basado en pila en el software de bus de datos de aviónica dataSIMS de DDC y publiqué una prueba ...

CVE-2026-80595

A flaw was found in the Linux kernel. The ims-pcu driver processes response data from device buffers without verifying the actual length of the data sent by the device. This oversight can lead to out-of-bounds reads, potentially allowing an attacker to access sensitive information or cause system...

vUSBf

vusbf-Framework root@kitploit: / / / / / / / / // | | / / / / / / / / / / / / / /\ / | | |/ / / / / // // / // / / / // // / // / |/ /,/,// //// / / / // / / / // // / / / / / // / / // // / / // ,/ ///// A KVM/QEMU based USB-fuzzing framework. Sergej Schumilo, OpenSource Security...