EUVD-2026-68743

Incorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reset the device configuration and reboot the device via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51729

Incorrect access control in the delDevice function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to request deletion of a managed slave device via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51676

Incorrect access control in the setAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter access-device policies via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-68539

Incorrect access control in the setAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter access-device policies via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51725

Incorrect access control in the NTPSyncWithHost function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to change the device clock via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

Linux Distros Unpatched Vulnerability : CVE-2026-80723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a...

nexmon

What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...

CVE-2021-27965

CVE-2021-27965 针对 CVE-2021-27965 的概念验证（基于栈的缓冲区溢出） 注意：我可能不会再更新这个（仍有完成它的可能）。目前我能够干净地覆盖指令指针，但我相信这足以证明我拥有至少利用一个简单但真实的内核设备驱动程序所需的技能。我将研究另一个 CVE-2021-27965 漏洞利用，以寻找修复此问题的技巧。 为什么我没有完成它？我必须使用特定的令牌窃取 shellcode 来防止崩溃，这将要求我重写大部分漏洞利用代码（而我不想这样做）。...

e1000_vulnerability_exploit

e1000vulnerabilityexploit Installation $ ./install.sh Only own version build are supported yet. Please choose own and debug to build your debug version. Warning : During the process an error can occur, especially during the sources compilation. You can have something like "Exit with error status...

CVE-2022-40684

CVE-2022-40684 Extraer usuarios administradores y detalles de Fortigate uso: URL única: root@kitploit: .\poc-cve-2022-40684.ps1 -fgt 192.168.1.1 Múltiples URLs: root@kitploit: .\poc-cve-2022-40684.ps1 -urlsfile urls.txt...

frida-ios-dump

frida-ios-dump Obtén un IPA descifrado de un dispositivo con jailbreak Uso 1. Instala frida en el dispositivo 2. sudo pip install -r requirements.txt --upgrade 3. Ejecuta el reenvío SSH de usbmuxd/iproxy por USB por defecto 2222 - 22. p. ej. iproxy 2222 22 4. Ejecuta ./dump.py Display name o Bund...

abdal-lockbox

🔐 Abdal LockBox 🌐 选择您的语言： 🇬🇧 English | 🇨🇳 中文 | 🇷🇺 Русский | 🇪🇸 Español | 🇯🇵 日本語 | 🇮🇷 فارسی | 🇸🇦 العربية | 🇹🇷 Türkçe | 🇩🇪 Deutsch | 🇮🇳 हिन्दी 安全。存储。自动填充。 — 由 Abdal Security Group 打造的隐私优先 Android 密码管理器。 Abdal LockBox 将您的凭据加密保存在本机设备上 ，通过官方 Android Autofill 框架填充登录信息，并以便携的 .ablbx 加密格式备份保险库 —...

cve-2016-5345

CVE-2016-5345 高通FM无线电驱动程序中的权限提升。已在ASUS设备上测试利用。打开易受攻击的设备驱动程序需要一些已有权限。 原始CVE由Shellphish Grill团队的Aravind Machiry（donfos）发现。...

blackleak

BlackLeak Prueba de concepto para CVE-2024-30212 Tabla de contenidos 1. Acerca del PoC 2. Primeros pasos Requisitos previos Instalación 3. Uso 4. Licencia 5. Contacto 6. Agradecimientos Acerca del PoC Esta es la prueba de concepto para CVE-2024-30212. Para más detalles, consulta...

ssl-kill-switch2

SSL Kill Switch 2 Blackbox tool to disable SSL/TLS certificate validation - including certificate pinning - within iOS and macOS applications. Second iteration of https://github.com/iSECPartners/ios-ssl-kill-switch . Description Once loaded into an iOS or macOS application, SSL Kill Switch 2 will...

Redpoint

Redpoint Herramientas de enumeración de ICS de Digital Bond Redpoint es un proyecto de investigación de Digital Bond para enumerar aplicaciones y dispositivos ICS. Usamos nuestras herramientas Redpoint en evaluaciones para descubrir dispositivos ICS y obtener información que sería útil en pruebas...

openclaw v2026.8.1-beta.2

OpenClaw 🦞 — Your assistant, on your devices, in your chats OpenClaw is an AI assistant that runs on your devices and meets you in the channels you already use. It connects models, tools, messaging channels, and optional companion apps through one Gateway, for a single operator or for a team whos...

UltimateWDACBypassList

Ultimate WDAC Bypass List A centralized resource for previously documented WDAC/Device Guard/UMCI bypass techniques as well for building/managing/testing WDAC policies Note: WDAC Windows Defender Application Control has been rebranded by Microsoft as "Application Control" or "Application Control...

bluffs

BLUFFS Введение Этот репозиторий содержит код, относящийся к BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses. Аннотация статьи Bluetooth — это повсеместная технология беспроводной связи. Миллиарды устройств используют её в чувствительных приложениях и для обмена личными данными...

MAL-2026-15520 Malicious code in ring-device-settings-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ea2aed3d7e8c0b9c99532d6714c486a5ad685418ebbd96c67b44b63f79fe01 package.json declares a dependency whose key equals the package's own name ring-device-settings-library and whose value is a raw HTTPS URL pointing a...