CVE-2026-80145 Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the services permission to execute arbitrary shell commands as root ...

CVE-2026-80144 Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands as root by exploiting an undocumented...

CVE-2026-80143 Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands as root by exploiting an undocumented...

CVE-2026-80143

Lantronix Autonomous Out-of-Band Devices (SLC8000, EMG8500, EMG7500, SLB882, SLCx-03, SLCx-02) are affected by a command injection vulnerability in the undocumented mfc eeprom read CLI command, which passes unsanitized user input directly to a system() call. Authenticated attackers can exploit th...

CVE-2024-9466

CVE-2024-9466 CVE-2024-9466 Proof of Concept PoC Description This script checks for the CVE-2024-9466 vulnerability by appending /home/userSpace/devices/debug.txt to a list of target URLs or IP addresses. It determines if the target is vulnerable based on the HTTP response status code and whether...

CVE-2018-9995_dvr_credentials

Herramienta mostrar Credenciales DVR root@kitploit: Título del Exploit: "Obtiene Credenciales DVR" CVE: CVE-2018-9995 Puntuación Base CVSS v3: 7.3 / 10 Cadena de Vector CVSS: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Fecha: 09/04/2018 Autor del Exploit: Fernandez Ezequiel twitter:@capitanalfa...

HIKRAVEN

HIKRAVEN 🛡️ Advanced Hikvision Security Assessment Platform - Professional Edition Features • Quick Start • Installation • Usage • Documentation • Disclaimer ⚠️ IMPORTANT LEGAL NOTICE ! THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY ! Unauthorized access to computer systems is illegal and...

Unity Linux 20.1070e Security Update: ghostscript (UTSA-2023-004048)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-004048 advisory. Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix. Tenable has extracted th...

CVE-2026-95861: Uncontrolled Recursion

A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

CVE-2026-95862: Out-of-bounds Write

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

vamp-forticheck

vamp-forticheck Multi-Vendor Edge Device CVE Scanner — VampSecure Labs Overview vamp-forticheck is an asynchronous, non-destructive security scanner that detects CVE vulnerabilities across seven major network security vendors. It performs a structured three-phase analysis: 1. Passive detection —...

CVE-2025-36911-exploit

WhisperPair CLI de Python Herramienta de explotación rápida para CVE-2025-36911 en Python para probar nuestro equipo Autor: Sébastien Dudek @FlUxIuS @ Penthertz Créditos: whisperpair.eu por el descubrimiento y esta bonita APK de @ZalexDev que acortó el tiempo de implementación wpair-app ⚠️ Aviso...

CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser

9. CVE-2026-6789 – Stack Buffer Overflow in Embedded TLS Certificate Parser Overview A popular lightweight TLS library simulated contains a stack buffer overflow when parsing X.509 certificate Subject Alternative Name extensions with a crafted length field. Severity: Critical RCE on IoT/Industria...

CVE-2017-7921-EXP

Exploit CVE-2017-7921 Se descubrió un problema de autenticación inadecuada en dispositivos Hikvision. ​ La vulnerabilidad de autenticación inadecuada ocurre cuando una aplicación no autentica a los usuarios de manera adecuada o correcta. ​ Esto puede permitir que un usuario malintencionado escale...

CVE-research

CVE-research A repository that contains all the working PoC I have crafted for known CVEs, and details on any ongoing research I am currently doing mostly Iot devices Note on working PoC exploit scripts/payloads 1. Use the exploit scripts ethically and responsibly! I will not be responsible for a...

CVE-2024-7339

CVE-2024-7339: Vulnerabilidad de fuga de información en dispositivos DVR. Exploiter es una herramienta de detección y explotación de vulnerabilidades para CVE-2024-7339, una vulnerabilidad de fuga de información en dispositivos DVR. Más de 400,000+ dispositivos filtran información como el modelo...

CVE-2023-36664-Ghostscript-command-injection

PoC de inyección de comandos en Ghostscript CVE-2023-36664 Vulnerabilidad divulgada en Ghostscript anterior a la versión 10.01.2 que permite la ejecución de código puntuación CVSS 9.8. Descripción oficial de la vulnerabilidad: Artifex Ghostscript hasta la versión 10.01.2 maneja incorrectamente la...

zephyr

ElasticSearch index map examples This directory contains ElasticSearch data store index map examples for use by uploadtestresultses.py script for Twister JSON reports upload. An index map file allows to create destination index files on ElasticSearch server with explicit scheme having all require...

h3c-pt-tools

h3c-pt-tools Huawei/H3C/HP Penetration Testing Tools A small collection of scripts to assist penetration testing/auditing networks which have Huawei and/or HP/H3C devices...

UNISOCUnlocker

UNISOCUnlocker Based of CVE-2022-38694 this adds a simple UI to remove the persist partition, commonly used for FRP IMPORTANT! Do not panic if the device appears to have a black screen. After the script is finished press the power button on the device. It should boot up normally after that. How 2...