cve-2022-31898

cve-2022-31898 CVE-2022-31898 के लिए एक्सप्लॉइट POC कोड, GL-iNet राउटर्स में 3.215 से नीचे के फर्मवेयर के लिए कमांड इंजेक्शन उपयोग ./cve-2022-31898.py -h usage: cve-2022-31898.py -h -R RHOST -P RPORT -L LHOST -l LPORT -p PWD -t options: -h, --help show this help message and exit -R RHOST, --rhost...

nsdp-discover

nsdp-discover سكربت Nmap لتحديد بروتوكول اكتشاف مفاتيح Netgear NSDP على منافذ UDP 63322 و63324. يحاول السكربت إرسال طلب اكتشاف وينشئ خادم UDP للاستماع إلى الردود. تشمل المعلومات المسترجعة من هذا السكربت: نوع الجهاز، الاسم، MAC، الموقع، IP، قناع الشبكة الفرعية، البوابة، إصدارات البرنامج الثابت...

Detect-CVE-2024-0762

CVE-2024-0762 डिटेक्शन और मैलवेयर विश्लेषण स्क्रिप्ट सारांश यह स्क्रिप्ट UEFI फर्मवेयर संस्करणों का पता लगाने और CVE-2024-0762 से संबंधित कमजोरियों के लिए उनका आकलन करने के लिए डिज़ाइन की गई है। इसके अतिरिक्त, यह मैलवेयर के लिए फ़ाइलों का विश्लेषण करने के लिए VirusTotal API के साथ एकीकृत होती है,...

watchTowr-vs-WatchGuard-CVE-2025-9242

watchTowr-vs-WatchGuard-CVE-2025-9242 WatchGuard CVE-2025-9242 के लिए डिटेक्शन आर्टिफैक्ट जनरेटर https://github.com/user-attachments/assets/097f099b-ba60-4223-adea-04279570460f हमारी ब्लॉग पोस्ट में तकनीकी विवरण देखें कार्रवाई में पता लगाना python watchTowr-vs-WatchGuard-CVE-2025-9242.py --rhost...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy for BIOS version The strlcat function with FORTIFY support triggers a panic because it assumes that the target buffer will overflow, even though the correct target buffer size is provided. In any case,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Atom Integrated System Info v22 for DCN35 A new request from KMD/VBIOS is to support a new UMA carveout model. This resolves a null dereference issue when accessing Ctx-dcbios-integratedinfo, as this variable...

CVE-2026-80641

A flaw was found in the Linux kernel's wlcore Wi-Fi driver. An incorrect firmware version check for Integrity Group Temporal Key IGTK causes the number of available ciphers to continuously decrease on systems using older firmware, particularly affecting wl12xx chips. This issue leads to repeated...

SUSE CVE-2026-80641

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

CVE-2026-80641

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

EUVD-2026-67517

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

CVE-2026-80641 wifi: wlcore: enable the right set of ciphers

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

PT-2026-82941

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the wlcore wifi driver where the firmware version check for IGTK Integrity Group Temporal Key causes the number of available ciphers to decrease upon every boot when...

EUVD-2026-56980

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself. An authenticated attacker could submit arbitrary firmware version strings for their own device, allowing them to...

CVE-2026-64934 Mira Hormone Monitor, Mira Android App Reliance on untrusted inputs in a security decision

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself. An authenticated attacker could submit arbitrary firmware version strings for their own device, allowing them to...

CVE-2026-64934

CVE-2026-64934 affects the Mira Hormone Monitor ecosystem, specifically the Mira Android App and related cloud API. The root cause is reliance on the firmware version reported by the companion app without independent attestation from the device itself. An authenticated attacker could submit arbit...

CVE-2026-64934 Mira Hormone Monitor, Mira Android App Reliance on untrusted inputs in a security decision

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself. An authenticated attacker could submit arbitrary firmware version strings for their own device, allowing them to...

CVE-2026-64934: Reliance on Untrusted Inputs in a Security Decision

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself. An authenticated attacker could submit arbitrary firmware version strings for their own device, allowing them to...

PT-2026-70925

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself. An authenticated attacker could submit arbitrary firmware version strings for their own device, allowing them to...

EUVD-2026-54834

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for Telnet configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the Telnet...

EUVD-2026-54832

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious command...