CVE-2026-76639

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability scored CVSS 8.8 (HIGH) . An attacker on an adjacent network can chain three weaknesses—an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key with world-readable permissio...

blogpost_cve-2018-19987-analysis

CVE-2018-19987 D-Link OS कमांड इंजेक्शन विश्लेषण नमस्ते! इस छोटी ब्लॉग पोस्ट में मैं CVE-2018-19987 के पीछे के विवरणों को बेहतर ढंग से समझने के लिए किए गए अपने एक त्वरित विश्लेषण को विस्तार से बताऊँगा। शुरुआत में मैं इस CVE के पीछे गया क्योंकि मुझे लगा कि इसके बारे में कोई सार्वजनिक जानकारी या...

Four-Faith F3x36 - Authentication Bypass

Four-Faith F3x36 router with firmware v2.0.0 contains an authentication bypass caused by hard-coded credentials in the administrative web server, letting attackers with knowledge of credentials gain administrative access via crafted HTTP requests. id: CVE-2024-9643 info: name: Four-Faith F3x36 -...

ADB/Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure

ADB formerly Pirelli Broadband Solutions P.DGA4001N router with firmware PDGTEFSP4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service device restart as demonstrated by a direct request to 1...

Tattile Camera < 1.181.5 - Default Login

Tattile Smart+, Vega, and Basic device families firmware = 1.181.5 contain a broken authentication caused by default credentials not forced to be changed, letting attackers with management interface access gain administrative privileges. id: CVE-2026-26341 info: name: Tattile Camera 1.181.5 -...

CVE-2024-29973

CVE-2024-29973 PoC और बल्क स्कैनर अवलोकन यह CVE-2024-29973 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट PoC और बल्क स्कैनर है: Zyxel NAS326 फर्मवेयर संस्करण V5.21AAZF.17C0 से पहले और NAS542 फर्मवेयर संस्करण V5.21ABAG.14 से पहले कमांड इंजेक्शन भेद्यता। संस्करण 1.0.2 root@kitploit: - पेलोड तंत्र को ठीक किया गया।...

CVE-2019-13025

Connect Box CH7465LG CVE-2019-13025 Informations Ce dépôt contient deux PoC pour la Connect Box CH7465LG fonctionnant sous le firmware CH7465LG-NCIP-6.12.18.24-5p8-NOSH ou plus ancien. Pour plus d'informations, consultez mon blog. Utilisation Exécution de code à distance non authentifiée $ python...

CVE-2024-24919

Ferramenta de Exploração de RCE em Check Point Security Gateway CVE-2024-24919 Visão Geral Este repositório contém uma ferramenta para explorar a vulnerabilidade CVE-2024-24919 em Check Point Security Gateways. A ferramenta é um multi-escâner que pode identificar dispositivos vulneráveis e um...

CVE-2025-57174

CVE-2025-57174 - Siklu EtherHaul श्रृंखला - अप्रमाणित दूरस्थ कमांड निष्पादन CVE-2025-57174 अप्रमाणित दूरस्थ कमांड निष्पादन प्रभावित संस्करण: फर्मवेयर 7.4.0 - 10.7.3 संभवतः 7.4.0 के बाद के सभी संस्करण उपयोग कैसे करें root@kitploit: python3 CVE-2025-57174.py 172.16.100.52 'simple-command show syste...

CVE-2024-36877

CVE-2024-36877 Exploit POC para CVE-2024-36877 Um artigo detalhado pode ser encontrado no meu blog - https://jjensn.com/at-home-in-your-firmware https://github.com/user-attachments/assets/71f30cda-61e3-49ea-b856-959746349f2d...

Firmware-CVE-2025-7545

Preparação para o download do repositório 1. Atualizamos os pacotes: sudo apt-get update 2. Se necessário, instalar o git: sudo apt install -y git Download do repositório, instalação do Binutils vulnerável e configuração do ambiente 1. Baixamos o repositório: git clone...

CVE-2022-30525_check

CVE-2022-30525check Descrizione: Questo script verifica la presenza della vulnerabilità di iniezione dei comandi del sistema operativo CVE-2022-30525 nei dispositivi Zyxel USG FLEX che eseguono versioni del firmware dalla 5.00 alla 5.21 Patch 1. La vulnerabilità consente a un attaccante di...

CVE-2026-24225

NVIDIA DGX Spark is affected by an out-of-bounds read in the standalone MM firmware , which could allow an attacker with local and high privileges to cause information disclosure . The CVSS v3.1 score is 6.0 (MEDIUM) with a changed scope and high confidentiality impact. No in-the-wild exploitatio...

remote-bitlocker-encryption-report

remote-bitlocker-encryption-report Questo script PowerShell prende un elenco di PC come input, ottiene il loro tipo di crittografia BitLocker in remoto e produce l'elenco come file CSV per aiutare a mitigare la vulnerabilità CVE-2018-12038. Prevenire la vulnerabilità CVE-2018-12038 Descrizione di...

CVE-2025-26237

D-Link DI-7001 MINI_5G (firmware 19.10.31A1 ) contains a code execution vulnerability in the flag parameter of the msp_info handler. An attacker can exploit this flaw to execute arbitrary commands on the device. The provided documents do not specify the exact injection mechanism (e.g., shell meta...

aziot-cctv-cve-2025-50777

aziot-cctv-cve-2025-50777 CVE-2025-50777: Accesso root ed esposizione di credenziali in chiaro in AZIOT Smart CCTV Riepilogo È stata identificata una vulnerabilità nel controllo degli accessi locali CVE-2025-50777 nel firmware della AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera versione...

CVE-2026-75616 Command Injection in Router Web Management Interface

An OS command injection vulnerability exists in the web management interface of Archer C20 v6 firmware when processing certain WAN-related configuration operations. An authenticated administrator may exploit insufficient input validation to execute arbitrary system commands, potentially resulting...

EUVD-2026-62417

Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tokens by extracting the secret from the firmware image. Attackers can use the...

PT-2026-78582

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30 IBM Power Systems Firmware versions FW1060.00 through FW1060.80 IBM Power Systems Firmware versions FW950.00 through FW950.H2 IBM Power System...

PT-2026-78574

Name of the Vulnerable Software and Affected Versions IBM Power Firmware version FW1120.00 IBM Power Firmware versions FW1110.00 through FW1110.30 IBM Power Firmware versions FW1060.00 through FW1060.80 Description A flaw in the host firmware allows an attacker with service access to the service...