Intelbras Switch - Information Disclosure

An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration. id: CVE-2023-36144 info: name: Intelbras Switch - Information Disclosure author:...

IND780 - Local File Inclusion

IND780 Advanced Weighing Terminals Build 8.0.07 March 19, 2018 SS Label 'IND7808.0.07', Version 7.2.10 June 18, 2012 SS Label 'IND7807.2.10' is vulnerable to unauthenticated local file inclusion. It is possible to traverse the folders of the affected host by providing a relative path to the...

Kramer VIAware - Remote Code Execution

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames. id: CVE-2021-36356 info: name: Kramer VIAware - Remote Code Execution author: gy741 severity: critical description: KRAMER...

ASUS DSL-AC88U - Authentication Bypass

A vulnerability in the ASUS DSL-AC88U router permits unauthorized individuals to bypass authentication.When adding "/js/..%2f%2f" or "/images/..%2f%2e" to the requested URL, it will be recognized as passing the authentication.This vulnerability is part of a broader authentication bypass issue...

cve-2022-31898

cve-2022-31898 Exploit POC code for CVE-2022-31898, a command injection for GL-iNet routers with firmware below 3.215 Usage root@kitploit: ./cve-2022-31898.py -h usage: cve-2022-31898.py -h -R RHOST -P RPORT -L LHOST -l LPORT -p PWD -t options: -h, --help show this help message and exit -R RHOST,...

CVE-2024-42642

CVE-2024-42642 Introduction The device in question is any MX500-series SSD. These SSDs are controlled by a Sillicon-Motion SM2259 controller older batches had an older controller, Sillicon-Motion SM2258, but the main focus of this document is the newer one. SM2259 is a 4-channel SATA 6Gb/s...

CVE-2025-57428

⚠️ This repository is maintained only as a reference for CVE-2025-57428. For other advisories and updates, please refer to: security-advisories. CVE-2025-57428 - Telnet debug interface enabled by default allows low-level flash/register access Affected Product Vendor/Brand: Each Italy Device:...

nexmon

¿Qué es nexmon? Nexmon es nuestro framework de parcheo de firmware basado en C para chips WiFi Broadcom/Cypress que te permite escribir tus propios parches de firmware, por ejemplo, para habilitar el modo monitor con cabeceras radiotap e inyección de tramas. A continuación, encontrarás una visión...

polypyus

Polypyus Firmware Historian Polypyus learns to locate functions in raw binaries by extracting known functions from similar binaries. Thus, it is a firmware historian. Polypyus works without disassembling these binaries, which is an advantage for binaries that are complex to disassemble and where...

polypyus

Polypyus Historiador de Firmware Polypyus aprende a localizar funciones en binarios sin procesar extrayendo funciones conocidas de binarios similares. Por lo tanto, es un historiador de firmware. Polypyus trabaja sin desensamblar estos binarios, lo cual es una ventaja para binarios complejos de...

Root-My-Galaxy-S938B

Root My Galaxy — S938B Root My Galaxy is a firmware-profiled installer for temporary KernelSU root on supported Samsung builds. This fork is maintained for the Galaxy S25 Ultra SM-S938B running: root@kitploit: Build: BP4A.251205.006.S938BXXSBCZG3 Kernel:...

netwave-dosvulnerability

Netwave IP Camera server vulnerable to unauthenticated Denial of Service via one single huge POST request on any firmware. CVE| Descripción ---|--- CVE-2018-6479| Vulnerabilidad de denegación de servicio remota no autenticada CVSS| Puntuación| Detalles ---|---|--- 3| 7.3|...

CVE-2023-27216

CVE-2023-27216 - Router DLink Este documento es mi experiencia personal como novato en la reversión y explotación de firmware. Alcance Para la demostración, analizaremos y reproduciremos CVE-2023-27216. Número CVE: CVE-2023-27216 Descripción de la vulnerabilidad: Un problema encontrado en D-Link...

PcanExploit

CVE-2024-44610: Exploit de raíz autenticado para PEAK PCAN-Ethernet Gateway FD DR ¿Qué es? Este repositorio contiene un exploit de Prueba de Concepto PoC que ejecutó código como root en las puertas de enlace Ethernet de Peak. Requiere que conozcas las credenciales de la interfaz web. ¿Cómo...

CVE-2024-24919

Check Point Security Gateway RCE Exploit Tool CVE-2024-24919 Resumen Este repositorio contiene una herramienta para explotar la vulnerabilidad CVE-2024-24919 en Check Point Security Gateways. La herramienta es un multi-escáner que puede identificar dispositivos vulnerables y un exploit de un solo...

tp-link-decrypt

NOTA: a partir del 5 de octubre de 2025, este proyecto ahora está obsoleto. Nate Robbins ha tenido la amabilidad de hacerse cargo y ha añadido el descifrado de switches - https://github.com/robbins/tp-link-decrypt...

CVE-2022-24654

CVE-2022-24654 PoC of CVE-2022-24654 - INTELBRAS ATA 200 Firmware 74.19.10.21 Authenticated stored Cross Site Scripting Steps to Reproduce: 1. Log in the equipment via your web browser 2. Go to Management Syslog 3. In the "Field Server Address" inject the payload "-prompt"XSS"-" 4. Click Save 5...

Eaton-Intelligent-Power-Manager-Local-File-Inclusion

Eaton-Intelligent-Power-Manager-Local-File-Inclusion Inclusión de archivo local en Eaton Intelligent Power Manager v1.6 permite a un atacante incluir un archivo, lo que puede provocar divulgación de información sensible, denegación de servicio y ejecución de código. CVE-2018-12031 Para explotar l...

xortool

xortool.py A tool to do some xor analysis: guess the key length based on count of equal chars guess the key base on knowledge of most frequent char Notice: xortool is now only running on Python 3. The old Python 2 version is accessible at the py2 branch. The pip package has been updated...

IoTGoat

OFFICIAL REPO HAS BEEN MOVED TOhttps://github.com/OWASP/IoTGoat Description The IoTGoat Project is a deliberately insecure firmware based on OpenWrt and maintained by OWASP to educate users how to test for the most common vulnerabilities found in IoT devices. The vulnerability challenges are base...