hydrafw

HydraFW official firmware for HydraBus v1 HydraFW is a native C and asm open source firmware for HydraBus v1 board. You can Buy HydraBus v1 Online: http://hydrabus.com/buy-online Getting Started with HydraBus v1: https://github.com/hydrabus/hydrafw/wiki/Getting-Started-with-HydraBus HydraFW Wiki:...

CVE-2024-30167

PoC For Atlona OME Authenticated Command Injection Disclaimer : This proof of concept is provided solely for educational and research purposes only. Do not use this code on systems you do not own or have explicit permission to test. I am not responsible for any misuse. An authenticated command...

TP-LINK - Local File Inclusion

TP-LINK is susceptible to local file inclusion in these products: Archer C5 1.2 with firmware before 150317, Archer C7 2.0 with firmware before 150304, and C8 1.0 with firmware before 150316, Archer C9 1.0, TL-WDR3500 1.0, TL-WDR3600 1.0, and TL-WDR4300 1.0 with firmware before 150302, TL-WR740N...

D-Link DAR-8000-10 - Command Injection

D-Link DAR-8000-10 version has an operating system command injection vulnerability. The vulnerability originates from the parameter id of the file /app/sys1.php which can lead to operating system command injection. id: CVE-2023-4542 info: name: D-Link DAR-8000-10 - Command Injection author:...

DrayTek Vigor - Command Injection

DrayTek Gateway devices Vigor2960, Vigor300B, etc. are vulnerable to command injection via the session parameter in the /cgi-bin/mainfunction.cgi/apmcfgupload endpoint. An attacker can inject arbitrary commands and retrieve their output. id: CVE-2024-12987 info: name: DrayTek Vigor - Command...

Symmetricom SyncServer Unauthenticated - Remote Command Execution

Microchip Technology Microsemi SyncServer S650 was discovered to contain a command injection vulnerability. id: CVE-2022-40022 info: name: Symmetricom SyncServer Unauthenticated - Remote Command Execution author: DhiyaneshDK,mielverkerken severity: critical description: | Microchip Technology...

Watchguard_WebUI_Unpacker

Desempaquetador de actualización de la interfaz web de Watchguard Fireware unpackwatchguard es una herramienta que desempaqueta este formato de archivo sysa-dl. watchguardsysadl.ksy contiene la descripción Kaitai del formato de archivo de actualización web de Watchguard Fireware. Información Este...

CVE-2026-15469

🔑 CVE-2026-15469 Hard-coded Mesh Group Private Key — TP-Link Deco XE75 / XE5300 / WE10800 A shared RSA-512 mesh group private key is baked into the firmware, letting a LAN-adjacent attacker impersonate a trusted mesh node, overwrite configuration, flash unsigned firmware, and pivot across the...

CVE-2024-12856

CVE-2024-12856 This is an exploit for Four-Faith router models F3x24 and F3x36 to get a reverse shell. "The Four-Faith router models F3x24 and F3x36 are affected by an operating system OS command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to...

CVE-2026-36956

CVE-2026-36956: Cross-Site Request Forgery CSRF en la Interfaz de Administración Web ID CVE: CVE-2026-36956 Fecha: 2026-04-29 Descubridor: Kirubel Solomne Proveedor: Shenzhen Dibit Network Equipment Co., Ltd. Producto: Dbit Router Versión de Firmware: V1.0.0 CWE: CWE-352 - Cross-Site Request...

CVE-2021-3972

CVE-2021-3972 poc code without other thing root@kitploit: BYTE value = 0x1; SetFirmwareEnvironmentVariableExT"ChgBootSecureBootDisable",T"6ACCE65D-DA35-4B39-B64B-5ED927A7DC7E",&value,sizeofBYTE,0x7;...

CVE-2026-24061---telnetd

CVE-2026-24061 – telnetd 🔥 Description CVE-2026-24061 is a critical vulnerability affecting certain implementations of telnetd , allowing an authentication bypass and the obtainment of a remote root shell without valid credentials. This repository provides a Proof of Concept PoC for detecting...

CVE-2023-51073

CVE-2023-51073 - Firmware Update Server Verification Vulnerability on Buffalo LS210D Version 1.78-0.03 Christopher J. Pace and Ryan Miller The Buffalo LS210D is a Network Attached Storage NAS server designed and marketed towards small-businesses and individuals. Within the LS210D is the ability t...

CVE-2026-1459-POC

CVE-2026-1459-POC POC for the CVE-2026-1459 which payload changes root SSH password. Requires valid administration credentials, changes root password temporarily, restarting will reset the root password. Works on VMG3625-T50B and similar, is guaranteed to work on firmware V5.50ABPM.9.7C0 or earli...

CVE-2023-31446-Remote-Code-Execution

CVE-2023-31446-Remote-Code-Execution Repository contains description for CVE-2023-31446 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-31446 Vendor: Cassia Networks Product: Cassia Gateway Firmware Version: http:///bypass/config?type=sqs&keyId=&key=&queueUrl= Base...

CVE-2026-36960

CVE-2026-36960: Cross-Site Request Forgery CSRF in Web Management Interface CVE ID: CVE-2026-36960 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: U-SPEED Product: U-SPEED Router Firmware Version: V1.0.0 CWE: CWE-352 - Cross-Site Request Forgery CSRF Description The U-SPEED Router firmware...

presentation-clickers

Presentation Clickers Tenía ganas de hacer un poco de ingeniería inversa de RF, así que pedí algunos clickers de presentación y me divertí un poco. Esto es un fork de nrf-research-firmware que escribí hace unos años en Bastille. He añadido soporte para algunos transceptores/protocolos nuevos, e...

CVE-2026-52482

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service spawns /app/shfortelnet...

EUVD-2026-66233

On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...

nrf-research-firmware

Firmware de investigación RFStorm nRF24LU1+ Firmware y herramientas de investigación para dongles USB y placas de desarrollo basados en Nordic Semiconductor nRF24LU1+. Requisitos SDCC versión mínima 3.1.0 GNU Binutils Python PyUSB platformio Instala las dependencias en Ubuntu: root@kitploit: sudo...