CVE-2017-3881

CVE-2017-3881 Ejecución remota de código en Cisco IOS Este repositorio contiene código de Prueba de Concepto para explotar la vulnerabilidad de ejecución remota de código divulgada por Cisco Systems el 17 de marzo de 2017 -...

CVE-2010-4231-EXPLOIT

CVE-2010-4231 - Vulnerabilidad de Directory Traversal en Cámaras IP Camtron y TecVoz CVE-2010-4231 es una vulnerabilidad de directory traversal que existe en la interfaz de administración basada en web de la Cámara IP Camtron CMNC-200 Full HD y la Cámara IP TecVoz CMNC-200 Megapíxel. La...

CVE-2022-29593

CVE-2022-29593 - Bypass de autenticación mediante captura-reproducción Dingtian-DT-R002 Title Bypass de autenticación mediante captura-reproducción Publicado: Version: 1.0 Vendor: Shenzhen Dingtian Technologies Co.,Ltd Producto: Placa de relé de 2 canales/Tarjeta de relé Versión afectada: Firmwar...

watchTowr-vs-WatchGuard-CVE-2025-9242

watchTowr-vs-WatchGuard-CVE-2025-9242 Générateur d'artefacts de détection pour WatchGuard CVE-2025-9242 https://github.com/user-attachments/assets/097f099b-ba60-4223-adea-04279570460f Voir notre article de blog pour les détails techniques Détection en action root@kitploit: python...

CVE-2026-7208

Yealink SIP-T33G firmware versions 124.86.x.x prior to 124.87.0.0 contain a race condition vulnerability that allows authenticated attackers to interrupt active diagnostic processes by concurrently deleting output files written to predictable paths under the diagnostic directory. Attackers can...

PS4-6.20-WebKit-Code-Execution-Exploit

PS4 6.20 WebKit Code Execution PoC Este repositorio contiene un exploit de prueba de concepto PoC de ejecución remota de código RCE dirigido a la PlayStation 4 con firmware 6.20, aprovechando CVE-2018-4441. El exploit primero establece una primitiva de lectura/escritura arbitraria, así como una...

CVE-2021-4045

TP-Link Tapo c200 1.1.15 - Ejecución Remota de Código RCE CVE-2021-4045 🔐 "PWNTAPO: Revelando Inyección de Comandos en Cámaras TP-Link Tapo C200 = v1.1.16 Build 211209" 🔓 Lee sobre el exploit en exploit db Se trata de una vulnerabilidad de inyección de comandos que afecta a todas las versiones de...

cve-2025-29384-poc

Exploit de Prueba de Concepto CVE-2025-29384 Descripción general Este repositorio contiene un exploit de prueba de concepto PoC avanzado para CVE-2025-29384 , una vulnerabilidad crítica de desbordamiento de búfer basado en pila descubierta en el router Tenda AC9 que ejecuta la versión de firmware...

CVE-2026-1122-IoT-Firmware-Update-Signature-Bypass-via-Low-Order-Point-Injection

5. CVE-2026-1122 – IoT Firmware Update Signature Bypass via Low‑Order Point Injection Overview An IoT device’s OTA firmware verification uses a flawed Ed25519 implementation that does not reject public keys with small‑order components, allowing an attacker to forge a valid signature for malicious...

oieh-router-checker

OIEH Router Checker A Windows program that checks with a single click whether your router is affected by the Chinese backdoor ENDLESSDOORS No installation required · No administrator rights required · No external data transmission What Is This? In August 2026, security firm VulnCheck discovered a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: iwlwifi: fw – fixed a memory leak in debugfs. A memory leak occurs when reading the fwinfo file. We return NULL to indicate that there are no more data, but we do not free the status tracking object...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ath11k: Disable spectral scan during spectral deinit When ath11k modules are removed using rmmod with spectral scan enabled, a crash occurs. Different crash traces are observed for each instance of the crash. Send a command to...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: mailbox: bcm2835: Fixed timeout during suspend mode During the noirq suspend phase, the Raspberry Pi power driver experiences firmware property timeouts. The reason is that the IRQ of the underlying BCM2835 mailbox is disabled...

Astra Linux – Vulnerability in edk2

EDK2 is vulnerable to a vulnerability in the Tcg2MeasurePeImage function, which allows a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in compromises of confidentiality, integrity, and/or availability...

Astra Linux – Vulnerability in Intel Microcode

Improper buffer restrictions in the firmware of certain IntelR XeonR Processors with SGX enabled may allow a privileged user to potentially enable privilege escalation through local access...

Astra Linux – Vulnerability in edk2

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure through network access...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: brcmfmac: pcie: Firmware is released in the brmflpciesetup error path. This prevents memory leaks if the brmflchipgetraminfo function fails. Note that the CLM blob is released in the device removal path...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Firmware: stratix10-svc – A potential resource leak has been fixed in svccreatememorypool. svccreatememorypool is only called from stratix10svcdrvprobe. Most of the resources within the probe are managed, but this memremap call i...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imxrproc: Fix invalid loaded resource table detection The imxrprocelffindloadedrsctable function may incorrectly report a loaded resource table even when the current firmware does not provide one. When the device tree...