kali-nethunter-installer

Kali NetHunter Installer This Kali NetHunter installer is basically just a zip file generated by build.py from the folder layout contained here. Follow the instructions below to create the Kali NetHunter installer zip. All you have to do is flash it through Recovery/TWRP or Magisk for a complete...

iCSeeU

这是一套可用的工具/PoC/漏洞利用程序，用于通过局域网（LAN）控制iCSee视频通话摄像头（也可能适用于非视频通话摄像头）。该工具可轻松用于刷写替代固件，以替代SD卡更新方法。 注意： 任何内存破坏漏洞利用仅在摄像头的固件版本为 V5.00.R02.000949U5.10000.141324.0000010 或 V5.00.R02.000807E5.10000.346724.0000010 时有效——这些漏洞利用依赖于固定的偏移量，而偏移量随每次固件构建而变化。 博客 0 枚举、拆解与固件提取 1 学习摄像头的语言 2 发现无用的整数溢出 + 一些有用的漏洞 3 栈溢出之死 +...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

fitness-app

Fitbit 开源安卓应用 此应用基于 Jiska Classen、Matthias Hanreich、Steffen Kreis、Tobias Krichel、Johannes Riedel 和 Sven Ströher 的工作。 功能特点 扫描 BLE Fitbit 设备 像原始应用一样向 Fitbit 服务器进行身份验证 从 Fitbit 服务器获取身份验证凭据，用于身份验证重放¹ 获取活动数据转储¹ 并对其进行解密² 访问实时模式¹ 转储内存，包括完整的固件² 刷写自定义固件³，可修改步数、读取原始加速度计数据等。 工作流程 使用官方 Fitbit...

nrf-research-firmware

RFStorm nRF24LU1+ Research Firmware Firmware and research tools for Nordic Semiconductor nRF24LU1+ based USB dongles and breakout boards. Requirements SDCC minimum version 3.1.0 GNU Binutils Python PyUSB platformio Install dependencies on Ubuntu: root@kitploit: sudo apt-get install sdcc binutils...

spd_dump-macos

spddump for macOS English | 简体中文 Puerto para macOS de la herramienta de flasheo BootROM/FDL de UNISOC Spreadtrum. Basado en ilyakurdyukov/spreadtrumflash MIT, implementa el execaddr2 bypass de verificación de firma CVE-2022-38694 que falta en el spddump de código cerrado y completa toda la cadena...

CVE-2026-51756

Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to start firmware flashing using existing upgrade files via sending a crafted MQTT message to the csbroker component...

EUVD-2026-69201

Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to start firmware flashing using existing upgrade files via sending a crafted MQTT message to the csbroker component...

CVE-2026-51756

An incorrect access control flaw in the meshSlaveUpgfw function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) allows an unauthenticated attacker to initiate firmware flashing using existing upgrade files by sending a crafted MQTT message to the cs_broker component. The CVSS 3.1 scor...

CVE-2026-63998

A flaw was found in the Linux kernel's ethtool module. When attempting to flash transceiver modules' firmware, a validation failure could cause the ethnlopscomplete function to be skipped. This oversight means that an operation initiated by ethnlopsbegin might not be properly concluded, potential...

CVE-2026-58520

URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Mediawiki - UrlShortener Extension: from before 1.43.9, 1.44.6, 1.45.4...

CVE-2026-58520

URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Mediawiki - UrlShortener Extension: from before 1.43.9, 1.44.6, 1.45.4...

EUVD-2026-41099

URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Mediawiki - UrlShortener Extension: from before 1.43.9, 1.44.6, 1.45.4...

CVE-2026-58520

URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Mediawiki - UrlShortener Extension: from before 1.43.9, 1.44.6, 1.45.4...

CVE-2026-58520 UrlShortener defaults to ineffective validation open to third-party redirects

URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Mediawiki - UrlShortener Extension: from before 1.43.9, 1.44.6, 1.45.4...

CVE-2026-58520

CVE-2026-58520 affects the Wikimedia Foundation Mediawiki UrlShortener Extension. The issue is an open redirect: URL redirection to an untrusted site in the UrlShortener extension, impacting versions from before 1.43.9, 1.44.6, and 1.45.4. The connected documents provide the vulnerability descrip...

CVE-2025-15645

Ledger Nano X, Flex, and Stax devices contain a denial of service vulnerability in the MCU firmware update process due to missing validation of the resethandler parameter during firmware flashing. An attacker can provide a crafted resethandler address pointing to invalid memory or...

PT-2026-42020

Name of the Vulnerable Software and Affected Versions Ledger Nano X affected versions not specified Ledger Flex affected versions not specified Ledger Stax affected versions not specified Description A denial of service issue exists in the MCU firmware update process. The flaw is caused by missin...

CVE-2026-30332

A Time-of-Check to Time-of-Use TOCTOU race condition vulnerability in Balena Etcher for Windows prior to v2.1.4 allows attackers to escalate privileges and execute arbitrary code via replacing a legitimate script with a crafted payload during the flashing process...

EUVD-2026-18350

A Time-of-Check to Time-of-Use TOCTOU race condition vulnerability in Balena Etcher for Windows prior to v2.1.4 allows attackers to escalate privileges and execute arbitrary code via replacing a legitimate script with a crafted payload during the flashing process...