kali-nethunter-installer

Instalador de Kali NetHunter Este instalador de Kali NetHunter es básicamente un archivo zip generado por build.py a partir de la estructura de carpetas contenida aquí. Sigue las instrucciones a continuación para crear el zip del instalador de Kali NetHunter. Todo lo que tienes que hacer es...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

iCSeeU

Este es un conjunto de herramientas/PoCs/exploits que se pueden utilizar en cámaras de videollamada iCSee a través de LAN y quizás también en cámaras que no son de videollamada. Esto podría usarse fácilmente para flashear firmwares alternativos como reemplazo del método de actualización por tarje...

fitness-app

Fitbit App Android de Código Abierto Esta aplicación está basada en el trabajo de Jiska Classen, Matthias Hanreich, Steffen Kreis, Tobias Krichel, Johannes Riedel y Sven Ströher. Características Escanear dispositivos Fitbit BLE Autenticarse contra el servidor de Fitbit como la aplicación original...

spd_dump-macos

spddump for macOS English | 简体中文 Puerto para macOS de la herramienta de flasheo BootROM/FDL de UNISOC Spreadtrum. Basado en ilyakurdyukov/spreadtrumflash MIT, implementa el execaddr2 bypass de verificación de firma CVE-2022-38694 que falta en el spddump de código cerrado y completa toda la cadena...

nrf-research-firmware

Firmware de investigación RFStorm nRF24LU1+ Firmware y herramientas de investigación para dongles USB y placas de desarrollo basados en Nordic Semiconductor nRF24LU1+. Requisitos SDCC versión mínima 3.1.0 GNU Binutils Python PyUSB platformio Instala las dependencias en Ubuntu: sudo apt-get instal...

EUVD-2026-69201

Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to start firmware flashing using existing upgrade files via sending a crafted MQTT message to the csbroker component...

PT-2026-84238

Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to start firmware flashing using existing upgrade files via sending a crafted MQTT message to the cs broker component...

CVE-2026-51756

Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to start firmware flashing using existing upgrade files via sending a crafted MQTT message to the csbroker component...

CVE-2026-51756

Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to start firmware flashing using existing upgrade files via sending a crafted MQTT message to the csbroker component...

CVE-2026-51756: Improper Access Control

Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to start firmware flashing using existing upgrade files via sending a crafted MQTT message to the csbroker component...

CVE-2026-51756

The TOTOLINK T6 wireless dual-band Mesh router (version 4.1.5cu.748_B20211015 ) is vulnerable to an incorrect access control issue in the meshSlaveUpgfw function. An unauthenticated attacker can trigger a firmware update by sending a specially crafted MQTT message to the cs_broker component, whic...

CVE-2026-63998

A flaw was found in the Linux kernel's ethtool module. When attempting to flash transceiver modules' firmware, a validation failure could cause the ethnlopscomplete function to be skipped. This oversight means that an operation initiated by ethnlopsbegin might not be properly concluded, potential...

ESPHome vulnerable to remote code execution via arbitrary file write

SummarySecurity misconfiguration in edit configuration file API in dashboard component of ESPHome version 2023.12.9 command line installation allows authenticated remote attackers to read and write arbitrary files under the configuration directory rendering remote code execution possible. Details...

CVE-2026-58520

URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Mediawiki - UrlShortener Extension: from before 1.43.9, 1.44.6, 1.45.4...

CVE-2026-58520

URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Mediawiki - UrlShortener Extension: from before 1.43.9, 1.44.6, 1.45.4...

EUVD-2026-41099

URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Mediawiki - UrlShortener Extension: from before 1.43.9, 1.44.6, 1.45.4...

CVE-2026-58520

URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Mediawiki - UrlShortener Extension: from before 1.43.9, 1.44.6, 1.45.4...

CVE-2026-58520 UrlShortener defaults to ineffective validation open to third-party redirects

URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Mediawiki - UrlShortener Extension: from before 1.43.9, 1.44.6, 1.45.4...

CVE-2026-58520

CVE-2026-58520 affects the Wikimedia Foundation Mediawiki UrlShortener Extension. The issue is an open redirect: URL redirection to an untrusted site in the UrlShortener extension, impacting versions from before 1.43.9, 1.44.6, and 1.45.4. The connected documents provide the vulnerability descrip...