27543 matches found
scripts-nse
What is it? Some NSE scripts to search information from routers. The author of this scripts are VicenDominguez. He found the 0-Day on Huawei I only modified for two others. The author of this script is not responsible for its use. Huawei HG253s v2 Vodafone-Spain is starting to rent a new Huawei...
CVE-2019-2215-HuaweiP20Lite
Port CVE-2019-2215 bad binder to Huawei P20lite Android 8.0.0 Description This project is an exploit for CVE-2019-2215 on Huawei P20lite in version Android 8.0.0. Kernel is in version 4.4.23. This vulnerability is probably the most documented one tutorials, real port on physical phone on this top...
Huawei Firewall - Local File Inclusion
USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information leakage vulnerability. Due to improper processing of the initialization vector used in a specific encryption algorithm, an attacker who gai...
reports
This folder contains some vulnerability reports I have disclosed over time. Barracuda Networks Load Balancer ADC - Multiple vulnerabilities CVE-2014-8426, CVE-2014-8428 Aruba ClearPass Policy Manager - Stored XSS CVE-2015-1389 Network Solution WebMail - Multiple vulnerabilities Responsible...
CVE-2026-43499-armv7
CVE-2026-43499 GhostLock — ARM32 Huawei Watch 4 Pro Linux kernel privilege escalation exploit attempt based on CVE-2026-43499 GhostLock — Huawei Watch 4 Pro MDS-AL00, armv7l Project Overview This project is a GhostLock kernel vulnerability exploit attempt targeting the Huawei Watch 4 Pro MDS-AL00...
CVE-2026-65198
Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key recoverable from the open-source build can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build...
CVE-2026-65198
Huawei's openUBMC software ships with a hard-coded default SNMPv3 USM key used for both authentication and privacy. Because these keys are shipped as constants and are not rotated by the Administrator password reset, an attacker who recovers the key from the open-source build can authenticate to ...
CVE-2026-65198 Huawei Default SNMPv3 USM key
Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key recoverable from the open-source build can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build...
HG532d-RCE-Exploit
HG532d RCE Exploit Overview A Remote Code Execution RCE exploit based on CVE-2017-17215 vulnerability. Modded from original PoC code from exploit-db.com to work on Huawei HG532d Home Gateway Routers. Description This RCE exploit is based on CVE-2017-17215 which exploits vulnerabilities in the UPn...
HuaWei_Route_HG532_RCE_CVE-2017-17215
HuaWeiRouteHG532RCECVE-2017-17215 POCsuite and goland implementation of Huawei HG532 router command injection CVE-2017-17215 POC goland Implementation POCsuite Implementation For writing and code, please refer to: https://blog.csdn.net/qq41490561/article/details/127659604...
Decrypt-passwords-for-Huawei-routers-and-switches-CVE-2012-4960
Decrypt passwords for Huawei routers and switches/CVE-2012-4960 In multiple Huawei products, DES encryption algorithm is used for password and the encryption is not strong enough so it may be cracked. This Vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID: CVE-2012-4960...
TempRoot-Huawei
TempRoot-Huawei Temporary root for Huawei hardened kernel via CVE-2019-2215 This code is written for P20 Pro CLT-AL00, and kernel offset is taken from firmware with build fingerprint: 'HUAWEI/CLT-AL00/HWCLT:8.1.0/HUAWEICLT-AL00/176C00:user/release-keys' Background Like Samsung's KNOX, Huawei adde...
CVE-2024-22369
CVE-2024-22369 Credits This POC is based on the reproducer built by Ziyang Chen of HuaWei Open Source Management Center The reproducer has been used to create this PoC, with some adjustments and clean up, and also enriched with some more automation. Prepare the enviroment We'll need a Mysql...
CVE-2017-17215
CVE-2017-17215 Usage: CVE-2017-12149.py http://targetip:37215/ I am so poor that cant afford to but a HUAWEI router XD so it is not tested on any machine but the exp technically should be working I found this report...
h3c-pt-tools
h3c-pt-tools Huawei/H3C/HP Penetration Testing Tools A small collection of scripts to assist penetration testing/auditing networks which have Huawei and/or HP/H3C devices...
huawei-unlock
This repository does not have a README...
huawei-p10-cve-2017-8890-unlock
Huawei P10 CVE-2017-8890 bootloader-unlock research This repository documents an owner-authorized research project that ported CVE-2017-8890 to one Huawei P10 firmware, converted the kernel use-after-free into arbitrary kernel read/write and temporary root, reconstructed Huawei's NVE journal,...
CVE-2015-8088
CVE-2015-8088 Source of PoC code. Detail of the CVE: https://vulners.com/cve/CVE-2015-8088 Detail of the Vulnerability: http://kernfunny.org/blog/cve-2015-8088-heap-based-buffer-overflow-in-the-hifi-driver-of-huawei-smart-phone.html...
