zynos-attacker

IMPORTANT : Ces scripts sont destinés à des fins éducatives uniquement. Description : Avec ces scripts, vous pouvez attaquer les routeurs ZynOS et modifier/extraire tout ce que vous voulez sur le routeur cible, de l'extraction du nom d'utilisateur et mot de passe FAI à l'injection d'adresses IP d...

geo-recon

Geo-Recon An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts. Pre-requirements for Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip If you don't use Debian or Ubuntu, search for their respective platforms like yum...

Needl

🚨 Needl n'est plus maintenu. Si vous avez besoin de support ou de consultation pour vos efforts en matière de confidentialité, envoyez-moi un e-mail à [email protected] 🚨 Needl Reprenez votre vie privée. Perdez-vous dans la botte de foin. Votre FAI suit très probablement vos habitudes de...

CVE-2021-40154

CVE-2021-40154 Уязвимости чтения за пределами буфера в USB-режиме внутрисистемного программирования ISP для LPC55S69 и K82 POC для проверки уязвимости BootROM, обнаруженной в LPC55S69 и K82 Series Revision A2. Уязвимость устранена в новых устройствах с Revision A3 для LPC55S69. Уязвимые устройств...

Cable-modems

Анализ WiFi-модемов интернет-провайдеров Обзор SEARCH-LAB Ltd провела оценку пяти моделей домашних шлюзов, все они используются многими интернет-провайдерами по всему миру, но сами устройства эксплуатировались одним из венгерских операторов кабельного телевидения, UPC Magyarország...

conf-presentations

Table of Contents Quarkslab Lectures at Conferences and Seminars Quarkslab Publications in Journals or Conference Proceedings and Preprints Quarkslab Publications in Specialized Magazines Quarkslab Hardware CTFs Quarkslab Lectures at Conferences and Seminars 2026 2026-09: You Can’t Secure What Yo...

CVE-2025-63353

Предсказатель паролей Wi-Fi FiberHome CVE-2025-63353 Утилита на Python, предназначенная для аудита безопасности и демонстрации концепции proof-of-concept уязвимости детерминированной генерации паролей, обнаруженной в маршрутизаторах FiberHome HG6145F1 RP4423. 📋 Обзор Этот скрипт эксплуатирует...

CVE-2026-90395: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: power: supply: isp1704charger: cancel work on remove The USB notifier and initial VBUS detection can schedule isp-work. The remove path unregisters the notifier and power supply, but does not wait for queued or running work befor...

CVE-2026-89850: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Don't query firmware state while chip is down qla2x00fwstateshow initializes rval to QLAFUNCTIONFAILED and jumps to the out: label when the chip is down or EEH is busy. The out: block then re-issued...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fixed handling of IRQs due to shared interrupts. The driver requests interrupts using IRQFSHARED, so the interrupt handlers can be called at any time. If such a call occurs while the ISP is powered down, the SoC wi...

SUSE CVE-2026-68230

In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following smatch errors: drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:1...

CVE-2026-12339

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...

CVE-2026-12339 Authenticated Arbitrary File Write Vulnerability in multiple devices

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...

CVE-2026-12339

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to overwrite on t...

EUVD-2026-55700

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to overwrite on t...

CVE-2026-12339 Authenticated Arbitrary File Write Vulnerability in multiple devices

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...

CVE-2026-12339

Technical details are not publicly available in the provided documents for CVE-2026-12339. No vendor-confirmed impact, affected products, or remediation are specified here. Monitor for updates and refer to the CVE entry for official details.

CVE-2026-68230 media: amlogic-c3: Add validations for ae and awb config

In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following smatch errors: drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:1...

CVE-2026-68230: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following smatch errors: drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:1...

CVE-2026-12339: Improper Limitation of a Pathname to a Restricted Directory

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...