CVE-2025-63353

Predictor de Contraseñas Wi-Fi de FiberHome CVE-2025-63353 Una utilidad de Python diseñada para auditorías de seguridad y demostración de prueba de concepto de la falla en la generación determinista de contraseñas encontrada en los routers FiberHome HG6145F1 RP4423. 📋 Descripción General Este...

Cable-modems

Análisis de módems ISP con WiFi Resumen SEARCH-LAB Ltd evaluó cinco modelos de puerta de enlace gateway doméstica, todos ellos utilizados por muchos proveedores de servicios de internet en todo el mundo, aunque los dispositivos reales eran operados por uno de los operadores de televisión por cabl...

CVE-2021-40154

CVE-2021-40154 Vulnerabilidades de sobrelectura de búfer en la programación en sistema ISP USB de LPC55S69 y K82 POC para probar la vulnerabilidad BootROM encontrada en las series LPC55S69 y K82 Revisión A2. La vulnerabilidad está corregida en dispositivos más nuevos con la nueva Revisión A3 para...

Needl

🚨 Needl 已不再维护。如果你需要隐私相关方面的支持或咨询，请给我发邮件 [email protected] 🚨 Needl 夺回你的隐私。迷失在草垛中。 你的网络服务提供商很可能在追踪你的浏览习惯，并将其出售给营销机构（尽管是匿名的）。或者更糟，在传票的暗示下，你的浏览历史可供执法部门查阅。Needl 将生成随机的互联网流量，试图掩盖你的合法流量，本质上让你的数据成为草垛中的 Needl （针），因而更难被找到。目标是让你的 ISP、政府等更难追踪你的浏览历史和习惯。 它并不完美。但这是一个开始。有想法吗？参与进来！ 已实现的模块： Google...

zynos-attacker

IMPORTANTE : Estos scripts están destinados únicamente a fines educativos. Descripción : Con estos scripts puedes atacar routers ZynOS y modificar/extraer cualquier cosa que desees en el router objetivo, desde extraer el nombre de usuario y contraseña del ISP hasta inyectar IPs de servidores DNS...

geo-recon

Geo-Recon An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts. Pre-requirements for Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip If you don't use Debian or Ubuntu, search for their respective platforms like yum...

conf-presentations

Tabla de Contenidos Conferencias y seminarios de Quarkslab Publicaciones de Quarkslab en revistas o actas de congresos y preprints Publicaciones de Quarkslab en revistas especializadas CTFs de hardware de Quarkslab Conferencias y seminarios de Quarkslab 2026 2026-08: Glitch me et glitch moi sont...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fixed handling of IRQs due to shared interrupts. The driver requests interrupts using IRQFSHARED, so the interrupt handlers can be called at any time. If such a call occurs while the ISP is powered down, the SoC wi...

CVE-2026-12339

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...

CVE-2026-12339

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to overwrite on t...

CVE-2026-12339 Authenticated Arbitrary File Write Vulnerability in multiple devices

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...

CVE-2026-12339

Technical details are not publicly available in the provided documents for CVE-2026-12339. No vendor-confirmed impact, affected products, or remediation are specified here. Monitor for updates and refer to the CVE entry for official details.

EUVD-2026-55700

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to overwrite on t...

CVE-2026-12339 Authenticated Arbitrary File Write Vulnerability in multiple devices

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...

CVE-2026-68230 media: amlogic-c3: Add validations for ae and awb config

In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zonesnum is bigger than zoneweight. This patch fixes the following smatch errors: drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:1...

MAL-2026-6990 Malicious code in ai-gen-ai-opt-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34dae027378ca986d5e99aa7c9ffc5efe590e4697e1255970ce713f6d309e74 [email protected] declares a postinstall hook postinstall.js that runs automatically on npm install. The script collects the installer's hostna...

CVE-2026-8699

CVE-2026-8699 reports a stored Cross-Site Scripting (XSS) vulnerability in the Archer C5 web-based management interface (v6.8). Root cause: insufficient server-side validation and lack of proper output encoding for a specific input field, allowing an admin-level attacker to inject crafted HTML/JS...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix error pointer dereference In a error path, it was confirmed that isp-psys is an error pointer that is not NULL. Therefore, this condition is true, and the error pointer is dereferenced. Thus, isp-psys shoul...

SUSE CVE-2026-46312

In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: Set vmaflags in vb2dmasgmmap vb2dmacontig sets VMA flags VMDONTEXPAND and VMDONTDUMP and I do not see a reason why vb2dmasg should behave differently. This avoids hitting WARNON!vma-vmflags & VMDONTEXPAND; in...

CVE-2026-46313

CVE-2026-46313 concerns a Linux kernel vulnerability in the media/ipu6 path. The issue is an error-pointer dereference in ipu6_pci_probe() where isp->psys is an error pointer (not NULL) and is dereferenced, potentially leading to a crash. The fix sets isp->psys to NULL on the error path bef...