4878 matches found
libpo32
libpo A C library and command-line tools for decoding, editing and generating Teenage Engineering Pocket Operator backups. PO-32 — drum patches, patterns and synthesis PO-33 / PO-133 — samples and patterns PO-35 / PO-137 — speech, drum patches and patterns The C99 core uses caller-owned memory an...
mtk_bp
MediaTek BP firmware tools This repository contains Kaitai-based file format definitions related to MediaTek modem firmware, as well as some basic command line tools for interacting with these file types. The Kaitai IDE can also be used to interactively explore files using the Kaitai definitions...
psc
PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...
CVE-2025-24990_POC
Windows Agere Modem Driver ltmdm64.sys. This driver is very old and is not loaded by default on my test machine, so I will exploit it in a BYOVD scenario. Interestingly, according to my research this driver has existed on Windows 7 and has at least one bug. here At that time, MSRC didn't take any...
qualcomm_baseband_scripts
qualcommbasebandscripts Collection of scripts for reversing Qualcomm baseband / modem firmware All offsets/addresses in the scripts have been updated to the Pixel 5 March firmware and need to be changed if using a different version. Merging mergemodemfirmware.py Merges all of the modem.b modem.b0...
ZTE Cable Modem Web Shell
ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests to webshellcmd.gch, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials. id: CVE-2014-2321 info: name: ZTE Cable Modem Web Shell author:...
Zyxel VMG1312-B10D 5.13AAXA.8 - Local File Inclusion
Zyxel VMG1312-B10D 5.13AAXA.8 is susceptible to local file inclusion. A remote unauthenticated attacker can send a specially crafted URL request containing "dot dot" sequences /../, conduct directory traversal attacks, and view arbitrary files. id: CVE-2018-19326 info: name: Zyxel VMG1312-B10D...
CVE-2017-9476
CVE-2017-9476 Hidden AP with Deterministic Credentials. Compiling cc xhscmmac2psk.c -o xhscmmac2psk Usage ./xhscmmac2psk The algorithm has been also added to PSKracker. References CVE-2017-9476 Bastille-18.home-security-wifi-network.txt DEFCON 25 whitepaper DEFCON 25 slides...
CVE-2026-20404-MediaTek-modem-remote-DoS-rogue-base-station-scenario-
CVE-2026-20404-MediaTek-modem-remote-DoS-rogue-base-station-scenario- A MediaTek modem input validation issue can cause a system crash remote DoS when a UE connects to a rogue base station controlled by an attacker with no user interaction required. The provided check.sh code is used to: 1...
hitron-cfg-decrypter
Hitron CFG Decrypter Downloading git clone https://github.com/Manouchehri/hitron-cfg-decrypter cd hitron-cfg-decrypter/ Decrypting python decrypt.py -i sample.cfg.enc Encrypting python decrypt.py -i sample.cfg.dec -m encrypt Getting the CFG Thanks to Michael Henke @henkman for his previous work o...
Puma6Fail
Puma 6 fail demo Tool to demonstrate issue from this post found by mackey: https://www.dslreports.com/forum/r31377755- Proof of concept code is already public elsewhere. See CVE-2017-5693. DoS occurs in either direction - UDP from LAN to WAN or WAN to LAN. Testing through a local Virgin Media Sup...
Cable-modems
Analysis of WiFi-enabled ISP modems Overview SEARCH-LAB Ltd evaluated five home gateway models, all of them are used by many internet service providers worldwide, but the actual devices have been operated by one of the Hungarian Cable TV operators, UPC Magyarország https://www.upc.hu/. The analys...
D-Link
D-Link CVE-2017-12943 Explanation of D-Link modem hack vulnerability The vulnerability recently published for accessing the modem without needing its password, the method is very simple and relies only on directories that are simply placed. In this episode, I will help you how to work with the...
CVE-2026-38577
CVE-2026-38577 — Tenda HG21 Hardcoded Root Credentials Summary Field| Value ---|--- CVE ID| CVE-2026-38577 Vendor| Tenda Product| Tenda HG21 XPON Fiber Modem Affected Version| V4.0.0-260302 Product Key| HG21-V1.0-TDE01 Hardware Version| V1.0 Firmware Build Date| 2026-03-02 Firmware File|...
CVE-2026-48179
In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service...
CVE-2026-33972
In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation...
CVE-2026-33972
A vulnerability exists in the Samsung Exynos 1080 modem. Specifically, an input validation error within the IMS stack of the Exynos modem leads to an out-of-bounds access issue. The vulnerability is categorized under CWE-1284 (Improper Validation of Specified Quantity in Input). The impact is rat...
CVE-2026-33972
In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation...
