CVE-2025-57174

CVE-2025-57174 - Siklu EtherHaul 시리즈 - 인증되지 않은 원격 명령 실행 CVE-2025-57174 인증되지 않은 원격 명령 실행 영향받는 버전: 펌웨어 7.4.0 - 10.7.3 7.4.0 이후 모든 버전일 가능성 높음 사용 방법 root@kitploit: python3 CVE-2025-57174.py 172.16.100.52 'simple-command show system' --nul --recv Response: flag=0x00 msg=0x01 length=584 ok system...

project-memoria-detector

project-memoria-detector project-memoria-detector 도구는 대상 네트워크 장치가 특정 임베디드 TCP/IP 스택을 실행 중인지 판별하는 것을 목표로 합니다. 현재 이 도구는 16가지 임베디드 TCP/IP 스택및 해당 변형에 대한 핑거프린트를 지원합니다: uIP, Contiki 또는 Contiki-NG picoTCP 또는 picoTCP-NG Nut/Net FNET Nucleus NET CycloneTCP NDKTCPIP uC/TCP-IP MPLAB Harmony Net NicheStack...

TP-Link-WDR-Router-Command-injection_POC

В этом репозитории нет README...

dlkploit600

DLKPloiT600.py Простой Python-скрипт для сканирования и проверки уязвимостей D-Link CVE-2019-13101 https://nvd.nist.gov/vuln/detail/CVE-2019-13101 https://www.cvedetails.com/cve/CVE-2019-13101/ https://us.dlink.com/en/security-advisory https://www.dlink.com/en/security-bulletin Требования:...

CVE-2021-29003

CVE-2021-29003 https://hackerworld.home.blog/2021/03/19/rce-in-genexis-router/ 익스플로잇 DB https://www.exploit-db.com/exploits/49764 Medium https://sharmajijvs.medium.com/how-i-got-my-first-cve-af2c3009e409 Unit 42 palo alto networks...

CVE-2024-7029

PoC-инструмент для эксплуатации CVE-2024-7029 на устройствах AvTech 🎤 Перевод README Английский فارسی 📸 Скриншот 💎 Введение CVE-2024-7029 подчеркивает серьезную проблему безопасности в устройствах AVTech, где злоумышленники могут обойти аутентификацию и удаленно выполнять произвольные команды. Эт...

hikvision_brute

hikvisionbrute CVE-2021-36260 エクスプロイトを使用して Hikvision カメラをブルートフォースする 実行 go run src/main.go -help で実行引数のヘルプを表示できます 実行例 go run src/main.go -infile ../CVE-NEW/hikvisionlist.txt.bak -threads 300 -maxtries 3 -timeout 10 -delay 2000 -good goodout.txt -bad badout.txt -err errout.txt -unknown unknownout.t...

The vulnerability of the ovpn_net_xmit() function in the drivers/net/ovpn/io.c module of the Linux kernel’s network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ovpnnetxmit function in the drivers/net/ovpn/io.c module of the Linux kernel’s network device driver is related to the pointer being dereferenced after its expiration time. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

e1000_vulnerability_exploit

e1000vulnerabilityexploit Установка $ ./install.sh Пока поддерживается только сборка собственной версии. Пожалуйста, выберите own и debug для сборки вашей отладочной версии. Предупреждение: Во время процесса может возникнуть ошибка, особенно во время компиляции исходников. Вы можете увидеть что-т...

CVE-2023-36844

CVE-2023-36844 Уязвимость «Удаленное выполнение кода в Juniper JunOS в продуктах серий SRX и EX» представляет собой проблему безопасности, которая позволяет злоумышленнику выполнить произвольный код на целевом устройстве Juniper под управлением JunOS. Эта уязвимость может привести к компрометации...

The vulnerability of the `tap_get_user_xdp()` function in the `drivers/net/tap.c` file of the Linux kernel’s network device driver allows a attacker to cause a service failure.

The vulnerability of the tapgetuserxdp function in the drivers/net/tap.c file of the Linux kernel network device driver involves copying buffers without checking the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2026-74736

A flaw was found in the Linux kernel's clsbpf component. A device-bound program could be incorrectly attached to a different network device than it was intended for. This misconfiguration could allow an attacker to trigger a system panic, leading to a denial of service, if the original device is...

EUVD-2026-66574

In the Linux kernel, the following vulnerability has been resolved: ipvlan: inherit neededheadroom and neededtailroom from phydev ipvlan devices inherit hardheaderlen from phydev during ipvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying phydev or stacked lower...

The vulnerability of the team_setup_by_port() function in the drivers/net/team/team_core.c file of the Linux kernel’s network device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the teamsetupbyport function in the drivers/net/team/teamcore.c file of the Linux kernel’s network device driver module is related to type conversion errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the route_shortcircuit() function in the drivers/net/vxlan/vxlan_core.c file of the Linux kernel network device driver allows a attacker to cause a service failure.

The vulnerability of the routeshortcircuit function in the drivers/net/vxlan/vxlancore.c file of the Linux kernel network device driver involves a pointer dereferencing issue. Exploiting this vulnerability could allow an attacker to cause a system failure...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tty: synclinkgt: Fixed the null-pointer-dereference issue in slgtclean. When the driver fails at allochdlcdev, and then we remove the driver module, we will encounter the following error: 25.065966 General protection fault; likel...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

A vulnerability related to out-of-bounds memory access was discovered in the Linux kernel’s TUN/TAP device driver functionality. This vulnerability occurs when a user generates a malicious excessively large network packet while napi frags is enabled. This flaw allows a local user to cause a syste...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: Ensure that we call ipv6mcdown at most once. There are two reasons why addrconfnotify is called with NETDEVDOWN: Either the network device is actually going down, or IPv6 was disabled on the interface. If either of the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: mhi: Fixed a memory leak in mhinetdellink. The MHI driver registers the network device without setting the needsfreenetdev flag, and does not call freenetdev when unregistering the network device. This results in a memory...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: wilc1000: Prevent use-after-free in wilcnetdevcleanup when cleaning up all interfaces. wilcnetdevcleanup currently triggers a KASAN warning. This can be observed during the interface registration process, or by simply...