CVE-2025-57174

CVE-2025-57174 - Siklu EtherHaul 시리즈 - 인증되지 않은 원격 명령 실행 CVE-2025-57174 인증되지 않은 원격 명령 실행 영향받는 버전: 펌웨어 7.4.0 - 10.7.3 7.4.0 이후 모든 버전일 가능성 높음 사용 방법 root@kitploit: python3 CVE-2025-57174.py 172.16.100.52 'simple-command show system' --nul --recv Response: flag=0x00 msg=0x01 length=584 ok system...

project-memoria-detector

project-memoria-detector project-memoria-detector 도구는 대상 네트워크 장치가 특정 임베디드 TCP/IP 스택을 실행 중인지 판별하는 것을 목표로 합니다. 현재 이 도구는 16가지 임베디드 TCP/IP 스택및 해당 변형에 대한 핑거프린트를 지원합니다: uIP, Contiki 또는 Contiki-NG picoTCP 또는 picoTCP-NG Nut/Net FNET Nucleus NET CycloneTCP NDKTCPIP uC/TCP-IP MPLAB Harmony Net NicheStack...

TP-Link-WDR-Router-Command-injection_POC

此存储库没有 README。...

dlkploit600

DLKPloiT600.py D-Link 취약점 스캔 및 테스트를 위한 간단한 Python 스크립트 CVE-2019-13101 https://nvd.nist.gov/vuln/detail/CVE-2019-13101 https://www.cvedetails.com/cve/CVE-2019-13101/ https://us.dlink.com/en/security-advisory https://www.dlink.com/en/security-bulletin 요구 사항: python3.x requests $ pip install -r...

CVE-2021-29003

CVE-2021-29003 https://hackerworld.home.blog/2021/03/19/rce-in-genexis-router/ 익스플로잇 DB https://www.exploit-db.com/exploits/49764 Medium https://sharmajijvs.medium.com/how-i-got-my-first-cve-af2c3009e409 Unit 42 palo alto networks...

CVE-2024-7029

AvTech 장치의 CVE-2024-7029 취약점 악용을 위한 PoC 도구 🎤 README 번역 English فارسی 📸 스크린샷 💎 소개 CVE-2024-7029는 AVTech 장치에서 발견된 심각한 보안 문제로, 공격자가 인증을 우회하고 원격으로 임의의 명령을 실행할 수 있습니다. 이 취약점은 영향을 받는 네트워크의 무결성과 보안에 심각한 위험을 초래합니다. 💀 취약점 개요 CVE-2024-7029는 AVTech 장치의 치명적인 보안 결함으로, 인증 우회를 통한 무단 액세스를 허용하여 잠재적으로 원격 코드 실행으로 이...

hikvision_brute

hikvisionbrute CVE-2021-36260 エクスプロイトを使用して Hikvision カメラをブルートフォースする 実行 go run src/main.go -help で実行引数のヘルプを表示できます 実行例 go run src/main.go -infile ../CVE-NEW/hikvisionlist.txt.bak -threads 300 -maxtries 3 -timeout 10 -delay 2000 -good goodout.txt -bad badout.txt -err errout.txt -unknown unknownout.t...

The vulnerability of the ovpn_net_xmit() function in the drivers/net/ovpn/io.c module of the Linux kernel’s network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ovpnnetxmit function in the drivers/net/ovpn/io.c module of the Linux kernel’s network device driver is related to the pointer being dereferenced after its expiration time. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

e1000_vulnerability_exploit

e1000vulnerabilityexploit インストール $ ./install.sh 現時点では、独自ビルドのみがサポートされています。デバッグ版をビルドするには、 own と debug を選択してください。 警告 : 処理中、特にソースのコンパイル中にエラーが発生する可能性があります。"Exit with error status 2." のようなメッセージが表示されることがあります。 エラーが発生した場合は、[email protected] までご連絡ください。 デバッグ RTLogPrintfstring, args...

CVE-2023-36844

CVE-2023-36844 "Juniper JunOS 내 SRX 및 EX 시리즈 제품의 원격 코드 실행" 취약점은 공격자가 JunOS 소프트웨어를 실행하는 대상 Juniper 장치에서 임의의 코드를 실행할 수 있는 보안 문제입니다. 이 취약점은 영향을 받는 장치의 손상으로 이어질 수 있으며, 해당 장치가 속한 네트워크에 심각한 보안 위험을 초래할 수 있습니다. 스크린샷 요구 사항 Python3.7+ 지원 OS Linuxer Wingays 시작하기 root@kitploit: $ git clone...

The vulnerability of the `tap_get_user_xdp()` function in the `drivers/net/tap.c` file of the Linux kernel’s network device driver allows a attacker to cause a service failure.

The vulnerability of the tapgetuserxdp function in the drivers/net/tap.c file of the Linux kernel network device driver involves copying buffers without checking the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2026-74736

A flaw was found in the Linux kernel's clsbpf component. A device-bound program could be incorrectly attached to a different network device than it was intended for. This misconfiguration could allow an attacker to trigger a system panic, leading to a denial of service, if the original device is...

EUVD-2026-66574

In the Linux kernel, the following vulnerability has been resolved: ipvlan: inherit neededheadroom and neededtailroom from phydev ipvlan devices inherit hardheaderlen from phydev during ipvlaninit, but leave neededheadroom and neededtailroom set to 0. When the underlying phydev or stacked lower...

The vulnerability of the team_setup_by_port() function in the drivers/net/team/team_core.c file of the Linux kernel’s network device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the teamsetupbyport function in the drivers/net/team/teamcore.c file of the Linux kernel’s network device driver module is related to type conversion errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the route_shortcircuit() function in the drivers/net/vxlan/vxlan_core.c file of the Linux kernel network device driver allows a attacker to cause a service failure.

The vulnerability of the routeshortcircuit function in the drivers/net/vxlan/vxlancore.c file of the Linux kernel network device driver involves a pointer dereferencing issue. Exploiting this vulnerability could allow an attacker to cause a system failure...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tty: synclinkgt: Fixed the null-pointer-dereference issue in slgtclean. When the driver fails at allochdlcdev, and then we remove the driver module, we will encounter the following error: 25.065966 General protection fault; likel...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

A vulnerability related to out-of-bounds memory access was discovered in the Linux kernel’s TUN/TAP device driver functionality. This vulnerability occurs when a user generates a malicious excessively large network packet while napi frags is enabled. This flaw allows a local user to cause a syste...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: Ensure that we call ipv6mcdown at most once. There are two reasons why addrconfnotify is called with NETDEVDOWN: Either the network device is actually going down, or IPv6 was disabled on the interface. If either of the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: mhi: Fixed a memory leak in mhinetdellink. The MHI driver registers the network device without setting the needsfreenetdev flag, and does not call freenetdev when unregistering the network device. This results in a memory...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: wilc1000: Prevent use-after-free in wilcnetdevcleanup when cleaning up all interfaces. wilcnetdevcleanup currently triggers a KASAN warning. This can be observed during the interface registration process, or by simply...