CVE-2024-7029

AvTechデバイスにおけるCVE-2024-7029を悪用するためのPoCツール 🎤 README翻訳 English فارسی 📸 スクリーンショット 💎 はじめに CVE-2024-7029は、AVTechデバイスにおける深刻なセキュリティ問題を浮き彫りにしており、攻撃者は認証をバイパスしてリモートで任意のコマンドを実行できます。この脆弱性は、影響を受けるネットワークの完全性とセキュリティに深刻なリスクをもたらします。 💀 脆弱性の概要...

project-memoria-detector

project-memoria-detector project-memoria-detector ツールは、対象のネットワークデバイスが特定の組み込み TCP/IP スタックを実行しているかどうかを判断することを目的としています。 現在、このツールは16の組み込み TCP/IP スタック（およびそのバリエーション）のフィンガープリントをサポートしています： uIP、Contiki または Contiki-NG picoTCP または picoTCP-NG Nut/Net FNET Nucleus NET CycloneTCP NDKTCPIP uC/TCP-IP MPLAB Harmo...

TP-Link-WDR-Router-Command-injection_POC

このリポジトリには README がありません。...

hikvision_brute

hikvisionbrute CVE-2021-36260 エクスプロイトを使用して Hikvision カメラをブルートフォースする 実行 go run src/main.go -help で実行引数のヘルプを表示できます 実行例 go run src/main.go -infile ../CVE-NEW/hikvisionlist.txt.bak -threads 300 -maxtries 3 -timeout 10 -delay 2000 -good goodout.txt -bad badout.txt -err errout.txt -unknown unknownout.t...

ROS-20260929-73-0172

The vulnerability of the teamqueueoverrideenabledcheck function in the drivers/net/team/teamcore.c file of the Linux kernel’s network device driver is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the...

dlkploit600

DLKPloit600.py D-Linkの脆弱性スキャンとテストのためのシンプルなPythonスクリプト CVE-2019-13101 https://nvd.nist.gov/vuln/detail/CVE-2019-13101 https://www.cvedetails.com/cve/CVE-2019-13101/ https://us.dlink.com/en/security-advisory https://www.dlink.com/en/security-bulletin 必要条件: python3.x requests $ pip install -r...

CVE-2021-29003

CVE-2021-29003 https://hackerworld.home.blog/2021/03/19/rce-in-genexis-router/ Exploit db https://www.exploit-db.com/exploits/49764 medium https://sharmajijvs.medium.com/how-i-got-my-first-cve-af2c3009e409 Unit 42 palo alto networks...

e1000_vulnerability_exploit

e1000漏洞利用 安装 $ ./install.sh 目前仅支持构建自有版本。请选择 own 和 debug 来构建你的调试版本。 警告：过程中可能出现错误，尤其是在编译源码时。你可能会看到类似 "Exit with error status 2." 的信息。 如果出现错误，请联系我们：[email protected] 调试 使用 RTLogPrintfstring, args 打印调试信息。调试信息将写入 VirtualBox 文件夹中的 .log 文件。 查看以下文件： src/VBox/Devices/Network/DevE1000 .cpp / .h；...

CVE-2023-36844

CVE-2023-36844 「Juniper JunOSのSRXおよびEXシリーズ製品におけるリモートコード実行」の脆弱性は、攻撃者がJunOSソフトウェアを実行している標的のJuniperデバイス上で任意のコードを実行できるセキュリティ問題です。この脆弱性は、影響を受けるデバイスを危険にさらし、それが提供するネットワークに深刻なセキュリティリスクをもたらす可能性があります。 スクリーンショット 必要条件 Python3.7+ 対応OS Linuxer Wingays はじめ方 $ git clone https://github.com/Pari-Malam/CVE-2023-368...

CVE-2025-57174

CVE-2025-57174 - Siklu EtherHaul Series - 認証不要のリモートコマンド実行 CVE-2025-57174 認証不要のリモートコマンド実行 影響を受けるバージョン: ファームウェア 7.4.0 - 10.7.3 おそらく7.4.0以降のすべてのバージョン 使用方法 python3 CVE-2025-57174.py 172.16.100.52 'simple-command show system' --nul --recv Response: flag=0x00 msg=0x01 length=584 ok system description :...

ROS-20260924-73-0002

The vulnerability of the peakusbupdatetsnow function in the drivers/net/can/usb/peakusb/pcanusbcore.c file of the Linux network device driver module is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2026-84445 affecting package sriov-network-device-plugin for versions less than 3.7.0-8

CVE-2026-84445 affecting package sriov-network-device-plugin for versions less than 3.7.0-8. An upgraded version of the package is available that resolves this issue...

CVE-2026-84304 affecting package sriov-network-device-plugin for versions less than 3.7.0-8

CVE-2026-84304 affecting package sriov-network-device-plugin for versions less than 3.7.0-8. An upgraded version of the package is available that resolves this issue...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: wilc1000: Prevent use-after-free in wilcnetdevcleanup when cleaning up all interfaces. wilcnetdevcleanup currently triggers a KASAN warning. This can be observed during the interface registration process, or by simply...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: arc: fixed the device for dmamapsingle/dmaunmapsingle ndev-dev and pdev-dev are not the same device; use ndev-dev.parent, which has dmamask. ndev-dev.parent is simply pdev-dev. Otherwise, the following issue will occur:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ax25: Fixed the reference count leak issue of the netdevice object. There is a reference count leak issue with the object netdevice in the function ax25devdevicedown. When the ax25 device is being shut down, the ax25devdevicedown...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fixed a deadlock that occurred during netdev reset with active connections. This issue was addressed by preventing the deadlock that occurs when the netdev function is executed during a device reset while RDMA...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tty: synclinkgt: Fixed the null-pointer-dereference issue in slgtclean. When the driver fails at allochdlcdev, and then we remove the driver module, we will encounter the following error: 25.065966 General protection fault; likel...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

A vulnerability related to out-of-bounds memory access was discovered in the Linux kernel’s TUN/TAP device driver functionality. This vulnerability occurs when a user generates a malicious excessively large network packet while napi frags is enabled. This flaw allows a local user to cause a syste...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: netdevsim: Avoid potential loops in nsimdevtrapreportwork. Many syzbot reports include the following trace 1. If nsimdevtrapreportwork cannot acquire the mutex, it should rearm itself at least one jiffie later. 1 Sending NMI...