power-tracks-research

Power Tracks 研究 针对 "Power Tracks"、"Stock Galaxy" 和 "Warped Prism" 市场机制的综合研究仓库。该代码库包含用于发现和映射现代市场微观结构中系统性异常的工具、流程和验证套件。 结构 研究分为三大支柱： I. 信号：Power Tracks 与隐写术 检测异常 "心跳" 与隐藏数据通道。 Phase 57 : 检测栈 - 检测 Power Tracks 的主要工具集。 隐写术 : 26天分析 - 对打印数据中隐蔽信号传递的全面研究。 EDGX 解码 : 玻璃屋行动 - 深入分析交易所特定订单类型与操作码。 II...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: clk: Obtain runtime PM information before traversing the tree to retrieve clksummary. Similar to the previous commit, we should ensure that all devices are resumed during runtime before printing the clksummary through debugfs...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq256xx: Fixed a use-after-free in powersupplychanged. Using the devm variant for requesting IRQs before using the devm variant for allocating/registering the powersupply handle means that the powersupply handle wi...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: interconnect: exynos: fix node leak in probe PM QoS error path Make sure to add the newly allocated interconnect node to the provider before adding the PM QoS request, so that the node is freed in case of errors...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: interconnect: Fixed locking issues related to runpm vs. reclaim. For cases where iccbwset can be called in callbaths that may lead to deadlocks with shrinker/reclaim, such as during runpm resume, we need to separate the icc...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ARM: Rockchip – Fix for kernel hangs during SMP initialization To address this issue, the trampoline code that writes data from the secondary CPUs to SRAM is executed when the secondary CPUs are powered on at least this is true f...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Do not return “unset power” in ieee80211gettxpower. We may receive a UBSAN warning if ieee80211gettxpower returns the INTMIN value that mac80211 internally uses for “unset power level”. UBSAN:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fixed NULL pointer dereferencing when nosmp is used When nosmp is used in the command line, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0’s iteration via foreachpossiblecpu dereferences these NULL...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek – Performing a runtime PM get operation on controllers during probing. The mt8183-mfgcfg component has a mutual dependency with genpd during the probing stage, which leads to a deadlock in the following call stack:...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Updated the intermediate power state for SI. Updated the current state to the boot state during dpm initialization. During subsequent initialization, setpowerstate is called to transition to the final power state...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fixed PM usagecount for console handover When the console is enabled, univ8250consolesetup calls serial8250consolesetup before .dev is set to uartport. As a result, pmruntimegetsync will not be called. Later, when t...

Exploits

漏洞利用（Exploits） 原创CVE、利用PoC和安全公告 作者：@kmkz · boffsec-services.com · @kmkzsecurity 2026年 文件| 目标| 类型| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| 公告（3-CVE链）| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghelli Sicuro24| PoC（mitmproxy）| 9.3...

ps5-uart

Cabecera de 24 pines cerca de salina EDM-010 root@kitploit: emc header 1 5v 2 5v 3 gnd 4 gnd 5 emc gpio a1. pulling low at emc boot causes emc rom to enter uart shell @ 460800 6 uart rx emc 115200 7 uart tx emc 115200 8 3v3, goes low when emc resets 9 0v? 10 gnd 11 titania uart0 tx efc fw: 460800...

wyze-bulb-color-pwned

wyze-bulb-color-pwned Wireless exploit for the Wyze WLPA19CV2 color bulb Overview The Wyze Color WLPA19CV2 bulbs have a factory test mode which allows a custom OTA image to be flashed wirelessly through a specific sequence of power cycling. This project provides An implementation and guide to...

power-pwn

由以下机构维护： 保护无处不在的 AI 代理。 概述 Power Pwn 是一个用于 Microsoft 365 Power Platform 和 AI 服务的进攻与防御安全工具集。 主要功能（包括但不限于）： 💾 PowerDump ：全面的租户扫描与数据收集 🚪 BackDoor ：部署后门流以持久访问 Power Platform 环境 🦠 NoCodeMalware ：无需编写代码即可创建和部署恶意 Power Platform 构件 🎣 PowerPhishing ：滥用 Power Platform 进行钓鱼攻击和凭据窃取 🤖 Copilot Studio Hunter...

uhubctl

uhubctl uhubctl は、スマートUSBハブのポートごとのUSB電源を制御するユーティリティです。 スマートハブとは、ポートごとの電源切り替えを実装しているハブを指します。 このコードの元のアイデアは、Niibe Yutaka による hub-ctrl.c に触発されました： https://www.gniibe.org/development/ac-power-control-by-USB-hub 互換性のあるUSBハブ ポートごとの電源切り替えを正しくサポートしているUSBハブは多くないことに注意してください。...

Eaton-Intelligent-Power-Manager-Local-File-Inclusion

Eaton-Intelligent-Power-Manager-Local-File-Inclusion Eaton Intelligent Power Manager v1.6 中的本地文件包含漏洞允许攻击者包含一个文件，可能导致敏感信息泄露、拒绝服务和代码执行。 CVE-2018-12031 要利用该漏洞，攻击者可以使用 'https://HOST/server/nodeupgradesrv.js?action=downloadFirmware&firmware=/../../../../../../../../../../' 请求来获取目标上的某些信息。 root@kitploit...

Overglade-Badges

Overgladeハッカソンバッジ シンガポールで開催されたOvergladeハッカソン用にデザインしたゼロパワーのバッジです！RP2040を搭載し、パッシブNFCとオンボードのe-inkドライバーを備えています！ カスタム機能 パッシブNFCタップ対応。お好みの用途にお使いいただけます e-ink対応により、バッテリーは不要 プログラミング用にヘッダーピンに引き出された20個のGPIO より複雑な処理を行いたい場合のアクティブNFCモード ゼロパワー：コア機能に電力を必要としません 4MBフラッシュメモリ搭載のRP2040 SoC クールなPCBと露出銅アート PCBデザイン...

ossem-power-up

OSSEM データ品質を評価するツールです。素晴らしい OSSEM プロジェクトをベースに構築されています。 ミッション 「ATT&CK のテクニックをハンティングしたい。どのログソースやイベントが適しているか？」という質問に答える ログソースの強みと弱みの透明性を生み出す ログを簡単に評価する方法を提供する OSSEM Power-up 概要 Power-up は、データ品質評価の基盤として OSSEM Detection Data Model DDM を使用します。その主な理由は、ATT&CK Data Sources、Common Information Model のエンティティ...

CVE-2023-28343

CVE-2023-28343 Altenergy Power System Control Software settimezone 远程命令执行漏洞（CVE-2023-28343） 中文名称：Altenergy Power System Control Software settimezone 远程命令执行漏洞（CVE-2023-28343） CVSS 评分：9.0 描述 ：Altenergy Power System Control Software 是 Altenergy Power System 公司的一款微型逆变器控制软件。 影响 ：Altenergy Power System...