power-pwn

Maintained by: Secure AI Agents Everywhere. Overview Power Pwn is an offensive and defensive security toolset for Microsoft 365 Power Platform and AI services. Key Features, among others: 💾 PowerDump : Comprehensive tenant scanning and data collection 🚪 BackDoor : Deploy backdoor flows for...

uhubctl

uhubctl uhubctl は、スマートUSBハブのポートごとのUSB電源を制御するユーティリティです。 スマートハブとは、ポートごとの電源切り替えを実装しているハブを指します。 このコードの元のアイデアは、Niibe Yutaka による hub-ctrl.c に触発されました： https://www.gniibe.org/development/ac-power-control-by-USB-hub 互換性のあるUSBハブ ポートごとの電源切り替えを正しくサポートしているUSBハブは多くないことに注意してください。...

Eaton-Intelligent-Power-Manager-Local-File-Inclusion

Eaton-Intelligent-Power-Manager-Local-File-Inclusion Eaton Intelligent Power Manager v1.6 のローカルファイルインクルージョンにより、攻撃者がファイルをインクルードでき、機密情報の漏えい、サービス拒否、コード実行につながる可能性があります。 CVE-2018-12031 脆弱性を悪用するには、'https://HOST/server/nodeupgradesrv.js?action=downloadFirmware&firmware=/../../../../../../../../../../'...

ossem-power-up

OSSEM 훌륭한 OSSEM 프로젝트를 기반으로 구축된 데이터 품질 평가 도구입니다. 목표 "ATT&CK 기술을 헌팅하고 싶은데, 어떤 로그 소스와 이벤트가 더 적합할까?"라는 질문에 답하기 로그 소스의 장단점에 대한 투명성 제공 로그를 쉽게 평가할 수 있는 방법 제공 OSSEM Power-up 개요 Power-up 은 데이터 품질 평가의 기반으로 OSSEM 탐지 데이터 모델DDM을 사용합니다. 주요 이유는 DDM이 ATT&CK 데이터 소스, 공통 정보 모델 엔티티CIM, 데이터 사전이벤트을 서로 연관 지을 수 있는 구조화된...

Overglade-Badges

Overglade 해커톤 배지 이것은 싱가포르의 overglade 해커톤을 위해 제가 디자인한 무전력 해커톤 배지입니다! RP2040으로 구동되며, 수동 NFC와 온보드 e-잉크 드라이버가 내장되어 있습니다! 맞춤 기능 원하는 대로 사용할 수 있는 수동 NFC 태핑 배터리가 필요 없는 e-잉크 지원 프로그래밍을 위해 헤더 핀으로 연결된 20개의 GPIO 더 복잡한 작업을 원할 경우 활성 NFC 모드 무전력, 핵심 기능에 전력이 필요 없는 보드 4MB 플래시 메모리를 갖춘 RP2040 SoC 멋진 PCB와 노출된 구리 아트 PC...

Powertek Firmware <3.30.30 - Authorization Bypass

Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...

CVE-2023-28343

CVE-2023-28343 Altenergy Power System 제어 소프트웨어 settimezone RCE 취약점 CVE-2023-28343 중국어 이름: Altenergy Power System Control Software settimezone 远程命令执行漏洞（CVE-2023-28343） CVSS 점수:9.0 설명 : Altenergy Power System Control Software는 Altenergy Power System의 마이크로인버터 제어 소프트웨어입니다. 영향 : AlAltenergy Power Syst...

power_analysis

RSA에 대한 전력 분석 공격 색인 소개 전력 분석 공격 RSA: 간단한 소개 RSA 예제 장비 전력 측정: 간단한 소개 옴의 법칙 키르히호프의 전압 법칙 KVL 전압 분배기 션트 저항 전력 측정 예제 빠른 거듭제곱 Arduino Atmega328P에서의 빠른 거듭제곱 결과 결론 참고문헌 소개 최근에 저는 사람들이 Arduino를 위해 직접 암호화를 구현하는 것을 관찰했습니다. 예를 들어 stackoverflow의 이 주제에서 언급된 것과 같습니다:...

Exploits

エクスプロイト オリジナルのCVE、エクスプロイトPoC、セキュリティアドバイザリ 作者: @kmkz · boffsec-services.com · @kmkzsecurity 2026 ファイル| 対象| タイプ| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| アドバイザリ（3-CVEチェーン）| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghelli Sicuro24| PoC（mitmproxy）|...

power-tracks-research

Power Tracks 研究 "Power Tracks"、"Stock Galaxy"、"Warped Prism" のマーケットメカニクスに関する包括的な研究リポジトリ。このコードベースには、現代のマーケットマイクロストラクチャにおける体系的な異常を発見・マッピングするために使用されたツール、パイプライン、検証スイートが含まれています。 構成 研究は3つの主要な柱に分かれています。 I. シグナル: Power Tracks & ステガノグラフィ 異常な「ハートビート」と隠されたデータチャンネルを検出する。 フェーズ57 : 検出スタック - Power Tracks...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: interconnect: exynos: fix node leak in probe PM QoS error path Make sure to add the newly allocated interconnect node to the provider before adding the PM QoS request, so that the node is freed in case of errors...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq256xx: Fixed a use-after-free in powersupplychanged. Using the devm variant for requesting IRQs before using the devm variant for allocating/registering the powersupply handle means that the powersupply handle wi...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: clk: Obtain runtime PM information before traversing the tree to retrieve clksummary. Similar to the previous commit, we should ensure that all devices are resumed during runtime before printing the clksummary through debugfs...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: interconnect: Fixed locking issues related to runpm vs. reclaim. For cases where iccbwset can be called in callbaths that may lead to deadlocks with shrinker/reclaim, such as during runpm resume, we need to separate the icc...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Do not return “unset power” in ieee80211gettxpower. We may receive a UBSAN warning if ieee80211gettxpower returns the INTMIN value that mac80211 internally uses for “unset power level”. UBSAN:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fixed NULL pointer dereferencing when nosmp is used When nosmp is used in the command line, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0’s iteration via foreachpossiblecpu dereferences these NULL...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ARM: Rockchip – Fix for kernel hangs during SMP initialization To address this issue, the trampoline code that writes data from the secondary CPUs to SRAM is executed when the secondary CPUs are powered on at least this is true f...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fixed PM usagecount for console handover When the console is enabled, univ8250consolesetup calls serial8250consolesetup before .dev is set to uartport. As a result, pmruntimegetsync will not be called. Later, when t...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Updated the intermediate power state for SI. Updated the current state to the boot state during dpm initialization. During subsequent initialization, setpowerstate is called to transition to the final power state...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek – Performing a runtime PM get operation on controllers during probing. The mt8183-mfgcfg component has a mutual dependency with genpd during the probing stage, which leads to a deadlock in the following call stack:...