CVE-2025-34152

⚠️ CVE-2025-34152 – Shenzhen Aitemi M300 Wi-Fi Repeater RCE 🚨 Overview Shenzhen Aitemi M300 Wi-Fi Repeater is affected by an unauthenticated remote code execution RCE. No login required Does not reboot the device Can be exploited remotely 🛠 Vulnerable Versions Version| Status ---|--- 1.0.x| ❌...

CVE-2015-5374-DoS-PoC

CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module ... Done, say goodbye! Metasploit Module This module sends a specially crafted packet to Port 50000/UDP could cause a denial of service of the...

AirWatch

AirWatch What is AirWatch? AirWatch is a simple menu bar app which helps prevent device snatching attacks. As an example, such an attack was carried out against Ross Ulbricht. An agent grabbed his device and ran, thus preventing him from rebooting it. How does it work? AirWatch monitors the curre...

EDR-ALPC-Block-POC

EDR ALPC-Block POC Blocking Windows EDR agents by registering an own IPC object in the Object Manager’s namespace CVE-2023-3280, CVE-2024-5909, CVE-2024-20671 and others without assigned CVEs Introduction This repository contains example code demonstrating how to exploit DoS vulnerabilities prese...

CVE-2023-37073

CVE-2023-37073 Telnetのデフォルト認証情報により、情報漏洩やサービス拒否（DoS）攻撃が発生する可能性があります。 再現手順 これはAP AR-5310に影響します。 Telnet 192.168.1.1 username:user password:user その後、Boom... ログインできました Telnetのデフォルト認証情報による情報漏洩 Telnetサービスにログインしたら、 コマンド「help」または「?」を入力すると、 利用可能なオプションが表示されます。 reboot, ping, lanhosts, passwd restoredefault,...

CVE-2026-14983

Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to achieve denial of service against Teledyne FLIR PackBot robots running this software via misuse of the reboot endpoint...

EUVD-2026-91048

Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to achieve denial of service against Teledyne FLIR PackBot robots running this software via misuse of the reboot endpoint...

CVE-2026-14983 Missing Authentication in Teledyne FLIR Robots running Aware2

Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to achieve denial of service against Teledyne FLIR PackBot robots running this software via misuse of the reboot endpoint...

CVE-2026-14983

Teledyne FLIR Aware2 software versions through 6.9.0.2 are vulnerable to a denial of service (DoS) attack due to missing authentication in the web interface. An unauthenticated remote attacker can exploit this by misusing the reboot endpoint on Teledyne FLIR PackBot robots running the affected so...

CVE-2026-31431-patch

CVE-2026-31431-patch CVE-2026-31431 脆弱性に対する一時的な緩和策 git clone https://github.com/rshosting/CVE-2026-31431-patch.git cd CVE-2026-31431-patch sh checkaead.sh サーバーが再起動から復帰したら、以下のスクリプトを実行してください: sh completeaead.sh...

CVE-2026-26235-JUNG-Smart-Visu-Server-Unauthenticated-Reboot-Shutdown

👤 著者 Mohammed Idrees Banyamer 📍 国: ヨルダン 📸 Instagram: @banyamersecurity CVE-2026-26235 の概念実証エクスプロイト - JUNG Smart Visu Server ≤ 1.1.1050 における認証欠如による認証不要のサービス拒否。 🚨 脆弱性の説明 CVE-2026-26235 は、JUNG Smart Visu Server バージョン ≤ 1.1.1050 における認証不要のサービス拒否の脆弱性です。この製品は、重要なシステム管理機能に対して認証を実装しておらず、リモートの攻撃者が単一の POST...

CVE-2026-31431-mitigation

CVE-2026-31431-mitigation 本仓库包含我们针对 CVE-2026-31431（又称“copy.fail”）的基于 eBPF 的缓解方案的源代码。（更多信息请访问 https://copy.fail） 构建此解决方案的动机是为了满足对关键任务机器提供免重启缓解方案的需求，在这些机器上 algifaead 直接编译进内核，导致无法仅通过将模块加入黑名单来快速缓解。 此代码按“原样”分发，不提供任何形式的担保，并根据 GPL-v2.0 许可证条款授权。 虽然我们已在生产服务器上测试过此方案，并且对我们有效，但我们仅将其作为临时解决方案提供。 构建...

CVE-2025-56311

CVE-2025-56311: セキュリティアドバイザリ – FD602GW-DX-R410 ルーター再起動機能におけるCSRF脆弱性 本資料は、FD602GW-DX-R410 ファイバールーターの管理インターフェース（ファームウェア V2.2.14）におけるクロスサイトリクエストフォージェリ（CSRF）脆弱性に関する概念実証（PoC）とセキュリティアドバイザリです。本アドバイザリでは、影響、攻撃経路、および修復の推奨事項について概説します。 fd602gw-dx-r410-csrf-advisory FD602GW-DX-R410...

rcm-modchips

RCM Bug "Modchip" Archive This work-in-progress repository collects a variety of sample embedded devices which trigger the "Fusée Gelée"/"ShofEL2" vulnerability CVE-2018-6242. Nothing in this respository is ready for public use...

MARMALADE-2-CVE-2025-67780-Exploit

MARMALADE 2/CVE-2025-67780 Exploit PoC Exploit PoCs for MARMALDE 2 CVE-2025-67780 vulnerability in Starlink Dishes Read my full blog on how I found this vulnerability and how you can make it do what you want: https://www.akawlabs.com/blog/starlink-grpc-execution I developed multiple...

CVE-2026-36130

PoC 将文件夹添加到锁定列表 重启前，Defender 进程仍在运行 重启后，Defender 进程 MsMpEng.exe 已消失...

CVE-2026-7192

A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long...

EUVD-2026-88758

A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long...

CVE-2026-7192

The Dbit T-CPE301K 4G Mini WiFi Router is susceptible to a stack-based buffer overflow vulnerability. An authenticated attacker can trigger a denial of service (DoS) and a system reboot by sending a manipulated HTTP POST request to the /js/common/do_cmd.js endpoint. The vulnerability is caused by...

CVE-2026-7192 Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment

A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long...