elevationstation

提权站（Elevation Station） 窃取和复制 SYSTEM 令牌，娱乐与盈利！我们复制东西，制作双胞胎副本，然后骑走。 你用 Metasploit 的 getsystem 和 SysInternals PSEXEC 获取过系统权限，对吧？那么，这里有一个类似的独立版本……但至少目前没有杀毒软件的问题 😸 此工具还能让你成为 TrustedInstaller ，类似于 Process Hacker/System Informer 的功能。此功能非常新，于 2023 年 8 月 12 日添加至最新代码版本和二进制版本！ 💵💲...

QNAP Music Station < 5.4.0 - Authentication Bypass

An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Music Station 5.4.0 and later id:...

Personal Weather Station Dashboard 12 - Directory Traversal

Personal Weather Station Dashboard 12lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/test.php, as demonstrated by reading the server's private SSL key in cleartext. id: CVE-2025-47423 info: name: Personal Weather...

Cloudlog - SQL Injection

Cloudlog 2.6.15 contains a SQL injection caused by unsanitized input in oqrs.php requestform, letting attackers execute arbitrary SQL commands via stationid or callsign, exploit requires sending crafted request. id: CVE-2024-48259 info: name: Cloudlog - SQL Injection author: s4e-io severity: high...

wlctl

wlctl NetworkManager用のWiFi TUI。 なぜ impalaは優れたWiFi TUIですが、iwdを経由して通信します。お使いのディストリビューションが既にNetworkManagerを実行している場合（GNOME、KDE、Ubuntu、Fedora、Popなど、ほとんどの場合）、スタックを引き剥がさずにimpalaをそのまま導入することはできません。wlctlはimpalaのユーザー体験を維持しつつ、NetworkManagerを対象とするため、デスクトップ環境が既に行っている処理と並行してそのまま動作します。 機能 ステーションモードとアクセスポイントモード W...

CVE-2024-36401

CVE-2024-36401 ChokapikkのCVE-2024-36401のリミックスで、限られた環境でウェブシェルのような動作を可能にします。また、自己署名TLSセッションを許可します。HTTPセッションは少し... 使用方法: git clone https://github.com/keelanbrady1011/CVE-2024-36401 && cd CVE-2024-36401 pip install -r requirements.txt python3 geoshell.py --lhost OWNIP --lport PORT --url http://TARGET...

QNAP Photo Station < 6.0.3 - Remote Code Execution

QNAP Photo Station versions prior to 6.0.3 contain multiple vulnerabilities that, when chained together, enable unauthenticated remote code execution RCE. id: CVE-2019-7194 info: name: QNAP Photo Station 6.0.3 - Remote Code Execution author: x-stp severity: critical description: | QNAP Photo...

EUVD-2026-91820

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-93474

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

CVE-2026-93474

The Monta mobile application (monta.app ) is affected by a vulnerability where charging station authentication identifiers are publicly accessible through web-based mapping platforms. This issue is categorized as Insufficiently Protected Credentials (CWE-522 ). The disclosure of these identifiers...

infected-drones

受感染的无人机 无人机到地面控制站的攻击向量、漏洞与利用 如今的无人机机群通常是由一名操作员从单一地面站操控数十或数百架无人机。这使得地面控制站成为对手的宝贵目标。飞行员通常位于此处，这里往往存储任务数据，并且是横向移动至 UxS 网络及机群中其他无人机的首要途径。 大多数无人机安全研究都聚焦于攻击无人机本身。受感染的无人机研究采取了另一种方法，重点揭示单架被攻陷的无人机如何攻击与其连接的地面站。由于大多数地面控制软件信任无人机发送的任何内容，缺乏身份验证、校验和清理，使得来自被攻陷无人机的数据可能导致操作员机器上的文件增删改查、代码执行或崩溃。 负责任的使用...

CVE-2026-20404-MediaTek-modem-remote-DoS-rogue-base-station-scenario-

CVE-2026-20404-MediaTek-modem-remote-DoS-rogue-base-station-scenario- MediaTek 调制解调器存在输入验证问题，当 UE 连接到攻击者控制的恶意基站时，可能导致系统崩溃（远程拒绝服务），且无需用户交互。 提供的 check.sh 代码用于： 1. 识别受影响的芯片/设备 2. 确认补丁级别/公告是否已应用 3. 记录威胁模型（可用性影响、恶意基站前提条件） 执行方式 - bash ./check.sh 分析...

CVE-2026-103244

ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL during first-run setup mode. Attackers can invoke setup.restore via Socket.IO to plant admin users and forged session...

CVE-2026-103244

The ground-station application, in versions prior to 0.8.0 , is vulnerable to an authentication bypass within the setup.restore command. This flaw allows unauthenticated attackers to execute arbitrary SQL during the initial first-run setup mode. By invoking setup.restore via Socket.IO , an attack...

CVE-2026-103244 ground-station before 0.8.0 Authentication Bypass via setup.restore

ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL during first-run setup mode. Attackers can invoke setup.restore via Socket.IO to plant admin users and forged session...

CVE-2026-103244 ground-station before 0.8.0 Authentication Bypass via setup.restore

ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL during first-run setup mode. Attackers can invoke setup.restore via Socket.IO to plant admin users and forged session...

CVE-2026-103244 ground-station before 0.8.0 Authentication Bypass via setup.restore

ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL during first-run setup mode. Attackers can invoke setup.restore via Socket.IO to plant admin users and forged session...

EUVD-2026-90748

ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL during first-run setup mode. Attackers can invoke setup.restore via Socket.IO to plant admin users and forged session...

PT-2026-103777

Name of the Vulnerable Software and Affected Versions ground-station versions prior to 0.8.0 Description An authentication bypass exists in the setup.restore command during the first-run setup mode. Unauthenticated attackers can use Socket.IO to invoke this command and execute arbitrary SQL,...

CVE-2026-93799

A flaw was found in the Linux kernel's iwlwifi wireless driver. When handling Block Ack BA window status notifications, the driver fails to validate the station identifier received from the firmware before using it as an array index. A compromised or crafted firmware notification with an invalid...