CVE-2021-41730
yezeting/cve-2021-41730Proof-of-concept exploit for CVE-2021-41730, demonstrating remote command execution in TENDA AC15/AC6 routers via unvalidated formSetIptv()…
command-and-controlembedded-systems-securityexploitation+5
yezeting/cve-2021-41730Proof-of-concept exploit for CVE-2021-41730, demonstrating remote command execution in TENDA AC15/AC6 routers via unvalidated formSetIptv()…
ethancunt/cve-2022-45600Proof-of-concept exploit for command injection vulnerability in Aztech WMB250AC routers, enabling authenticated privilege escalation to root shell…
laginimaineb/cve-2015-6639QSEE Privilege Escalation Exploit using PRDiag* commands (CVE-2015-6639)
wh02m1/cve-2026-78306Proof-of-concept exploiting DJI drone Bluetooth DUML command injection, sending unauthenticated commands to read credentials, alter Wi-Fi config, and…
nccgroup/blesuite-cliBLESuite_CLI is a command line tool to enable an easier way to test Bluetooth Low Energy (BLE) devices
vl4dr/cve-2024-42642Proof-of-concept exploits for three vulnerabilities in Crucial MX500 SSD firmware update mechanism, enabling buffer overflows and potential code…
shlln/cve-2026-90847Proof-of-concept for CVE-2026-90847, an authenticated RCE in iux_set.cgi via malicious .cfg tar upload that writes commands into crontab for…
peterlinccl/vulnerability-dlink-cve-2025-14659Static analysis (Ghidra) and custom packet-crafting (Scapy) demonstrating a root-level DHCP command injection vulnerability (CVE-2025-14659) in…
whoami-012/cve-2026-96515Technical report and authenticated reverse-shell PoC for CVE-2026-96515, a root command execution flaw in the Netlink HG323RW router's BOA diagnostic…
yt2w/cve-2025-9961Exploit for TP-Link AX10/AX1500 stack buffer overflow in CWMP (TR-069) enabling remote code execution via ret2libc with ASLR bypass. Includes…
d6fault/cve-2026-95675Python PoC exploiting CVE-2026-95675, an unauthenticated root command injection in D-Link DAP-1360 RevB firmware via a hardcoded auth-bypass and the…
hackspeak/cve-2026-94095PoC for CVE-2026-94095, a traceroute command injection in Netcore NBR200V2 firmware via ubus JSON-RPC, enabling root RCE for authorized testing.
george0papasotiriou/cve-2026-21006-zigbee-light-link-factory-reset-exploitSimulated Zigbee Light Link (ZLL) factory reset exploit for CVE-2026-21006, demonstrating unauthenticated TouchLink command injection that wipes…
totekuh/cve-2026-75616Proof-of-concept exploit for authenticated OS command injection in TP-Link Archer C20 v6 web management interface, executing root commands via BPA…
kernel364/cve-2024-29973Proof-of-concept exploit for command injection vulnerability in Zyxel NAS devices. Demonstrates arbitrary command execution via crafted HTTP…
ide0x90/cve-2016-1555Metasploit module exploiting unauthenticated command injection in multiple Netgear router models to achieve remote code execution with root…
hunt-benito/glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-routerPoC for three unauthenticated command injection vulnerabilities (CVE-2026-11450/1/2) in GL.iNet Beryl AX travel router firmware <=4.4.5, exploiting…
jaden-bowers/tenda-router-vr-and-exploitWriteup for Tenda AC15 router firmware rehosting and remote command execution (CVE-2020-10987) exploit replication.