Cable-modems
ebux/cable-modemsBlack-box security evaluation of five ISP cable modem/router gateways, analyzing firmware images and documenting 35+ vulnerabilities including…
embedded-systems-securityexploitationfirmware-analysis+5
25
ebux/cable-modemsBlack-box security evaluation of five ISP cable modem/router gateways, analyzing firmware images and documenting 35+ vulnerabilities including…
fullspectrumdev/rancidcriscoProof-of-concept exploit for CVE-2023-20126 targeting Cisco SPA phone adapters. Uploads malicious firmware to gain a root shell on port 23000/tcp via…
nickdaria/wyze-bulb-color-pwnedNo-open firmware exploit for the Wyze WLPA19CV2 color bulb
tc3650/cve-2026-43499-armv7ARM32 Linux kernel privilege escalation exploit for CVE-2026-43499 (GhostLock futex UAF) targeting Huawei Watch 4 Pro with multiple exploitation…
duality084/cve-2023-33381-mitrastar-gpt-2741gnacProof-of-concept exploit for OS command injection (CVE-2023-33381) in MitraStar GPT-2741GNAC routers. Demonstrates bypass of restricted shell via…
vl4dr/cve-2024-42642Proof-of-concept exploits for three vulnerabilities in Crucial MX500 SSD firmware update mechanism, enabling buffer overflows and potential code…
finngineering/ch55x_firmware_extractorFirmware extractor for CH55x microprocessors
cplusplus17/deco-filepush-disclosureDisclosure and PoC for a root file read/write flaw in the TP-Link Deco XE75 Pro V3 debug channel (tmpsvr opcodes 0xC456/0xF0), with CVSS analysis and…
wuyou6956-glitch/cve-2026-1668-pocProof-of-concept exploit for CVE-2026-1668 in TP-Link switch firmware, delivering a MIPS payload that yields a root shell on vulnerable devices.
dgh05t/zer0con_2026_attacking_apple_dcpResearch repository detailing exploitation techniques against Apple's Display Co-Processor (DCP), including firmware analysis and hardware-level…
rebilibin/ghostlock-oppo-watch3proComplete exploit research for CVE-2026-43499 (GhostLock) on OPPO Watch 3 Pro, including kernel UAF analysis, disassembly, and exploit chain…
badnack/d_link_880_bugCVE-2017-14948 for D-Link 880 Firmware
minanagehsalalma/cve-2021-21735-zte-zxhn-h168n-admin-compromiseCVE-2021-21735 write-up: ZTE ZXHN H168N V3.5 wizard-page information leak, firmware routing flaw, and the path from exposed PPPoE/WLAN data to full…
murrez/cve-2026-13249Unauthenticated arbitrary file upload on Honeywell PD45 web admin (firmware F10.19.010040–before F10.22.030745) leading to RCE. Python check/exploit…
infobyte/nec_aterm_toolsExtracts hardware random keys from NEC Aterm router firmware images and QR codes to generate valid passwords for gaining shell access.
jaarden/cve-2024-22894Proof-of-concept exploit for CVE-2024-22894, demonstrating 3DES-encrypted root password extraction from Alpha Innotec/Novelan heatpump firmware,…
themalwareguardian/uefi-security-research-howyar-sysreturn-netcopyPost CVE-2024-7344 analysis of Howyar SysReturn NetCopy - reverse engineering notes, vulnerable binaries, vendor correspondence, and proof-of-concept…
lukejenkins/cve-2022-24693Documentation and reproduction steps for CVE-2022-24693: hardcoded credentials in Baicells Nova436Q and Neutrino 430 firmware, enabling remote SSH…