Tools

slagzz/cve-2026-9254

TP-Link Archer BE800 V1 — Parental Control LAN RCE

darkflippers/unleashed-firmware

Custom firmware for Flipper Zero enabling Sub-GHz radio, NFC/RFID emulation, infrared, and BadUSB attack features for hardware security testing.

george0papasotiriou/cve-2026-23004-automotive-uds-authentication-bypass-via-replay-attack

Proof-of-concept exploit demonstrating UDS authentication bypass via challenge-response replay on automotive ECUs, with Python CAN-UDS simulator.

unknownpwn-zz/unknownpwn.github.io

Public disclosure of Tecnovision DlxSpot Player 4 vulnerabilities: hardcoded SSH credentials, SQL injection, and arbitrary file upload to remote code…

traccar/traccar

Open-source GPS tracking system supporting 200+ protocols and 2000+ device models. Provides real-time tracking, geofencing, driver monitoring, and…

vanlam2001/netis-n5vn-ac1200-dos

Proof-of-concept exploit for a buffer overflow vulnerability (CVE-2024-44596) in Netis N5VN AC1200 routers, causing a denial of service by crashing…

yoshida-git-ai/spacex-starlink-router-gen-2-xss

Proof-of-concept exploit for CVE-2023-49965: Cross-Site Scripting (XSS) in Starlink Router Gen 2 captive portal, enabling CSRF-based control of…

kostasereksonas/xm_onvif_auth_bypass

Proof-of-concept code (Bash and Python) for CVE-2025-65856 where ONVIF implementation in in Xiongmai XM530 IP cameras allows for unauthenticated …

salgio/ewelink-qr-code

This repo describes a vulnerability affecting the QR code based pairing process of the eWeLink IoT devices (CVE-2020-12702).

fomovet/cve-2025-29384

Proof-of-concept exploit for CVE-2025-29384, a critical stack-based buffer overflow in Tenda AC9 routers. Includes Python and Metasploit modules for…

gumbraise/cve-2024-54887-poc

TypeScript PoC for CVE-2024-54887 (TP-Link TL-WR940N authenticated RCE)

edwins907/-cve-2024-45352

Technical PoC and analysis of CVE-2024-45352, a critical unauthenticated RCE in Xiaomi Smarthome via improper API input handling, with exploit…

mr-xn/cve-2022-25064

Python exploit for TP-Link TL-WR840N RCE (CVE-2022-25064) via crafted IPv6 address payload in the router's CGI interface, enabling remote command…

joelczk/cve-2025-52688

Proof-of-concept exploits for CVE-2025-52688: unauthenticated command injection and arbitrary file read vulnerabilities in Alcatel AP13161 enterprise…

exploitwritter/cve-2022-25062

This script exploits a vulnerability (IoF) in the TPLink WR840N router, using a field for injecting code in the module DNS.

dreadlocked/netwave-dosvulnerability

[CVE-2018-6479] Netwave IP Camera server vulnerable to Denial of Service via one single huge POST request.

c0nyy/iot_vuln

Proof-of-concept exploits for IoT device vulnerabilities, including TOTOLINK login bypass CVEs, with detailed technical analysis and reproduction…