CVE-2026-90847
shlln/cve-2026-90847Proof-of-concept for CVE-2026-90847, an authenticated RCE in iux_set.cgi via malicious .cfg tar upload that writes commands into crontab for…
embedded-systems-securityexploitationiot-security+5
shlln/cve-2026-90847Proof-of-concept for CVE-2026-90847, an authenticated RCE in iux_set.cgi via malicious .cfg tar upload that writes commands into crontab for…
on3sk-0x1/cve-2026-19900-pocProof-of-concept exploit for CVE-2026-19900, an authentication bypass and remote code execution vulnerability in LB-LINK X-PRO routers, allowing…
hackspeak/cve-2026-82592Proof-of-concept exploit for D-Link DIR-825M stack buffer overflow and command injection in /boafrm/formDiskFormat, enabling remote code execution as…
danish1162/cve-2026-2035703-x300Tozed ZLT X300 5G CPE — Remote Root Code Execution via SDR Rogue Base Station (CVE-2026-2035703, CWE-78, CVSS 9.8) — Coordinated Disclosure
xf-secops/cve-2026-32662Advisory detailing active debug code in production Gardyn Home Kit cloud API, exposing development endpoints and embedded credentials, with…
adamlaurie/rfidiotPython library and tools for exploring RFID/NFC tags and readers: read, write, clone, and analyze supported ACG serial hardware for research and…
flipperdevices/flipperzero-firmwareFlipper Zero firmware source code
blasty/sonosExploit and tooling for Amlogic-based Sonos devices: dumps OTP/eFUSE via an EL3 exploit, extracts LUKS decryption keys, and fetches/decrypts OTA…
netsecfish/dlinkProof-of-concept exploit and analysis for command injection and hardcoded backdoor credentials in D-Link NAS devices, enabling unauthenticated remote…
george0papasotiriou/cve-2026-23005-matter-commissioning-code-brute-force-without-rate-limitSimulates a Matter commissioning code brute-force attack (CVE-2026-23005) using Python to demonstrate missing rate limiting and lockout on 8-digit…
george0papasotiriou/cve-2026-2222-mqtt-broker-connect-packet-heap-overflowDemonstrates CVE-2026-2222 heap overflow in MQTT CONNECT packet handling with a simulated vulnerable broker and proof-of-concept exploit code for…
george0papasotiriou/cve-2026-6789-stack-buffer-overflow-in-embedded-tls-certificate-parserStack buffer overflow PoC in an embedded TLS certificate parser using a crafted X.509 SAN extension for remote code execution on IoT and industrial…
george0papasotiriou/cve-2026-1122-iot-firmware-update-signature-bypass-via-low-order-point-injectionDemonstrates CVE-2026-1122 Ed25519 signature bypass via low-order point injection, forging malicious IoT firmware updates with Python and C verifier…
bishopfox/shining-maskBLE-based tool that automatically discovers and exploits Shining LED Masks by uploading a custom image without user interaction, proving security…
nanopathi/system_bt_aosp10_r33_cve-2021-0431Android Bluetooth stack (Fluoride) source code for AOSP 10 r33, specifically related to CVE-2021-0431 Bluetooth vulnerability research and…
bitfu/sricam-gsoap2.8-dos-exploitSricam gSOAP2.8 DoS exploit PoC
cybervinner/cp-plus-ez-p21-cve-2026-65893-65894Documents CP PLUS EZ-P21 IP camera CVEs: arbitrary code execution via debug feature and improper authentication of HTTP endpoints, with responsible…