FuckJsonp-RCE-CVE-2022-26809-SQL-XSS-FuckJsonp

这个蜜罐的溯源方式针对使用手机热点的红队人员。蜜罐直接获取攻击者手机号进行溯源。一抓一个准。各位红队人员小心为妙。 首先打开网站，他会监控是否开启了F12控制台，如果开启了调试模式的话，溯源代码会停止加载。 另外，针对使用burp的用户。小心你们的burp版本是否存在chrome的漏洞。 沙箱的特征如下，直接加载js fofa上面可以直接搜索到142多条，看来蜜罐还挺多啊 重点获取手机号js代码，可以看到会获取三大运营商的手机信息 解密如下 获取联通的接口 如果获取到手机号码的话，会将加密的手机号上传 另外其他溯源接口如下 root@kitploit:...

FortiLogger 4.4.2.2 - Arbitrary File Upload

FortiLogger 4.4.2.2 is affected by arbitrary file upload issues. Attackers can send a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then Assets/temp/hotspot/img/logohotspot.asp. id: CVE-2021-3378 info: name: FortiLogger 4.4.2.2 - Arbitrary File Upload author:...

CVE-2025-6563

Avviso di vulnerabilità XSS riflesso nella pagina di accesso all'hotspot MikroTik Panoramica È stata scoperta una vulnerabilità di Cross-Site Scripting XSS riflesso nella pagina di accesso all'hotspot MikroTik RouterOS. La vulnerabilità viene innescata tramite il parametro URL dst, che non sanifi...

rayhunter

Rayhunter Rayhunter è un progetto per rilevare gli IMSI catcher, noti anche come simulatori di stazione base cellulare o stingray. È stato inizialmente progettato per funzionare su un hotspot mobile economico chiamato Orbic RC400L, ma grazie agli sforzi della comunità, può supportare anche altri...

splinter

splinter splinter è un toolkit di analisi della jvm, che permette all'utente di visualizzare classi, metodi, campi, pool costanti e bytecode in esecuzione. è stato creato e testato su openjdk build 22.0.2+9-70 cos'è splinter? di solito, quando si pensa a un toolkit di analisi per la jvm, si pensa...

piraterf

🏴‍☠️ PIrateRF - Piattaforma di Trasmissione Radio a Definizione Software PIrateRF trasforma il tuo Raspberry Pi Zero W in un generatore di segnali RF portatile che crea il proprio hotspot WiFi. Controlla tutto, dalle trasmissioni FM ai modi digitali, attraverso il tuo browser - hackerai le onde...

TP-Link-defaults

TP-Link-defaults Script Python per provare password predefinite per alcuni hotspot TP-Link Ispirato da Utilizzo root@kitploit: usage: scan.py -h -p -t TIMEOUT Python script for trying default passwords for some TP-Link Hotspots optional arguments: -h, --help show this help message and exit -p,...

CVE-2026-66409

DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot...

CVE-2026-66409

DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot...

EUVD-2026-55116

DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot...

CVE-2026-66409

CVE-2026-66409 affects DEEBOT PRO M1 and DEEBOT PRO K1VAC. The issue is a weak password on the devices’ Wi‑Fi hotspot, which could allow an attacker to obtain the hotspot password and connect to the robot’s access point. The JVN entry confirms this weakness (CWE-1391) and the broader set of issue...

Security Bulletin: Multiple vulnerabilities in IBM® SDK Java™ affect IBM Cloud Pak System

Summary Multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition were addressed in IBM Cloud Pak System version 2.3.6.1. Vulnerability Details CVEID:CVE-2024-21235 DESCRIPTION: Vulnerability in Java SE component: Hotspot. Difficult to exploit vulnerability allows unauthenticated attacke...

Acer M6E 安全漏洞

The Acer M6E is a portable 5G mobile hotspot device from Acer, a company based in Taiwan, China. The Acer M6E has a security vulnerability, which stems from failing to properly evaluate the command permissions of multiple internal opcodes. This vulnerability may allow unauthorized applications to...

Acer M6E 安全漏洞

The Acer M6E is a portable 5G mobile hotspot device from Acer, a company based in Taiwan, China. The Acer M6E has a security vulnerability. This vulnerability stems from the ability to access internal multimedia session archives without authentication, and lax cross-site resource sharing rules...

Acer M6E 安全漏洞

The Acer M6E is a portable 5G mobile hotspot device from Acer, a company based in Taiwan, China. The Acer M6E has a security vulnerability, which stems from overly permissive configuration settings of the cloud storage container. This vulnerability may lead to the unauthorized disclosure of activ...

Acer M6E 安全漏洞

The Acer M6E is a portable 5G mobile hotspot device from Acer, a company based in Taiwan, China. The Acer M6E has a security vulnerability. This vulnerability stems from the hardcoded nature of the APK resource files, which are never expired and share credentials, potentially leading to informati...

Acer M6E 安全漏洞

The Acer M6E is a portable 5G mobile hotspot device from Acer, a company based in Taiwan, China. The Acer M6E has a security vulnerability, which stems from the FieldX MDM adb messaging topic directly passing unvalidated payloads to Runtime.exec, potentially leading to command injection...

Acer M6E 安全漏洞

The Acer M6E is a portable 5G mobile hotspot device from Acer, a company based in Taiwan, China. The Acer M6E has a security vulnerability, which stems from a weak validation logic for the device separation API routines. This vulnerability could potentially cause remote entities to forcibly unbin...

Acer M6E 安全漏洞

The Acer M6E is a portable 5G mobile hotspot device from Acer, a company based in Taiwan, China. The Acer M6E has a security vulnerability. This vulnerability stems from the lack of mandatory implementation of topic-level access control lists by the local MQTT Broker. As a result, any client that...

Acer M6E 安全漏洞

The Acer M6E is a portable 5G mobile hotspot device produced by Acer of Taiwan, China. The Acer M6E has a security vulnerability, which stems from the IDOR vulnerability in the summary service endpoint. This vulnerability fails to verify the user’s ownership of the hardware serial number,...