CVE-2026-84399

The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the client connection that established it, and subsequent privileged operations rely on possession o...

CVE-2026-77967

The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshness or association with the requesting client. An unauthenticated attacker with adjacent network access who captures a valid authentication value could replay it from another clie...

AgrusScanner

Agrus Scanner Network reconnaissance tool with deep AI/ML service detection. Scans your network to discover hosts, open ports, and identifies AI services running across your infrastructure. Built for security teams, IT admins, and researchers who need visibility into shadow AI, rogue LLM...

CVE-2026-77967

The Botslab G980H dash camera firmware is vulnerable to an authentication bypass due to a lack of freshness verification or client association checks for authentication values. An unauthenticated attacker with adjacent network access can capture a valid authentication value and perform a capture-...

EUVD-2026-86450

The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could potentially determine a valid session...

CVE-2026-85496 Botslab G980H Dashcams Generation of Predictable Numbers or Identifiers

The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could potentially determine a valid session...

CVE-2026-82566

The Botslab G980H dash camera firmware is vulnerable to an insufficient session expiration flaw. The root cause is a session management defect where an authentication state remains valid even after a client connection is terminated or replaced. Specifically, a new connection may displace an exist...

EUVD-2026-86447

The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established connection can displace an existing...

CVE-2026-82566 Botslab G980H Dashcams Insufficient session expiration

The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established connection can displace an existing...

CVE-2026-84399 Botslab G980H Dashcams Incorrect Authorization

The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the client connection that established it, and subsequent privileged operations rely on possession o...

EUVD-2026-86412

The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the client connection that established it, and subsequent privileged operations rely on possession o...

CVE-2026-84399

The Botslab G980H dash camera firmware contains an authorization vulnerability within its session-based command functionality. The root cause is the product's failure to sufficiently associate an authenticated session with the specific client connection that established it. Because subsequent pri...

CVE-2026-82157

Dell ThinOS 10, versions prior to SecurityAddon2605.10.2766T10, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Protection mechanism bypass and Unauthorized access...

TATS

TATS — Token Analysis and Tracking System キャプチャしたネットワークトラフィック全体にわたって OAuth 2.0、OIDC、および Microsoft Entra ID トークンを追跡します。Burp Suite の XML エクスポート、mitmproxy フローファイル、またはライブの Chrome DevTools Protocol ストリームを単一の SQLite データベースに取り込み、トークンのフィルタリング、交換の追跡、リスクの高いスコープの特定、リプレイ用のトークンエクスポート、トークンライフサイクルの Mermaid...

CVE-2026-62201-OpenClaw-SSRF

CVE-2026-62201 — OpenClaw サンドボックス Exec-Server ネットワークポリシーバイパス（SSRF） 深刻度: 高 · CVSS: 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N · CWE-918（サーバーサイドリクエストフォージェリ） 脆弱性の概要...

w12scan-client

w12scan-client 网络资产搜索发现引擎,大规模资产识别，毕业设计，w12scan 客户端程序 设计思想 client的思想是接收到哪些数据url,ip就只会跑这些，不会根据url 301自动跳转走，也不会根据url来扫描ip。这些事情是需要在添加目标到client之前做的，例如添加http://url 以及 https://url 以及对应的ip，这样w12scan会根据相关内容进行聚合分析。 配置说明...

CVE-2026-0073-Android-adbd-authentication-bypass-POC

CVE-2026-0073に関する調査。ローカルネットワークアクセスを持つ任意の攻撃者が、開発者ツールとワイヤレスデバッグまたはADB-over-TCPが有効なAndroidデバイスに接続できるようにする認証バイパス。デバイスは事前にペアリングされている必要があります。 これはAndroid StudioのAndroid 14で動作確認済みです。他のバージョンでも動作するはずですが、悪用可能性は異なる場合があります。...

CVE-2026-0073-Android-ADBD-bypass-POC

CVE-2026-0073 — Android ADBD TLS 認証バイパス EVPPKEYcmp 型混同 → 不正な ADB シェル 🔥 概要 Android の ADB デーモン（adbd）における重大な認証バイパス により、ローカルネットワーク上の任意の攻撃者がユーザー認証なしで 対象デバイス上で完全なシェル を取得できます。 この脆弱性は daemon/auth.cpp 内の adbdtlsverifycert に存在し、EVPPKEYcmp がブール値として使用されています。保存された鍵が RSA で、提示された TLS クライアント証明書が 非 RSA 鍵 （EC P-25...

nl-kat-coordination

================ What is OpenKAT? OpenKAT aims to monitor, record and analyze the status of information systems. The basic premise is that many of the major security incidents are caused by small errors and known vulnerabilities, and if you find them and resolve them in time your systems and...

NINJA-PingU

NINJA PingU NINJA-PingU Is Not Just a Ping Utility（NINJA-PingUは単なるPingユーティリティではありません）は、大規模な解析のための無料のオープンソース高性能ネットワークスキャナツールです。パフォーマンスを第一の目標として設計され、簡単なプラグイン作成を可能にするフレームワークとして開発されました。 NINJA PingUには、サービス分析と組み込みデバイス識別のためのプラグイン一式が標準で同梱されています。詳細については、ホームページ http://owasp.github.io/NINJA-PingU をご覧ください。 要...