rufus

Rufus: The Reliable USB Formatting Utility Rufus is a utility that helps format and create bootable USB flash drives. Features Format USB, flash card and virtual drives to FAT/FAT32/NTFS/UDF/exFAT/ReFS/ext2/ext3 Create DOS bootable USB drives using FreeDOS or MS-DOS Create BIOS or UEFI bootable...

tiuku

Tiuku Tiuku is a tool for scanning various kinds of systems and environments for security related information and displaying the results in a browser-based user interface. It can also detect and highlight some issues automatically. Both the data collection scripts and the user interface can be...

QRExfil

QRExfiltrate This tool is a command line utility that allows you to convert any binary file into a QRcode GIF. The data can then be reassembled visually allowing exfiltration of data in air gapped systems. It was designed as a proof of concept to demonstrate weaknesses in DLP software; that is, t...

BlueBunny

C2 solution that communicates directly over Bluetooth-Low-Energy with your Bash Bunny Mark II. Send your Bash Bunny all the instructions it needs just over the air. Table of contents Overview Installation & Start Manual communication with the Bash Bunny through Python Troubleshooting Working on...

nexus-os

Nexus OS The Governed Agentic AI Operating System 66 Crates | 675 Commands | 86 Pages | 5,229 Tests | 10/10 OWASP | Zero Stubs Local-first. Air-gappable. Post-quantum ready. Built in Rust. Architecture | Quick Start | Features | Audit Status | Docs Nexus OS is an AI agent operating system where...

CVE-2025-26686-poc-A-critical-RCE-vulnerability-in-Windows-TCP-IP-stack

This PoC has been validated in a controlled, air-gapped environment. Sensitive exploit details have been removed cut — contact the maintainer for access if you have written authorization...

DLPwn

DLPwn Data Leak Prevention via Bluetooth Speaker DLPwn is a Red Team tool designed for file exfiltration to bypass security systems such as EDR Endpoint Detection and Response, XDR Extended Detection and Response, DLP Data Loss Prevention, and more broadly any air-gapped information systems. It...

ONUS

ONUS - Automated Vulnerability Assessment & Penetration Testing Built by maverickaayush. A locally-hosted, air-gapped VAPT tool: point it at an authorized target domain and it runs 8 scanning modules in parallel, deterministically scores every finding CVSS v3.1, optionally adds AI-generated...

NextPass

🚀 NextPass The Privacy-Centric AI Password Dictionary Generator. Next Pass is a specialized password dictionary generator that uses both the rule-based logic and Large Language Models to generate passwords. Designed for security researchers, it offers offline generation to generate a password...

CVE-2026-86556

There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can exploit the vulnerability to obtain relevant information...

EUVD-2026-89572

There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can exploit the vulnerability to obtain relevant information...

CVE-2026-86556

The ZTE U30 Air product is affected by an information disclosure vulnerability caused by improper permission control . Attackers can exploit this flaw to obtain relevant information from the device. The vulnerability has a CVSS 3.1 base score of 5.3 (Medium) . No specific details regarding the af...

CVE-2026-86556 An information disclosure vulnerability in ZTE U30 Air product

There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can exploit the vulnerability to obtain relevant information...

CVE-2026-86556 An information disclosure vulnerability in ZTE U30 Air product

There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can exploit the vulnerability to obtain relevant information...

PT-2026-103006

There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can exploit the vulnerability to obtain relevant information...

CVE-2026-86556: Improper Privilege Management

There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can exploit the vulnerability to obtain relevant information...

Astra Linux – Vulnerability in Linux, Linux 5.10

“Specifically timed and handcrafted traffic can cause internal errors in a WLAN device, leading to improper Layer 2 Wi-Fi encryption. This may result in information disclosure over the air for a specific set of traffic.” In Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon...

Malicious code in @aircanada/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 356e229b0e7aa4523c4bd61f176ee40d5e20a3d897bac1821057ffefc969ec12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-19787

A vulnerability was determined in SourceCodester Air Cargo Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=savecargotype. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-19787

The CVE-2026-19787 affects SourceCodester Air Cargo Management System 1.0. The vulnerability is an SQL injection via manipulation of the argument ID in the file /classes/Master.php?f=save_cargo_type, which can be triggered remotely. Public exploit information exists. This entry documents the affe...