Damn-Vulnerable-Android-Components

The Damne Vulnerable Android Components - DVAC The sieve reborn! Damn Vulnerable Android Components DVAC is an educational Android application intentionally designed to expose and demonstrate vulnerabilities related to various Android components such as Activities, Intents, Content Providers, and...

Android-Passive-Location-Tracker

Android-Passive-Location-Tracker 명시적으로 위치 권한을 요청하지 않고 위치를 추적하는 앱입니다! 브로드캐스팅 인텐트를 통해 Android OS 정보 유출을 이용하는 CVE-2018-15835를 활용합니다...

wificurse

이 프로그램은 무선 스테이션 범위 내에 있는 무선 액세스 포인트에서 전송되는 비콘을 수신합니다. 수신 후 프로그램은 AP의 BSSID를 추출하고 브로드캐스트 MAC 주소를 사용하여 비인증 패킷을 전송합니다. 이로 인해 공격 시점에 AP에 연결된 모든 클라이언트가 연결이 끊깁니다. 이는 교육 목적으로만 제작된 WiFi DoS 공격 도구입니다. Linux에서만 작동하며 무선 네트워크에 패킷을 주입할 수 있는 무선 카드 드라이버가 필요합니다. 사용 방법: 루트로 실행하고 첫 번째 인수로 카드 인터페이스를 입력하면 됩니다. 자동으로...

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

CVE-2025-63353

CVE-2025-63353 PoC - FiberHome HG6145F1 예측 가능한 기본 Wi-Fi PSK 교육 연구 툴킷 및 다국어 PoC - CVE-2025-63353 , FiberHome HG6145F1 RP4423 GPON ONT 장치에 영향을 미치는 치명적인 예측 가능 기본 PSK 취약점. 요약 영향을 받는 FiberHome HG6145F1 장치의 공장 기본 Wi-Fi 사전 공유 키PSK는 브로드캐스트 SSID의 결정적 함수입니다. 취약한 장치의 비콘 프레임을 관찰하는 공격자는 캡처된 핸드셰이크, 단어 목록, GPU ...

EUVD-2026-69024

AVideo contains a missing authentication vulnerability in plugin/Live/onpublish.php that allows unauthenticated attackers to mark arbitrary scheduled broadcasts as failed by sending crafted POST requests with schedule identifiers. Attackers can exploit the unguarded RTMP callback endpoint to modi...

CVE-2026-84187 AVideo on_publish.php Missing Authentication Check via RTMP Callback

AVideo contains a missing authentication vulnerability in plugin/Live/onpublish.php that allows unauthenticated attackers to mark arbitrary scheduled broadcasts as failed by sending crafted POST requests with schedule identifiers. Attackers can exploit the unguarded RTMP callback endpoint to modi...

asus-cmd

ASUS Router infosvr UDP Broadcast root Command Execution Diversi modelli di router ASUS includono un servizio chiamato infosvr che resta in ascolto sulla porta broadcast UDP 9999 sull'interfaccia LAN o WLAN. Viene utilizzato da uno strumento ASUS per facilitare la configurazione del router...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: mac80211 – Fix for queue selection for mesh/OCB interfaces When using iTXQ, the code assumes that there is only one vif queue for broadcast packets, using the BE queue. Allowing non-BE queue marking violates this assumption...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: XDP: Use the flags field to disambiguate broadcast redirections When redirecting a packet using XDP, the bpfredirectmap helper function sets the redirection destination information in the struct bpfredirectinfo structure using th...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Discard Beacon frames sent to non-broadcast addresses Beacon frames are required to be sent to the broadcast address. See IEEE Std 802.11-2020, 11.1.3.1: “The ‘Address 1’ field of the Beacon frame shall be set to...

UBUNTU-CVE-2026-74616

In the Linux kernel, the following vulnerability has been resolved: xdp: reject clones that overrun skbsharedinfo tailroom xdpfclone clones broadcast copies into a single page and sets framesz to PAGESIZE. xdpbuildskbfromframe later treats that page like a normal XDP frame and expects the usual...

EUVD-2026-64553

In the Linux kernel, the following vulnerability has been resolved: xdp: reject clones that overrun skbsharedinfo tailroom xdpfclone clones broadcast copies into a single page and sets framesz to PAGESIZE. xdpbuildskbfromframe later treats that page like a normal XDP frame and expects the usual...

CVE-2026-74616

CVE-2026-74616 affects the Linux kernel XDP (eXpress Data Path) subsystem. The flaw resides in xdpf_clone(), which clones broadcast copies into a single page and sets frame_sz to PAGE_SIZE. The existing size check only validates that the linear xdp_frame header, headroom, and packet data do not e...

CVE-2026-74616 xdp: reject clones that overrun skb_shared_info tailroom

In the Linux kernel, the following vulnerability has been resolved: xdp: reject clones that overrun skbsharedinfo tailroom xdpfclone clones broadcast copies into a single page and sets framesz to PAGESIZE. xdpbuildskbfromframe later treats that page like a normal XDP frame and expects the usual...

Malicious code in broadcast-graphics-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48987a1a0ccff7dce1134e1a98122cd902961ac34ba623ae0e2fef62f75fe213 The package's postinstall script runs automatically on npm install and collects host identifiers from the installer machine os.hostname, platform,...

Linux Distros Unpatched Vulnerability : CVE-2026-72116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: fix stale rx/tx ops after device removal RX: an RXSETUP update! for an existing op skipped canrxregister unconditionally, even when a concurrent...

CVE-2026-72810

SiYuan versions before v3.7.4 contain a publish-boundary bypass vulnerability in WebSocket broadcast sessions that allows anonymous readers to receive unfiltered edits. Attackers can establish a WebSocket connection to the publish surface and passively receive real-time content events including...

PT-2026-71980

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description A publish-boundary bypass exists in WebSocket broadcast sessions. This allows anonymous readers to establish a WebSocket connection to the publish surface and passively receive real-time content event...

CVE-2026-73308

Budibase CVE-2026-73308 affects the server-side automation handling prior to version 3.39.25. The issue arises in packages/server/src/api/controllers/automation.ts (and testProgress.ts) where automation test results exposed trigger.outputs.user.oauth2 and were broadcast to the app room without pr...