esp32_esp8266_attacks

ESP32/ESP8266 Wi-Fi 攻击 本仓库是ASSET 研究组 的研究成果的一部分。 本仓库演示了针对流行的 ESP32/8266 IoT 设备的 3 种 Wi-Fi 攻击： Zero PMK 安装 CVE-2019-12587 - 劫持连接到企业网络的 ESP32/ESP8266 客户端； ESP32/ESP8266 EAP 客户端崩溃 CVE-2019-12586 - 使连接到企业网络的 ESP 设备崩溃； ESP8266 信标帧崩溃 CVE-2019-12588 - 使 ESP8266 Wi-Fi 设备崩溃。...

CVE-2026-46416 Microsoft UFO shared WebSocket handler state causes cross-client response hijacking

Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO creates one shared UFOWebSocketHandler instance and reuses it for multiple authenticated WebSocket connections. The handler stores per-connection protocol objects in...

CVE-2026-46416

Microsoft UFO (open-source framework for intelligent automation) in version 3.0.1-4-ge2626659 uses a single shared UFOWebSocketHandler instance for multiple authenticated WebSocket connections. The handler caches per-connection protocol objects in mutable fields, and each new connection overwrite...

CVE-2023-53959 FileZilla Client 3.63.1 DLL Hijacking via Missing TextShaping.dll

FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory. Attackers can generate a reverse shell payload using msfvenom and replace the missing DLL to achieve remote code...