61 matches found
CVE-2024-3400
CVE-2024-3400 Detección de dispositivos Palo Alto vulnerables a CVE-2024-3400. root@kitploit: options: -h, --help show this help message and exit -r IP, --ip IP IP address for single request -R FILE, --file FILE File path containing list of IP addresses...
FuegoTest
FuegoTest FuegoTest 是一款命令行界面（CLI）工具，旨在检测 Cisco Firepower Management Center（FMC）中可能受 CVE-2023-20048 影响的设备。借助 rich 库，FuegoTest 提供了增强的用户体验，包括进度条和样式化文本的终端输出。 功能特性 使用提供的凭据对 Cisco FMC 进行身份验证。 获取并列出 FMC 管理的设备。 检测可能受 CVE-2023-20048 影响的设备。 终端输出增强：进度条和样式化文本。 前提条件 在开始之前，请确保满足以下要求： Python 3.6 或更高版本 用于安装依赖项的...
bleah
This repository is DEPRECATED, please usebettercap as this tool has been ported to its BLE modules...
UPnP-Pentest-Toolkit
UPnP Pentest Toolkit Esta herramienta tiene como objetivo reunir una serie de funcionalidades de evaluación de UPnP, permitiendo una evaluación rápida con una configuración y preparación mínimas. Ha sido desarrollada para ayudar a consultores de seguridad a explorar, suplantar y manipular...
CVE-2026-80642
In the Linux kernel, the following vulnerability has been resolved: liveupdate: Reference count incoming FLB data Increment the incoming FLB refcount in liveupdateflbgetincoming so that the FLB structure cannot be freed while the caller is actively using it. Add an additional...
CVE-2026-80642 liveupdate: Reference count incoming FLB data
In the Linux kernel, the following vulnerability has been resolved: liveupdate: Reference count incoming FLB data Increment the incoming FLB refcount in liveupdateflbgetincoming so that the FLB structure cannot be freed while the caller is actively using it. Add an additional...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: bus: fsl-mc: Do not assume that child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as a child of fsl-mc devices, resulting in a crash when attempting to bind a fsl-mc device to VFIO. This...
CVE-2026-12052 Out-of-bounds write in USB CDC NCM control handler when host wLength is smaller than the response
The USB device-side CDC NCM class control-to-host handler usbdcdcncmcth in subsys/usb/devicenext/class/usbdcdcncm.c builds a fixed-size response for the GETNTBPARAMETERS 28-byte struct ntbparameters and GETNTBINPUTSIZE 8-byte struct ntbinputsize class requests and copies the whole structure into...
PT-2026-61979
The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET Private Endpoint Token to enumerate devices and remove offline devices from an Apple ID account without triggering two-factor authentication or ownership verification. This may result in...
CVE-2026-49186
The local MQTT broker does not enforce topic-level Access Control Lists ACLs. This allows any client to subscribe using wildcard characters or + to enumerate hidden network devices or publish rogue control commands...
EUVD-2026-34200
The local MQTT broker does not enforce topic-level Access Control Lists ACLs. This allows any client to subscribe using wildcard characters or + to enumerate hidden network devices or publish rogue control commands...
CVE-2026-49186
The local MQTT broker does not enforce topic-level Access Control Lists ACLs. This allows any client to subscribe using wildcard characters or + to enumerate hidden network devices or publish rogue control commands...
CVE-2026-49186 Lack of MQTT Broker Topic Access Control Lists
The local MQTT broker does not enforce topic-level Access Control Lists ACLs. This allows any client to subscribe using wildcard characters or + to enumerate hidden network devices or publish rogue control commands...
CVE-2026-35064
A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and management interfaces without requiring credentials. Because discovery functions are...
PT-2026-34806
A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and management interfaces without requiring credentials. Because discovery functions are...
SenseLive X3050 访问控制错误漏洞
The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a access control vulnerability, which stems from the exposure of management protocols via the discovery function. This vulnerability could allo...
📄 Spectrum ANOG Device Credential Extraction / Command Injection
This Metasploit auxiliary module targets Spectrum/ANOG devices and combines credential extraction, password decryption, and remote command execution through an authenticated command injection flaw...
EUVD-2025-8957
Malicious code in bioql PyPI...