HosTaGe

HosTaGe - Honeypot zum Mitnehmen Copyright C 2013-2021, Universität Aalborg Dänemark und Technische Universität Darmstadt Deutschland HosTaGe ist ein leichtgewichtiger, schwach interagierender, tragbarer und generischer Honeypot für mobile Geräte, der auf die Erkennung von bösartigen, drahtlosen...

CVE-2026-58091

The implementation of this ioctl attempts to acquire locks on all channels in a sync group. If locking a channel would block, it releases the sync group list lock and sleeps. Upon reawakening, it is possible that the sync group structure is freed, but the implementation did not handle this...

Canon Devices - Authentication Bypass in Catwalk Server

Certain Canon devices manufactured in 2012 through 2020 such as imageRUNNER ADVANCE iR-ADV C5250, when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For...

VelotiSmart Wifi - Directory Traversal

VelotiSmart WiFi B-380 camera devices allow directory traversal via the uc-http service 1.0.0, as demonstrated by /../../etc/passwd on TCP port 80. id: CVE-2018-14064 info: name: VelotiSmart Wifi - Directory Traversal author: 0xAkoko severity: critical description: VelotiSmart WiFi B-380 camera...

THERE-IS-A-CVE

There is a CVE TIAC 🕵️ There is a CVE è uno strumento di pentesting che sfrutta per identificare rapidamente vulnerabilità nei dispositivi connessi a Internet. Aiuta i professionisti della sicurezza a rilevare e valutare in modo efficiente le falle di sicurezza. Inoltre, integra per la ricerca di...

rcm-modchips

Archivio RCM Bug "Modchip" Questo repository in lavorazione raccoglie una varietà di dispositivi embedded di esempio che attivano la vulnerabilità "Fusée Gelée"/"ShofEL2" CVE-2018-6242. Nulla in questo repository è pronto per l'uso pubblico...

CVE-2019-6203-PoC

CVE-2019-6203-PoC सभी Apple डिवाइसों में एक PEAP बग है जो एक हमलावर को किसी भी Apple डिवाइस iOS, macOS या tvOS को एक दुर्भावनापूर्ण एक्सेस पॉइंट से जुड़ने के लिए मजबूर करने की अनुमति देता है। यह CVE-2019-6203 के लिए एक PoC है, जो iOS 12.2, macOS 10.14.4 पर काम करता है, Kali Linux पर परीक्षण किया...

CVE-2025-24271

CVE-2025-24271 Vulnerabilidade no AirPlay expõe informações sensíveis em dispositivos Apple [email protected] https://m10.com.mx/cve-2025-24271-vulnerabilidad-en-airplay-expone-informacion-sensible-en-dispositivos-apple/ Apple confirmou que os seguintes sistemas operacionais são vulneráveis:...

iot-vuln-lab-cve-2017-17761

iot-vuln-lab-cve-2017-17761 Bildungssimulation zur Ausnutzung von Sicherheitslücken in IoT-Geräten basierend auf CVE-2017-17761...

DrayTek Vigor - Command Injection

DrayTek Gateway devices Vigor2960, Vigor300B, etc. are vulnerable to command injection via the session parameter in the /cgi-bin/mainfunction.cgi/apmcfgupload endpoint. An attacker can inject arbitrary commands and retrieve their output. id: CVE-2024-12987 info: name: DrayTek Vigor - Command...

CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser

9. CVE-2026-6789 – Overflow del buffer di stack nel parser di certificati TLS integrato Panoramica Una popolare libreria TLS leggera simulata contiene un overflow del buffer di stack durante il parsing delle estensioni Subject Alternative Name dei certificati X.509 con un campo di lunghezza...

test_avb_key

Über das Fast -Signieren von Android-Builds Einleitung Ein Fehler, der NCC-Group-Beratern gelegentlich begegnet, ist das Signieren von Android-Builds mit bekannten privaten Schlüsseln. Dies macht die Gerätehersteller und damit auch ihre Benutzer verwundbar, selbst auf Geräten, auf denen Secure Bo...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

CVE-2024-7339

CVE-2024-7339: Уязвимость утечки информации в DVR-устройствах. Exploiter — инструмент для обнаружения и эксплуатации уязвимости CVE-2024-7339 утечка информации в DVR-устройствах. Затрагивает более 400 000+ устройств, которые раскрывают информацию, такую как модель продукта, версия ядра и т.д...

androidqf

androidqf androidqf Android Quick Forensics is a portable tool to simplify the acquisition of relevant forensic data from Android devices. androidqf is intended to provide a simple and portable cross-platform utility to quickly acquire data from Android devices. It is similar in functionality to...

shodan-dorks

Shodan dorks Description: This GitHub repository provides a range of search queries, known as "dorks," for Shodan, a powerful tool used to search for Internet-connected devices. The dorks are designed to help security researchers discover potential vulnerabilities and configuration issues in...

gattacker

A Node.js package for BLE Bluetooth Low Energy Man-in-the-Middle & more. Prerequisites see: https://github.com/sandeepmistry/noble https://github.com/sandeepmistry/bleno Install root@kitploit: npm install gattacker Usage Configure Running both components Set up variables in config.env:...

vamp-forticheck

vamp-forticheck CVE-Scanner für Edge-Geräte mehrerer Anbieter — VampSecure Labs Übersicht vamp-forticheck ist ein asynchroner, nicht-destruktiver Sicherheitsscanner, der CVE-Schwachstellen bei sieben großen Netzwerk-Sicherheitsanbietern erkennt. Er führt eine strukturierte Analyse in drei Phasen...

CVE-research

CVE-research Ein Repository, das alle funktionierenden PoCs enthält, die ich für bekannte CVEs erstellt habe, sowie Details zu laufenden Forschungsarbeiten, an denen ich derzeit arbeite hauptsächlich IoT-Geräte Hinweis zu funktionierenden PoC-Exploit-Skripten/Payloads 1. Verwenden Sie die...

Clutch

Clutch Clutch è uno strumento di decrittazione iOS ad alta velocità. Clutch supporta iPhone, iPod Touch e iPad, nonché tutte le versioni iOS, i tipi di architettura e la maggior parte dei binari. Clutch è pensato solo per scopi educativi e ricerca sulla sicurezza. Clutch richiede un dispositivo i...