wpair-app

WPair CVE-2025-36911 eg WhisperPair Vulnerability Scanner & Research Tool Features • Installation • Usage • How It Works • Vulnerability • Credits Disclaimer This application is an independent implementation created by @ZalexDev in his own capacity. The original KU Leuven researchers discovered a...

CVE-2022-27254

CVE-2022-27254 PoC per la vulnerabilità nel sistema di keyless entry di Honda CVE-2022-27254 Dichiarazione di non responsabilità: Solo a scopo educativo. Si noti che gli scopritori di questa vulnerabilità sono Ayyappan Rajesh, uno studente presso UMass Dartmouth e HackingIntoYourHeart. Altri...

eWeLink-QR-Code

Applicazione mobile eWeLink - Vulnerabilità di controllo degli accessi non corretto CVE-2021-27941 L'accesso Web senza restrizioni alla chiave di crittografia privata del dispositivo nella modalità di pairing tramite codice QR nell'applicazione mobile eWeLink fino alla versione 4.9.2 su Android e...

ESPTouchCatcher

Applicazione mobile eWeLink - Vulnerabilità di Controllo Accesso Errato CVE-2020-12702 La debole crittografia nella modalità di associazione rapida nell'applicazione mobile eWeLink applicazione Android V4.9.2 e precedenti, applicazione iOS V4.9.1 e precedenti consente a aggressori fisicamente...

LTESniffer

LTESniffer - Uno strumento open-source per l'intercettazione del traffico LTE in downlink/uplink LTESniffer è uno strumento open-source per l'intercettazione del traffico LTE in downlink/uplink. Innanzitutto decodifica il Physical Downlink Control Channel PDCCH per ottenere le Downlink Control...

CVE-2026-11109-Bluetooth-Classic-KNOB-Attack-Key-Negotiation-of-Bluetooth-

CVE-2026-11109 – Attacco KNOB Bluetooth Classic Negoziazione della chiave Bluetooth Codice del programma simulazione Python root@kitploit: knobattacksim.py - Simulates negotiation of encryption key size to 1 byte import random, hashlib class BluetoothDevice: def negotiatekeysizeself, proposedsize...

CVE-2025-6792

Exploit: Unbefugtes Pusher-Kanal-Abonnement Abhören 1 Pusher-Zugangsdaten abrufen aus der Browser-Konsole root@kitploit: console.log window.wpguppyscriptsvars.pusherKey, window.wpguppyscriptsvars.pusherCluster ; 2 Privaten Kanal eines Opfers abonnieren root@kitploit: Pusher Eavesdrop Test Listeni...

TempestSDR

TempestSDR Questo progetto è un kit di strumenti software per intercettare da remoto i monitor video utilizzando un ricevitore Software Defined Radio SDR. Sfrutta le emissioni compromettenti dei cavi che trasportano segnali video. Il video raster viene solitamente trasmesso una riga di pixel alla...

TempestSDR

TempestSDR Dieses Projekt ist ein Software-Werkzeugkasten zum Fernausspähen von Videomonitoren mithilfe eines Software Defined Radio SDR-Empfängers. Es nutzt kompromittierende Abstrahlungen von Kabeln aus, die Videosignale übertragen. Rastervideo wird normalerweise eine Pixelzeile nach der andere...

BIT-DISCOURSE-2026-72726 Discourse: Unauthorized eavesdropping on private AI bot conversations.

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, an authenticated user could eavesdrop on private AI bot conversations through the AI bot reply stream. The issue is fixed in 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0...

EUVD-2026-55665

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, an authenticated user could eavesdrop on private AI bot conversations through the AI bot reply stream. The issue is fixed in 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0...

CVE-2026-72726 Discourse: Unauthorized eavesdropping on private AI bot conversations.

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, an authenticated user could eavesdrop on private AI bot conversations through the AI bot reply stream. The issue is fixed in 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0...

Investigation of STEEP for Secure Communications over SIMO and MISO Channels Subject to Full-Duplex Jamming and Eavesdropping

Secure communications over SIMO and MISO channels between wireless nodes are commonly encountered in applications and widely considered in the literature. This paper investigates such a problem by considering a newly proposed scheme called secrecy-message transmission by echoing encrypted probes...

Apple patches Beats Studio Buds flaw that could turn earbuds into a wiretap

Apple has patched a Bluetooth flaw in Beats Studio Buds that could potentially turn your earbuds into a nearby wiretap. When you buy a pair of Bluetooth earbuds, you expect them to play your music and your calls—not someone else’s. But a vulnerability in Apple’s Beats Studio Buds shows how that...

CVE-2026-34126

TP-Link has identified a vulnerability in Tapo L535E v1.0 and v3.0, Tapo P300 v1.0, and Tapo D100C v1.0, where Bluetooth communication during the initial setup phase is transmitted in cleartext without encryption. Bluetooth is only used during initialization. An attacker within the Bluetooth rang...

SUSE CVE-2026-7666

An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. django.core.mail.backends.smtp.EmailBackend in Django fails to prevent reuse of a partially-initialized connection after a failed STARTTLS handshake when failsilently=True, which allows on-path network attackers to read ema...

PYSEC-2026-200

An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. django.core.mail.backends.smtp.EmailBackend in Django fails to prevent reuse of a partially-initialized connection after a failed STARTTLS handshake when failsilently=True, which allows on-path network attackers to read ema...

CVE-2026-34126 Bluetooth Communication Uses Unencrypted Transmission During Initial Setup on TP-Link's Tapo L535E, P300 and D100C

TP-Link has identified a vulnerability in Tapo L535E v1.0 and v3.0, Tapo P300 v1.0, and Tapo D100C v1.0, where Bluetooth communication during the initial setup phase is transmitted in cleartext without encryption. Bluetooth is only used during initialization. An attacker within the Bluetooth rang...

CVE-2026-34126

Summary: CVE-2026-34126 affects TP-Link Tapo devices (L535E v1.0/v3.0, P300 v1.0, D100C v1.0). During the initialization phase, Bluetooth communication is transmitted in cleartext without encryption. A nearby attacker could exploit this via Bluetooth sniffing or man-in-the-middle to eavesdrop on ...

EUVD-2026-32969

TP-Link has identified a vulnerability in Tapo L535E v1.0 and v3.0, Tapo P300 v1.0, and Tapo D100C v1.0, where Bluetooth communication during the initial setup phase is transmitted in cleartext without encryption. Bluetooth is only used during initialization. An attacker within the Bluetooth rang...