btlejuice

BtleJuice 프레임워크 소개 BtleJuice는 Bluetooth Smart 기기Bluetooth Low Energy라고도 함에 대한 중간자 공격MITM을 수행하는 완전한 프레임워크입니다. 다음 구성 요소로 이루어져 있습니다: 차단 코어 차단 프록시 전용 웹 인터페이스 Python 및 Node.js 바인딩 BtleJuice 설치 방법? BtleJuice 설치는 아주 쉽습니다. 먼저 시스템에서 최신 버전의 Node.js =4.3.2와 npm 을 사용 중인지 확인하세요. 그런 다음 필요한 모든 종속성을 설치합니다:...

CVE-2026-103098

The GV-Eye software is vulnerable to sensitive information exposure due to the transmission of a sensitive key within the URL query parameter over an unencrypted HTTP connection. Because the request is sent in plaintext rather than via HTTPS, an attacker capable of monitoring network traffic can ...

CVE-2026-105051: Use of Less Trusted Source

Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel...

PT-2026-104454

Name of the Vulnerable Software and Affected Versions Denuvo Anti-Tamper versions prior to 2026-03-04 Description The software allows a bypass of the hypervisor presence check. This is achieved through CPUID interception, affecting SimpleSvm.sys on AMD systems and hyperkd.sys and hyperhv.dll on...

PT-2026-104063

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A sensitive key is transmitted in the URL over an unencrypted HTTP connection. Because the request uses HTTP instead of HTTPS, the key is sent in plaintext acro...

DatajackProxy

Datajack Proxy Datajack Proxy — это инструмент для перехвата не-HTTP трафика между нативным приложением и сервером. Это позволяет перехватывать и модифицировать коммуникации, даже если используются шифрование и пиннинг сертификатов. Реализуется путём хукинга приложения и перехвата вызовов к...

CVE-2024-3094

CVE-2024-3094 В upstream-тарболах xz, начиная с версии 5.6.0, был обнаружен вредоносный код. В ходе серии сложных обфускаций процесс сборки liblzma извлекает предварительно собранный объектный файл из замаскированного тестового файла, находящегося в исходном коде, который затем используется для...

CVE-2026-55396 Unencrypted UDP Control Traffic in Teledyne FLIR Robots running Aware2

Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows adjacent unauthenticated attackers to intercept, hijack, or modify control traffic against Teledyne FLIR...

CVE-2026-55396

The Teledyne FLIR Aware2 software, specifically in versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) , is vulnerable to the cleartext transmission of UDP traffic from the operator control unit to the robot. Because this traffic lacks a cryptographic integrity check , adjacent unauthenticat...

CVE-2026-55394 Unencrypted 802.11 Network in Teledyne FLIR Robots running Aware2

Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows adjacent unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic...

CVE-2026-102669

The Joyland AI app is vulnerable to a security flaw because it does not verify hostnames . This improper validation of certificates with host mismatches (CWE-297) allows a malicious host to establish a connection or intercept chat messages . No specific exploit information or remediation details ...

EUVD-2026-91028

Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages...

ldap-swak

LDAP スイスアーミーナイフ 多機能LDAPサーバーユーティリティです。 テスト目的のLDAPサーバーをすばやくセットアップしたり、平文を傍受したりNTLM資格情報を転送するためのMitMプロキシ、あるいはさまざまなJava JNDI/LDAPクライアントの脆弱性を悪用するためのツールです。 著者: Moritz Bechler [email protected] プロジェクトリポジトリ: https://github.com/SySS-Research/ldap-swak ビルド Mavenが必要です。 mvn package verify -...

hooker

Hooker: 안드로이드 애플리케이션의 자동 동적 분석 Hooker 소개 기능 설명 Hooker는 안드로이드 애플리케이션의 동적 분석을 위한 오픈소스 프로젝트입니다. 이 프로젝트는 대상 애플리케이션이 수행하는 모든 API 호출을 자동으로 가로채고 수정하는 데 사용할 수 있는 다양한 도구와 애플리케이션을 제공합니다. Android Substrate 프레임워크를 활용하여 이러한 호출을 가로채고 모든 컨텍스트 정보매개변수, 반환 값 등를 집계합니다. 수집된 정보는 ElasticSearch 또는 JSON 파일에 저장할 수 있습니다. ...

CVE-2026-25961-SumatraPDF-3.5.0---3.5.2-RCE

SumatraPDF 안전하지 않은 업데이트 PoC CVE-2026-25961 – 악성 업데이트 서버를 통한 원격 코드 실행 작성자: Mohammed Idrees Banyamer 날짜: 2026년 2월 CVE: CVE-2026-25961 GHSA: GHSA-xpm2-rr5m-x96q CVSS v3.1: 7.5 높음 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 영향을 받는 버전: SumatraPDF 3.5.0 – 3.5.2 테스트 환경: Windows 10 / Windows 11 취약점 SumatraPDF...

CVE-2026-22011-iOS-MDM-Profile-Delivery-over-HTTP

CVE-2026-22011 – HTTP를 통한 iOS MDM 프로필 전달 프로그램 코드Python Flask MDM 서버 mdmserver.py - Serves enrollment profile over plain HTTP from flask import Flask, sendfile app = Flaskname @app.route'/enroll.mobileconfig' def serveprofile: Vulnerability: profile delivered without HTTPS return...

DNSSpoof

DNSSpoof Инструмент для подмены DNS, написанный на Python3. Как использовать? usage: dnsspoof.py -h -d DOMAIN -i INTERFACE -t TARGET -r IP optional arguments: -h, --help show this help message and exit -d DOMAIN Domain to spoof default: all -i INTERFACE Interface to listen on default: default -t...

CVE-2026-66249

iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections, enabling the unauthorized extraction of sensitive information such as session identifiers...

CVE-2026-66249

The HCL iControl application is affected by a Missing Secure Attribute vulnerability. This flaw could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections , potentially leading to the unauthorized extraction of sensitive information, such as session identifiers . N...

EUVD-2026-90816

iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections, enabling the unauthorized extraction of sensitive information such as session identifiers...