Lucene search
+L

7 matches found

Kitploit
Kitploit
added 2026/09/16 5:11 a.m.11 views

pyrmax

pyrmax Decoder and encoder for Ubiquiti AirMAX wire-protocol frames, covering both the AC WA firmware and M XW/XM firmware series. Decode of the cleartext outer headers is driven by Kaitai Struct schemas under ksy/. The AC payload version-gated, switched on msgtype, with the deauth XOR-unmask is...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 1:48 a.m.10 views

mtk_bp

MediaTek BP firmware tools This repository contains Kaitai-based file format definitions related to MediaTek modem firmware, as well as some basic command line tools for interacting with these file types. The Kaitai IDE can also be used to interactively explore files using the Kaitai definitions...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 4:22 p.m.8 views

pyrmax

pyrmax 用于 Ubiquiti AirMAX 线协议帧的解码器和编码器,涵盖 AC(WA 固件)和 M(XW/XM 固件)系列。 解码 :明文外部头由 ksy/ 下的 Kaitai Struct 模式驱动。AC 载荷 (按版本门控,依据 msgtype 切换,带 deauth XOR 去掩码)由 ac.py 手写实现——该逻辑不适合纯解析式 Kaitai。 编码 :手写实现,与解码路径逐字段对应。 Status Variant| Decode| Encode| pcap iteration ---|---|---|--- AC| ✅ 全部 5 种 msg 类型(beacon、ass...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 2:45 a.m.14 views

Watchguard_WebUI_Unpacker

Watchguard Fireware Web UI update unpacker unpackwatchguard is a tool that unpacks this file format sysa-dl. watchguardsysadl.ksy contains Kaitai description of Watchguard Fireware web update file format. Info This update format is used by WatchGuard Firebox firewalls. The unpacker has been teste...

5.8AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2026/06/12 9:02 p.m.27 views

ConnectBot SSH Client Library: Unbounded SSH field lengths can cause excessive memory allocation

Summary The SSH protocol parser trusted attacker-controlled length and count fields without first checking that the declared values fit within the containing packet. When a client connects to a malicious or compromised SSH server, the server can send a small, malformed packet containing an inner...

5.5AI score
SaveExploits0References3Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/08/04 6:14 a.m.8 views

Kaitai Struct: compiler vulnerable to denial-of-service (DoS)

Overview Kaitai Struct: compiler provided by Kaitai team contains SnakeYAML library version 1.25, which is used in parsing .ksy files. SnakeYAML version 1.25 expands recursive aliases unlimitedly CWE-674, hence Katai Struct: compiler is vulnerable to a denial-of-service DoS attack by Billion Laug...

7.5CVSS8.5AI score0.26723EPSS
SaveExploits1References7
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/08/04 12:00 a.m.80 views

JVN#42883072: Kaitai Struct: compiler vulnerable to denial-of-service (DoS)

Kaitai Struct: compiler provided by Kaitai team contains SnakeYAML library version 1.25, which is used in parsing .ksy files. SnakeYAML version 1.25 expands recursive aliases unlimitedly CWE-674, hence Katai Struct: compiler is vulnerable to a denial-of-service DoS attack by Billion Laughs Attack...

7.5CVSS7.3AI score0.26723EPSS
SaveExploits1
Rows per page
Query Builder