cloudlist

Fonctionnalités • Installation • Utilisation • Configuration • Exécution de cloudlist • Fournisseurs supportés • Bibliothèque • Rejoindre Discord Cloudlist est un outil multi-cloud permettant d'obtenir des actifs Assets depuis les fournisseurs cloud. Il est conçu pour être utilisé par l'équipe...

cosign

cosign Подписание OCI-контейнеров и других артефактов с помощью Sigstore! Cosign стремится сделать подписи невидимой инфраструктурой. Cosign поддерживает: "Бесключевое подписание" с центром сертификации Fulcio и журналом прозрачности Rekor публичного блага Sigstore по умолчанию Аппаратное и...

CVE-2022-27254

CVE-2022-27254 PoC for vulnerability in Honda's Remote Keyless SystemCVE-2022-27254 Disclaimer: For educational purposes only. Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh, a student at UMass Dartmouth and HackingIntoYourHeart. Others mentioned in this repository ar...

CVE-2022-38766

CVE-2022-38766 PoC для уязвимости в системе бесключевого доступа Renault ZOE CVE-2022-38766 Введение Companylogo AUTOCRYPT MalHyuk Обзор Эта уязвимость подняла вопрос о том, безопасны ли электромобили ZOE от RF-взлома. По этой причине был атакован реальный автомобиль ZOE, выпущенный в этом году...

SecureML

SecureAIML 🔐 Безопасность ИИ-моделей корпоративного уровня на базе OpenSSF Model Signing SecureAIML — это «Stripe для безопасности моделей»: он делает защиту ИИ-моделей корпоративного уровня доступной, удобной и готовой к продакшену для любой организации. Почему SecureAIML? В эпоху ИИ/ML...

CVE-2026-0073-Android-adbd-authentication-bypass-POC

Исследование CVE-2026-0073. Обход аутентификации, позволяющий любому атакующему с доступом к локальной сети подключиться к Android-устройству с включёнными инструментами разработчика и беспроводной отладкой или ADB через TCP. Устройство должно быть предварительно сопряжено. Протестировано и...

CVE-2025-70994

CVE-2025-70994: Weak Authentication in Yadea T5 Electric Bicycle !WARNING This repository is published strictly for educational and academic security research purposes. The information and proof-of-concept code provided here are intended to demonstrate a known cryptographic flaw CWE-1390 to assis...

CVE-2026-97898

Insecure Direct Object Reference / missing object-level authorization in the Akia keyless entry cloud service. The unlock action is relying on a client-supplied room/door identifier that is not properly authorized server-side against the authenticated guest's booking. An authenticated guest could...

EUVD-2026-86829

Insecure Direct Object Reference / missing object-level authorization in the Akia keyless entry cloud service. The unlock action is relying on a client-supplied room/door identifier that is not properly authorized server-side against the authenticated guest's booking. An authenticated guest could...

CVE-2026-97898 Broken authorization in Akia keyless entry lets an authenticated guest unlock other rooms

Insecure Direct Object Reference / missing object-level authorization in the Akia keyless entry cloud service. The unlock action is relying on a client-supplied room/door identifier that is not properly authorized server-side against the authenticated guest's booking. An authenticated guest could...

CVE-2026-97898

The Akia keyless entry cloud service contained an Insecure Direct Object Reference (IDOR) vulnerability due to missing object-level authorization. The unlock action failed to validate client-supplied room or door identifiers against the authenticated guest's specific booking on the server-side. T...

CVE-2026-97898 Broken authorization in Akia keyless entry lets an authenticated guest unlock other rooms

Insecure Direct Object Reference / missing object-level authorization in the Akia keyless entry cloud service. The unlock action is relying on a client-supplied room/door identifier that is not properly authorized server-side against the authenticated guest's booking. An authenticated guest could...

CVE-2026-97898: Missing Authorization

Insecure Direct Object Reference / missing object-level authorization in the Akia keyless entry cloud service. The unlock action is relying on a client-supplied room/door identifier that is not properly authorized server-side against the authenticated guest's booking. An authenticated guest could...

PT-2026-98458

Name of the Vulnerable Software and Affected Versions Akia keyless entry cloud service affected versions not specified Description An Insecure Direct Object Reference IDOR exists due to missing object-level authorization. The unlock action relies on a client-supplied room or door identifier that...

CVE-2026-49319

Remote Keyless Entry System RKES, using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is vulnerable to a roll-back attack against its rolling-code authentication. An attacker within RF range who records two consecutive lock or unlock transmissions from a...

CVE-2026-49319 Alps Electric Co., Ltd. R53R0 Remote Keyless Entry System (RKES) Replay Attack

Remote Keyless Entry System RKES, using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is vulnerable to a roll-back attack against its rolling-code authentication. An attacker within RF range who records two consecutive lock or unlock transmissions from a...

EUVD-2026-39417

Remote Keyless Entry System RKES, using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is vulnerable to a roll-back attack against its rolling-code authentication. An attacker within RF range who records two consecutive lock or unlock transmissions from a...

CVE-2026-49319 Alps Electric Co., Ltd. R53R0 Remote Keyless Entry System (RKES) Replay Attack

Remote Keyless Entry System RKES, using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is vulnerable to a roll-back attack against its rolling-code authentication. An attacker within RF range who records two consecutive lock or unlock transmissions from a...

CVE-2026-49319

CVE-2026-49319 concerns a roll-back attack on a Remote Keyless Entry System (RKES) using the 433 MHz key fob with FCC ID CWTR53R0 from ALPS ALPINE CO., LTD. The described vulnerability allows an attacker within RF range to record two consecutive lock/unlock transmissions and replay them to cause ...

PT-2026-52445

Name of the Vulnerable Software and Affected Versions Remote Keyless Entry System RKES using 433 MHz key fob FCC ID CWTR53R0 affected versions not specified Description The system is susceptible to a roll-back attack targeting its rolling-code authentication. An attacker within radio frequency...