MITMer

MITMer 이 도구는 다음을 수행할 수 있습니다: 특정 호스트 또는 모든 LAN 호스트에 대한 MITM 공격. 공격 대상 호스트의 HTTP 및 DNS 활동 표시. 웹사이트에 대한 DNS 쿼리를 드롭하고 PC로 리디렉션합니다. 해당 웹사이트를 가짜 페이지로 변환하고 PC에서 호스팅합니다. 의존성: python2 scapy python2-nfqueue 예시: 모든 호스트를 공격하고 HTTP 트래픽을 표시하며 www.somewebsite.com에 대한 가짜 페이지를 생성합니다: sudo ./mitmer.py -http -dname...

gardyn-hack

요약 2025년 2월, 저는 Gardyn Home 4.0 장치에 대한 보안 연구를 수행했습니다. 연구 과정에서 여러 취약점과 취약한 보안 관행을 발견했습니다. 이러한 취약점을 악용하면 공격자가 Gardyn 장치에 대한 시스템 수준 접근 권한을 획득하고, 이를 사용하여 장치가 연결된 로컬 영역 네트워크에 대한 추가 공격을 준비할 수 있습니다. 또한 공격자는 이 접근 권한을 사용하여 장치의 정상적인 작동에 영향을 미칠 수 있으며, 여기에는 장치에서 재배 중인 식물과 장치 자체의 손상도 포함됩니다. 이 저장소에는 Gardyn 수경 ...

CVE-2026-82936

The mH-DEVELOPER smart home module is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled resource consumption. The Express bodyParser is configured with a 250 MB limit for JSON and URL-encoded request bodies, allowing an attacker on the LAN to send large request bodies that exh...

EUVD-2026-88234

mH-DEVELOPER smart home module is vulnerable to Denial of Service due to uncontrolled resource consumption. The Express bodyParser is configured with a 250 MB limit for JSON and URL-encoded request bodies. An authenticated attacker on the LAN can send large request bodies that exhausts buffers in...

EUVD-2026-88230

mH-DEVELOPER smart home module does not verify tokens in its authorization middleware, leaving all HTTP API and WebSocket endpoints accessible without authentication. An unauthenticated attacker on the LAN can query these endpoints, access system information, and send raw control commands to...

CVE-2026-82930 Missing Authentication in mH-DEVELOPER

mH-DEVELOPER smart home module does not verify tokens in its authorization middleware, leaving all HTTP API and WebSocket endpoints accessible without authentication. An unauthenticated attacker on the LAN can query these endpoints, access system information, and send raw control commands to...

CVE-2026-44830

Nocturne Memory is a lightweight, rollbackable, and visual Long-Term Memory Server for MCP Agents. Prior to 2.4.1, when APITOKEN is unset or empty, the BearerTokenAuthMiddleware bypasses authentication for all HTTP requests. Combined with the default 0.0.0.0 host binding and CORS alloworigins="",...

CVE-2026-36539: Exposure of Sensitive Information to an Unauthorized Actor

Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skkget.cgi that returns the entire router configuration as a JSON response with no authentication required. Any attacker on the LAN can send a single HTTP GET request and instantly retrieve administrator credentials, WiFi...

CVE-2026-7161: Reliance on Security Through Obscurity

An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to credentials leak. An attacker can listen to broadcast messages to trigger this vulnerability. When interacting with variou...

CVE-2026-42363: Reliance on Security Through Obscurity

An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to credentials leak. An attacker can listen to broadcast messages to trigger this vulnerability. When interacting with variou...

CVE-2026-32617: Permissive Cross-domain Policy with Untrusted Domains

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, On default installations where no password or API key has been configured, all HTTP endpoints and the agent WebSocket lack authentication, and the...

CVE-2026-0406

The CVE refers to CVE-2026-0406 affecting NETGEAR XR1000v2, where insufficient input validation allows attackers on the LAN to perform OS command injections. Affected component is the device firmware’s handling of inputs that leads to command execution; root cause is input validation weakness. Do...

CVE-2025-66177

CVE-2025-66177 describes a stack overflow vulnerability in Hikvision NVR/DVR/CVR/IPC devices’ Search and Discovery feature. An attacker on the same LAN could cause a device to malfunction by sending specially crafted packets to an unpatched device. Connected sources corroborate a Hikvision stack-...

CVE-2026-0406: Improper Input Validation

An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections...

CVE-2026-0403: Improper Input Validation

An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections...

EUVD-2020-29951

Malware in sbrugna...

EUVD-2022-31220

Malicious code in bioql PyPI...

CVE-2025-51381: Authentication Bypass Using an Alternate Path or Channel

An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier. If this vulnerability is exploited, an attacker may bypass the authentication of the product from within the LAN to which the product is connected...

CVE-2020-9122

Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause service abnormal on affected devices.Affected product versions include:HiRouter-CD30-10 version 10.0.2.5;HiRouter-CT31-10 version 10.0.2.20;WS5200-12 version...

CVE-2023-6397

A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG FLEX series firmware versions from 4.50 through 5.37 Patch 1 could allow a LAN-based attacker to cause denial-of-service DoS conditions by downloading a crafted RAR compressed fil...