CVE-2026-105222

The alexpechkarev/google-maps Laravel package, through version 12.16 , is vulnerable to a Disabled TLS Certificate Verification flaw. The bundled configuration sets ssl_verify_peer to FALSE , which is then passed to CURLOPT_SSL_VERIFYPEER. This allows on-path attackers to present arbitrary certif...

CVE-2025-32407

CVE-2025-32407 Proof of concept for CVE-2025-32407: a misconfiguration in the TLS certificate validation of the Samsung Galaxy Watch app "Samsung Internet for Galaxy Watch" version 5.0.9. Description The Galaxy Watch app "Samsung Internet for Galaxy Watch" version 5.0.9, available up until Samsun...

SpiMitm

+OPTIONS: ^: SpiMitm - SPI flash read MitM attack PoC for anti-firmware forensics This PoC is focused on https://up-board.org/upsquared/specifications/UP Squared. How to use Follow Alan Sguigna's build process explained...

CVE-2026-105218 gopay before 1.5.119 Disabled TLS Certificate Verification in xhttp Client

gopay before 1.5.119 disables TLS certificate verification in defaultClient in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate payment provider APIs. Attackers can present any certificate to read merchant credentials, signatures and transaction data, and modify payment,...

Exploit-Writeups

This is a collection of exploit writeups that I've authored: PS3 lv0ldr SPI MITM...

CVE-2025-50110

CVE-2025-50110 Cleartext Transmission of Sensitive Information in EagleEyes Lite Android Application 1. Overview Name : EagleEyesLite Version : 2.0.0 Vendor : AVTECH CWE : CWE-319: Cleartext Transmission of Sensitive Information, CWE-598: Use of GET Request Method With Sensitive Query Strings CVS...

PacketPirate

PacketPirate A headless , scriptable, command-line based MITM proxy designed for network traffic interception, analysis, and modification on Windows systems. It operates similarly to industry-standard GUI proxies but is optimized for automation environments, headless operation, and integration wi...

evillcode

🔥 Evillcode - Modular MITM Framework Modular cybersecurity framework developed in Python for analysis, monitoring, and simulation of MITM attacks in local networks. It allows students and professionals to understand the inner workings of networks, protocols, and vulnerabilities in controlled...

PT-2026-104647

gopay before 1.5.119 disables TLS certificate verification in defaultClient in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate payment provider APIs. Attackers can present any certificate to read merchant credentials, signatures and transaction data, and modify payment,...

CVE-2026-100835

CVE-2026-100835 — Ретрансляция аттестации Contrast aTLS Python 3 PoC для CVE-2026-100835 — Edgeless SystemsContrast до версии 1.16.0. Описание PoCbit / GitHub CVE-2026-100835 — Ретрансляция удалённой аттестации против Contrast аттестованного TLS aTLS CWE-295. До версии 1.16.0 Contrast считал любо...

CVE-2019-14222

CVE-2019-14222: Default Certificate in Alfresco Community Alfresco Community 5.x and below ships by default with a set of known private certificates. Anyone who downloads and installs the Alfresco Community software on a local machine gets access to these files. Once obtained, these private keys...

MAL-008

MAL-008: SSHtranger Things CVE-2019-6111, CVE-2019-6110 in Cisco SD-WAN Cisco SD-WAN v20.4.2.1 uses an old version of SSH OpenSSH7.6p1 that is susceptible to the “SSHtranger Things” attack. If a victim tries to connect to a malicious/compromised SSH server this attack may be used to write/overwri...

CVE-2025-26199

🛡️ CVE-2025-26199 — Insecure Password Transmission via Cleartext in CloudClassroom-PHP-Project v1.0 📄 Description CloudClassroom-PHP-Project v1.0 is vulnerable to insecure transmission of user credentials. During the authentication process, passwords are submitted over unencrypted HTTP rather than...

cve-2026-19553-wrap-bio

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cve-2026-19553-wrap-bio cve-2026-19553-wrap-bio CPython ssl — Python Software Foundation ssl.SSLContext.wrapbio не требовал, чтобы serverhostname был не-None, когда установлен checkhostname. SSLObject молча пропускает...

challenge_CVE-2020-13777

Chanllenge CVE-2020-13777 Try to prove if TLS 1.3 MITM is possible and decrypt 0-RTT early data in pcap here Server: 192.168.100.23:5556. See https://jovi0608.hatenablog.com/entry/2020/06/13/104905 and CVE-2020-13777 for details...

web-mitm-lab

WebMITM Lab - Security Research Framework Python 3.x | Educational License | View License ⚠️ For Educational Purposes and Authorized Security Research Only 📌 Description WebMITM Lab is an educational framework designed to demonstrate Man-in-the-Middle MITM attack concepts in cybersecurity training...

RITM

RITM This is a Python implementation of the man-in-the-middle attack described by Charlie Clark @exploitph in his post, New Attack Paths? AS Requested Service Tickets, and demonstrated in his proof-of-concept, Roast in the Middle. In short, this tool: 1. Performs ARP spoofing between your targets...

CVE-2026-67598

CVE-2026-67598 Emlog Pro — Disabled TLS Certificate Validation in the AI Assistant Network-adjacent MITM → LLM-provider API-key theft & AI-response injection Summary · Attack Flow · Affected Code · Proof · Remediation · Timeline · References 📋 At a glance | ---|--- CVE ID| CVE-2026-67598 Product|...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

arpy

Arpy Arpy est un outil MiTM par usurpation ARP facile à utiliser pour Mac. Il propose 3 fonctions ciblées : Sniffing de paquets Domaines visités Domaines visités avec Gource Chaque fonction sera expliquée ci-dessous. Systèmes d'exploitation testés à ce jour Darwin 14.3.0 Darwin Kernel Version...