LazyMesh

LazyMesh 一个支持使用OpenDHT代理作为后端的Mesh路由系统，使得节点可以通过互联网直接通信。非常早期的预alpha阶段，概念验证，可能实际上无法工作，等等。 它既适用于业余爱好/火腿（HAM）应用场景，也适用于更典型的消费/商业物联网工作，但明确不试图取代互联网，也不试图用全向天线覆盖高流量大面积区域。 它没有Meshtastic式的下一跳路由，因此得名LazyMesh。如果你想在密集区域将其用于离网类应用，可能需要定向天线和手动协调的路由ID。 聊天草图 目前这是唯一实际的应用。打开示例Arduino草图，用你的用户名和必须为强密码的秘密通道密钥进行修改。...

vallumd

vallumd このプログラムは、IPブラックリストを集中管理および配布するためのものです。 インターネット上でサーバーを運用している場合、1つ以上のブルートフォース攻撃に遭遇する可能性は非常に高いでしょう。問題ありません。fail2banをインストールすれば完了です。 しかし、複数のサーバーを運用していて、それぞれが独自のfail2banインスタンスを実行している場合、各サーバーのBanリストには異なるIPアドレスが含まれます。すべてのfail2banインスタンスで共有のBanリストがあれば便利ではないでしょうか？...

CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow

CVE-2026-2222 – MQTT Broker CONNECT 数据包堆溢出 程序代码（C + Python） root@kitploit: // mqttbrokersim.c - Simulated vulnerable MQTT broker include include include struct mqttconnect char protocolname8; uint8t protocollevel; uint8t flags; uint16t keepalive; // remaining length field misinterpreted ; void...

the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt

CVE-2026-71960 — Cudy WR3000 2.0 Mesh MQTT 代理中的硬编码 JWT 密钥 针对 Hunt-Benito 文章的 PoC 工具集 "同一把钥匙打开所有箱子：CVE-2026-71960 — Cudy 的 WR3000 Mesh MQTT 代理中的硬编码 JWT 密钥" https://www.hunt-benito.com/blog/the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt/ 与 CVE-2026-71961...

EUVD-2026-71740

No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations...

CVE-2026-79391

CVE-2026-79391 affects the MQTT service in Trueview 6.0.23.4 . The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations . No sp...

PT-2026-86252

No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations...

CVE-2026-43980 Malla: Stored XSS via Meshtastic node names in multiple frontend pages

Malla is a web analyzer for Meshtastic networks based on MQTT data. Prior to commit 4086e2b5f61615a813b70b25bc76095083552135, code names longname, shortname received via MQTT are stored in SQLite without sanitization and rendered into the DOM without escaping. Any participant on a public Meshtast...

Exploit for CVE-2026-71960

CVE-2026-71960 — Hard-coded JWT Secret in Cudy WR3000 2.0 Mesh...

CVE-2026-44725

In EMQX versions prior to 5.8.11, 5.9.3, 5.10.4, 6.0.3, 6.1.2, and 6.2.1, missing five-minute grant lifetime and SHA-256 package binding let a compromised admin/API key upload attacker-controlled Erlang code via POST /api/v5/plugins/install, achieving remote code execution. Patched in all listed ...

CVE-2026-44725 EMQX: Stale plugins allow grants amplify a compromised admin/API key to remote code execution

EMQX is a scalable and reliable MQTT broker for AI, IoT, IIoT, and connected vehicles. Prior to versions 5.8.11, 5.9.3, 5.10.4, 6.0.3, 6.1.2, and 6.2.1, the plugin-install REST API and dashboard upload accepted stale grants created with emqx ctl plugins allow because there was no five-minute gran...

CVE-2026-71961

Cudy WR3000 firmware before 2.5.24 is vulnerable: the sync_command binary passes unsanitized MQTT input to a shell sink in command.lua, allowing authenticated attackers with broker access to execute arbitrary root-level commands. CVSS 8.8 HIGH; update to firmware 2.5.24. No in-the-wild exploitati...

CVE-2026-71960 Cudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass via MQTT

Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tokens by extracting the secret from the firmware image. Attackers can use the...

EUVD-2026-62417

Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tokens by extracting the secret from the firmware image. Attackers can use the...

CVE-2026-71960 Cudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass via MQTT

Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tokens by extracting the secret from the firmware image. Attackers can use the...

RHEL 10 : yggdrasil (RHSA-2026:57126)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:57126 advisory. yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child worker...

PT-2026-78446

Name of the Vulnerable Software and Affected Versions Cudy WR3000 2.0 versions prior to 2.5.24 Description The Mosquitto MQTT broker authentication plugin contains a hard-coded JWT HMAC signing secret. This allows unauthenticated attackers to extract the secret from the firmware image and forge...

CVE-2026-73669

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker (v2.0.22) that listens on all network interfaces with anonymous access enabled and no firewall restriction. An unauthenticated attacker with network access to the bridge can read device data and control connected lights . ...

CVE-2026-73669 Signify Philips Hue Bridge Pro MQTT broker missing authentication

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with network access to the MQTT service on a vulnerable system can read data and control connected lights. Fixed in...

Philips Hue Bridge Pro

RISK EVALUATION The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...