LANs.py

LANs.py HINWEIS Ich pflege dieses Tool nicht mehr. Ich empfehle dringend, stattdessen bettercap für ARP- und MITM-Anforderungen zu verwenden. Finde automatisch die aktivsten WLAN-Benutzer, spioniere einen von ihnen aus und/oder injiziere beliebiges HTML/JS in von ihnen besuchte Seiten. Vergiftet...

open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder

A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...

kas Persistently Disables SSH Host Key Checking

Summary kas persistently disables SSH host key checking for the invoking user when internal SSH key setup is triggered via SSHPRIVATEKEY or SSHPRIVATEKEYFILE and no user-specific SSH configuration file exists so far. When this path is used, kas creates /.ssh/config with a global Host rule...

Check-AAD-Connect-for-CVE-2021-36949-vulnerability

Lo script verificherà se la tua installazione di Azure AD Connect esegue una versione affetta dalla vulnerabilità descritta in CVE-2021-36949. Le versioni interessate sono 1.6.4.0 e 2.0.3.0. Esegui lo script sul server che ospita l'installazione di AAD Connect. Lo script verifica anche se la...

open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder

A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...

fortios-ldap-mitm-poc-CVE-2019-5591

CVE-2019-5591 Questo Proof of Concept PoC dimostra un attacco MITM Man-In-The-Middle: impersonificazione di un server LDAP sulla sottorete locale di un dispositivo FortiGate che esegue una versione vulnerabile di FortiOS. Versioni interessate Queste versioni sono vulnerabili:...

nginx: NGINX: Heap buffer over-read allows memory modification or denial of service

A vulnerability in NGINX's ngxhttpssimodule allows an unauthenticated MITM attacker to trigger a heap buffer over-read by manipulating upstream server responses. This requires SSI, proxypass, and proxybuffering off to be configured, and can result in memory modification or a Denial of Service DoS...

CVE-2020-23587

CVE-2020-23587 OPTILINK E-PON "MODELLO N.: OP-XT71000N" CON "VERSIONE HARDWARE: V2.2"; & "VERSIONE FIRMWARE: OPV3.3.1-191028" Una vulnerabilità trovata in "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" consente a un attaccante remoto non autenticato di condurre ...

sshhipot

Version 2 is under development. Please switch to the v2 branch, build, and run with -h. SSHHiPot High-interaction SSH honeypot ok, it's really a logging ssh proxy. Still more or less a work-in-progress. Feel free to go install this repository if you'd like to try it. Run it with -h to see more...

CVE-2021-37152

CVE-2021-37152 Sfrutta l'accesso ai client di rete inviando pacchetti su TP-LINK wireless e preparandosi per un attacco mitm exploit Questo exploit è progettato per accedere e scansionare i client di rete e potrai facilmente accedere e prepararti per un attacco mitm, l'exploit attaccherà ai livel...

web-mitm-lab

WebMITM Lab - Framework de Pesquisa de Segurança Python 3.x | Licença Educacional | Ver Licença ⚠️ Apenas para Fins Educacionais e Pesquisa de Segurança Autorizada 📌 Descrição WebMITM Lab é um framework educacional projetado para demonstrar conceitos de ataques Man-in-the-Middle MITM em treinament...

CVE-2025-26465

CVE-2025-26465 Il client OpenSSH contiene un errore logico tra le versioni 6.8p1 e 9.9p1 incluse che lo rende vulnerabile a un attacco MitM attivo se l'opzione VerifyHostKeyDNS è abilitata, consentendo a un intruso malintenzionato di impersonare un server legittimo quando un client tenta di...

CVE-2025-50944

CVE-2025-50944 Validazione impropria della catena di certificati nell'applicazione Android EagleEyes Lite 1. Panoramica Nome : EagleEyesLite Versione : 2.0.0 Fornitore : AVTECH CWE : CWE-295: Validazione impropria del certificato CVSS : 8.8 ALTO Stringa del vettore :...

CVE-2026-63310

NLTK (Natural Language Toolkit) versions before 3.9.3 contain a missing post-download integrity verification flaw in the downloader module . After downloading packages, the module fails to validate file integrity before extraction. An attacker positioned for a man-in-the-middle attack or performi...

CVE-2026-62243 Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass

Netty io.netty:netty-handler versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain non-extended X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable Java 25...

MITMf

MITMf Framework per attacchi Man-In-The-Middle Questo progetto non viene più aggiornato. MITMf è stato scritto per soddisfare la necessità, all'epoca, di uno strumento moderno per eseguire attacchi Man-In-The-Middle. Da allora molti altri strumenti sono stati creati per colmare questo spazio,...

CVE-2026-53583 libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, verifyservercert in src/libgit2/streams/openssl.c uses an inverted !!memcmp result in the GENIPADD...

CVE-2026-66787

In Red Hat Advanced Cluster Management for Kubernetes, the lighthouse component fails to validate IP addresses in EndpointSlice objects. A compromised spoke cluster can publish attacker-controlled IPs, causing other clusters' lighthouse DNS to resolve legitimate cross-cluster service names to mal...

CVE-2026-54481

A flaw was found in Gitea. The internal API HTTP client is configured to skip Transport Layer Security TLS certificate verification, which is an insecure practice. A remote attacker on the same network segment could exploit this vulnerability to perform man-in-the-middle MITM attacks. This allows...

CVE-2026-66787

A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with...