Auto_EAP

AutoEAP 소개 2016년 9월 15일 게시됨 AutoEAP.py는 다양한 유형의 EAP 네트워크에 대해 자동화된 무차별 대입 인증 공격을 수행하도록 설계된 스크립트입니다. 이러한 유형의 무선 네트워크는 RADIUS 서버가 Active Directory에 대해 인증을 확인할 때 도메인 자격 증명의 비밀번호 추측을 용이하게 하는 인터페이스를 제공합니다. Jouni Malinen [email protected]가 만든 python 라이브러리 wpaspy를 사용하여 wpasupplicant 데몬과 상호 작용함으로써 계정...

CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

DEBIAN-CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

AZL-100034 CVE-2026-78134 affecting package strongswan 5.9.14-10

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

CVE-2026-78134

strongSwan versions 4.5.0 through 6.0.7 contain an Incorrect Access Control vulnerability in the eap-ttls and eap-peap plugins caused by missing or mismatched inner EAP identity authentication details. This can result in incorrect identity binding and a potential authorization bypass . The CVSS 3...

CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

EUVD-2026-75920

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

PT-2026-89740

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

CVE-2019-6203-PoC

CVE-2019-6203-PoC 所有 Apple 设备中都存在一个 PEAP 漏洞，攻击者可利用该漏洞强制任意 Apple 设备（iOS、macOS 或 tvOS）关联到恶意接入点。 这是 CVE-2019-6203 的 PoC，适用于 iOS 12.2、macOS 10.14.4，已在 Kali Linux 上测试。 你需要一张支持 AP 模式 的 Wi-Fi 网卡来运行此 PoC。你可以通过运行 iw list 来检查，输出类似： root@kitploit: Supported interface modes: IBSS managed AP AP/VLAN monitor...

EUVD-2008-1122

Malware in sbrugna...

EUVD-2023-40012

Malicious code in bioql PyPI...

EUVD-2023-25858

Malicious code in bioql PyPI...

EUVD-2023-25868

Malicious code in bioql PyPI...

NewStart CGSL MAIN 7.02 : wpa_supplicant Vulnerability (NS-SA-2025-0181)

The remote NewStart CGSL host, running version MAIN 7.02, has wpasupplicant packages installed that are affected by a vulnerability: - The implementation of PEAP in wpasupplicant through 2.10 allows authentication bypass. For a successful attack, wpasupplicant must be configured to not verify the...

NewStart CGSL MAIN 7.02 : wpa_supplicant Vulnerability (NS-SA-2025-0087)

The remote NewStart CGSL host, running version MAIN 7.02, has wpasupplicant packages installed that are affected by a vulnerability: - The implementation of PEAP in wpasupplicant through 2.10 allows authentication bypass. For a successful attack, wpasupplicant must be configured to not verify the...

CVE-2008-1114

Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol PEAP, do not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle MITM attacks...

Alibaba Cloud Linux 3 : 0186: wpa_supplicant (ALINUX3-SA-2024:0186)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0186 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-52160: The implementation of PEAP in...

CBL Mariner 2.0 Security Update: wpa_supplicant (CVE-2023-52160)

The version of wpasupplicant installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-52160 advisory. - The implementation of PEAP in wpasupplicant through 2.10 allows authentication bypass. For a successf...