MITM_Intercept

MITMIntercept A little bit less hackish way to intercept and modify non-HTTP protocols through Burp and others with SSL and TLS interception support. This tool is for researchers and applicative penetration testers that perform thick clients security assesments. An improved version of the fantast...

cve-2021-33045

cve-2021-33045 Log in to the camera's web page by modifying the packets sent by the browser to /RPC2Login. Here, a mitmproxy script is used to implement the relevant functionality. Similar functionality can also be implemented using Fiddler or Burp Suite. Usage: root@kitploit: mitmweb --showhost...

polymorph

Polymorph Polymorph is a tool that facilitates the modification of network traffic on the fly by allowing the execution of Python code on network packets that are intercepted in real time. This framework can be used to modify in real time network packets that implement any publicly specified...

udpack

UDPack UDPack 是一个可扩展的通用 UDP 数据包混淆器。该应用的目的是位于 UDP 数据流路径中，对数据包进行混淆、去混淆或以其他方式修改。 需要 Python 3.4 或更高版本，因为此脚本使用了 asyncio 库。始终强烈建议使用最新的 Python 版本。基本功能无需第三方依赖，但 XChaCha20Poly1305Packer 需要 PyNaCl。 警告： 必须强调，本应用的目的在于 混淆 ，而非 加密 。许多设计决策有意违背了密码学最佳实践，因此混淆方法很可能无法抵抗密码分析。切勿 依赖此混淆来保障数据的机密性！！！ 当前版本将网络部分分离为独立的 Manage...

CVE-2026-74724

In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write in ipvsnaticmp Sashiko warns that local attacker can modify the packet while it is processed by IPVS. Some places read the IP ihl field multiple times which can cause out-of-bounds access. One such...

EUVD-2019-14896

Malware in sbrugna...

EUVD-2015-4478

Malware in sbrugna...

EUVD-2024-54574

Malicious code in bioql PyPI...

CVE-2024-40458

An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...

CVE-2024-40458

An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...

CVE-2024-40458

An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...

CVE-2024-40458

CVE-2024-40458 affects Ocuco Innovation Tracking.exe 2.10.24.51. The issue allows a local attacker to escalate privileges through modification of TCP packets. CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, no user interaction, and impact to Confidentiality, Integr...

CVE-2024-40458

An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...

PT-2025-22550 · Ocuco · Ocuco Innovation Tracking.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation Tracking.exe version 2.10.24.51 Description: The issue allows a local attacker to escalate privileges via the modification of TCP packets. Recommendations: For Ocuco Innovation Tracking.exe version 2.10.24.51, at the moment,...

RADIUS Protocol CVE-2024-3596

...

CVE-2021-43116

An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login...

CVE-2021-46086

xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...

WEB IPCAMERA Logic Flaw Vulnerability in Shenzhen Baoriming Technology Co.

Ltd. is a high-tech camera manufacturer integrating R&D, manufacturing, sales and service, providing face recognition, vivo detection and other high-quality products based on Hesi intelligent hardware for users all over the world. Shenzhen Baoriming Technology Co., Ltd WEB IPCAMERA There is a log...

Ksix Zigbee Devices Playback Protection Bypass

Exploit Title: Ksix Zigbee Devices - Playback Protection Bypass PoC Date: 2020-11-15 Exploit Author: Alejandro Vazquez Vazquez Vendor Homepage: https://www.ksixmobile.com/ Firmware Version: Gateway Zigbee Module - v1.0.3, Gateway Main Module - v1.1.2, Door Sensor - v1.0.7, PIR Motion Sensor -...

CVE-2019-5291

Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some field...