CVE-2025-63353

CVE-2025-63353 Une vulnérabilité dans le fibrehome GPON ONU HG6145F1 RP4423 permet que le mot de passe Wi-Fi par défaut d'usine clé pré-partagée WPA/WPA2 soit prédit à partir du SSID...

pmkidcracker

Craqueur PMKID WPA2 Ce programme est un outil écrit en Python pour récupérer la clé pré-partagée d'un réseau WiFi WPA2 sans déconnexion de-authentication et sans nécessiter la présence de clients sur le réseau. Il cible la faiblesse de certains points d'accès qui annoncent la valeur PMKID dans le...

SYNwall

SYNwall Pare-feu IoT sans configuration. SYNwall est un projet construit pour l'instant comme un module noyau Linux, pour implémenter un pare-feu transparent sans configuration ni maintenance. Vous pouvez jeter un œil au pour un exemple d'utilisation. Basics Habituellement, les appareils IoT...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

ike-scan

ike-scan Découvrir et identifier les hôtes IKE serveurs VPN IPsec Table des matières Construction et installation Aperçu Utilisation Détails d'implémentation Saisie d'hôtes et besoins en mémoire Limitation du débit Génération de cookies et identification de l'hôte distant Détails des paquets IKE...

CVE-2025-63353

Предсказатель паролей Wi-Fi FiberHome CVE-2025-63353 Утилита на Python, предназначенная для аудита безопасности и демонстрации концепции proof-of-concept уязвимости детерминированной генерации паролей, обнаруженной в маршрутизаторах FiberHome HG6145F1 RP4423. 📋 Обзор Этот скрипт эксплуатирует...

CVE-2025-63353

CVE-2025-63353 : Vulnérabilité de mot de passe Wi-Fi prévisible dans les appareils GPON ONT de FiberHome Références Basé sur les recherches de Hanianis divulgation originale du CVE à CVE-2025-63353 Remerciements aux chercheurs en sécurité qui ont identifié cette vulnérabilité. Avertissement légal...

tinydtls

СОДЕРЖАНИЕ Эта библиотека содержит функции и структуры, которые могут помочь при создании однопоточного UDP-сервера с поддержкой DTLS на C99. Доступны следующие компоненты: dtls Базовая поддержка DTLS в режиме предварительного общего ключа. tests Подкаталог tests содержит тестовые программы,...

ReverseSocks5

ReverseSocks5 Reverse SOCKS5 proxy in Golang. Usage Usage of ReverseSocks5.exe: -cert string Certificate file if using TLS on the server -connect string Connect address for socks agent address:port -k Skip TLS certificate verification when using -tls insecure -key string Private key file if using...

CLEANSTART-2026-EI89098 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

Security vulnerability affects the cri-tools package. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

CLEANSTART-2026-GK62523 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

Security vulnerability affects the cri-tools package. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

Amazon Linux 2 : amazon-ssm-agent (ALAS-2026-3963)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.5226.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3963 advisory. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a...

CLEANSTART-2026-LW45744 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

Security vulnerability affects the minio-operator package. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2026-3149)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3149 advisory. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. CVE-2026-425...

CVE-2026-81321

CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains filesystem access through physical access, a debugging interface, or another vulnerability could recover the configured network identifier and pre-shared key...

EUVD-2026-83053

CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains filesystem access through physical access, a debugging interface, or another vulnerability could recover the configured network identifier and pre-shared key...

CVE-2026-81321 CareCam CM2507 Cleartext Storage of Sensitive Information

CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains filesystem access through physical access, a debugging interface, or another vulnerability could recover the configured network identifier and pre-shared key...

CVE-2026-81321

CareCam CM2507 IP cameras store configured wireless network credentials (network identifier and pre-shared key) in cleartext within the device filesystem. An attacker who obtains filesystem access—through physical access, a debugging interface, or another vulnerability—can recover these credentia...

CVE-2026-81321 CareCam CM2507 Cleartext Storage of Sensitive Information

CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains filesystem access through physical access, a debugging interface, or another vulnerability could recover the configured network identifier and pre-shared key...

CVE-2026-66781 Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication

A flaw was found in the Submariner operator. The Submariner Custom Resource CR, used for configuring network connectivity, stores the IPsec pre-shared key PSK in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by...