btrpa-scan

btrpa-scan 一款蓝牙低功耗（BLE）扫描器，具有高级可解析私有地址（RPA）解析功能。发现附近的 BLE 设备，通过 MAC 地址跟踪特定设备，或使用身份解析密钥（IRK）解析隐私随机化地址。 作者： David Kennedy @HackingDave 公司： TrustedSec 功能 发现所有设备 - 扫描范围内所有广播的 BLE 设备，包含信号强度、估计距离、制造商数据和服务 UUID 定向搜索 - 通过 MAC 地址搜索特定设备并监控每次检测 IRK 解析 - 使用一个或多个身份解析密钥解析可解析私有地址，以识别使用随机地址保护隐私的设备 多 IRK -...

RF-CHAOS

RF CHAOS - Android 휴대폰을 통한 BLE / BT / WiFi / NFC / 기타 등등의 카오스 RF CHAOS는 Android 네이티브 WiFi, Bluetooth, BLE, NFC 스캐너, 로거, 익스플로잇 도구입니다. 제작:Scramblr 일명 @notdan 일명 alotofnamesyoudontknow ℹ️ 지금 당장 APK를 받고 싶다면, 컴파일된 릴리스는 여기에 있습니다:RF-CHAOS .APK INSTALLERS ℹ️ 소개 및 서문 RF CHAOS는 수년간 Maximum Mobile Hacking의 길을...

CVE-2026-0101-BLE-Address-Spoofing-via-Weak-Resolvable-Private-Address

CVE-2026-0101 – 약한 해석 가능 개인 주소를 통한 BLE 주소 스푸핑 프로그램 코드 Python, bleak 시뮬레이션 사용 root@kitploit: bleperipheralsim.py - Simulated BLE peripheral with weak RPA verification import asyncio, random, hashlib from bleak import BleakServer, BleakScanner Simplified - we'll use a basic socket to simulate BLE...

CVE-2023-52709-PoC

CVE 2023-52709에 대한 개념 증명: 'TI 블루투스 스택이 해결 가능한 무작위 개인 주소RPA를 생성하지 못하여 이미 페어링된 피어 장치에 대한 서비스 거부DoS를 유발할 수 있음' CVE 2023-52709 요약 DUTDevice Under Test가 해결 가능한 개인 주소로 구성된 상태에서 Defensics 테스트 케이스 SMP legacy 1001을 루프 모드로 실행하면, 시간이 지남에 따라 장치가 해결 불가능한 무작위 개인 주소를 생성하게 되어 이미 페어링된 피어 장치에 대한 서비스 거부DoS를 유발합니다. ...

dovecot security update

1:2.2.36-8 - update release number 1:2.2.36-7.1 - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts 1866752 - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation 1866757 - fix CVE-2020-12674 crash due to assert in RPA implementation 1866764 1:2.2.36-7 - generate...

MAL-2026-3573 Malicious code in @uipath/rpa-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27baf6f8e722fd9803bff5f0d455ae5867fcf87135864df02a6f269cccf659fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @uipath/rpa-legacy-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d4b6219eecb1a7c42be7dd373aba1a49cc25afcadaabb38d6ebf90522094568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-3572 Malicious code in @uipath/rpa-legacy-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d4b6219eecb1a7c42be7dd373aba1a49cc25afcadaabb38d6ebf90522094568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MiracleLinux 8 : dovecot-2.3.8-2.el8.2 (AXSA:2020-546:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-546:03 advisory. dovecot: Resource exhaustion via deeply nested MIME parts CVE-2020-12100 dovecot: Out of bound reads in dovecot NTLM implementation CVE-2020-12673...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001342 advisory. In drivers/pci/hotplug/rpadlparsysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device...

CVE-2023-31902

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution RCE...

EUVD-2020-4970

Malware in sbrugna...

EUVD-2023-36191

Malicious code in bioql PyPI...

EUVD-2024-42854

Malicious code in bioql PyPI...

EUVD-2022-34174

Malicious code in bioql PyPI...

CLSA-2025-1758896552 dovecot: Fix of CVE-2020-12674

CVE-2020-12674: fix mishandling of zero length in RPA request to prevent auth service crash...

CLSA-2025-1758820840 dovecot: Fix of CVE-2020-12674

CVE-2020-12674: fix mishandling of zero length in RPA request to prevent auth service crash...

PT-2025-30104 · Ооо 'Шерпа Роботикс' · Sherpa Rpa

Уязвимость компонента Sherpa Orchestrator платформы для автоматизации процессов Sherpa RPA связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить межсайтовый скриптинг XSS путём отправки специально...

CVE-2022-29856

A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages...

Security Bulletin: IBM Robotic Process Automation is vulnerable to disclosure of chatbot credentials (CVE-2022-33954))

Summary Security Bulletin: IBM Robotic Process Automation is vulnerable to disclosure of chatbot credentials CVE-2022-33954 Vulnerability Details CVEID:CVE-2022-33954 DESCRIPTION: IBM Robotic Process Automation could allow a user with psychical access to the system to obtain sensitive information...