1835 matches found
IMSI-catcher
IMSI-catcher This program shows you IMSI numbers, country, brand and operator of cellphones around you. /!\ This program was made to understand how GSM network work. Not for bad hacking ! What you need 1 PC with Gnu/Linux. Tested with : debian 10 Ubuntu 20.04/LinuxMint 22.2+ Kali 2025+ 1 SDR...
EvilCrowRF_Custom_Firmware_CC1101_FlipperZero
EvilCrowRFCustomFirmwareCC1101FlipperZero Idea, development and implementation of this firmware: h-RAT https://github.com/h-RAT/. Discord: hrat Idea, development and implementation of the original firmware: Joel Serna @JoelSernaMoreno - https://github.com/joelsernamoreno/. Main collaborator: Litt...
rtl_433
rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...
TempestSDR
TempestSDR This project is a software toolkit for remotely eavesdropping video monitors using a Software Defined Radio SDR receiver. It exploits compromising emanations from cables carrying video signals. Raster video is usually transmitted one line of pixels at a time, encoded as a varying...
AhsayCBS-Auth-Bypass-RCE
AhsayCBS Authentication Bypass & RCE CVE-2026-105133 + CVE-2026-105134 — Unauthenticated remote code execution in AhsayCBS ≤10.3.4 Blog Post Technical analysis covering root cause, exploitation, and indicators of compromise is available on the Horizon3.ai attack research blog:...
TempestSDR
TempestSDR This project is a software toolkit for remotely eavesdropping video monitors using a Software Defined Radio SDR receiver. It exploits compromising emanations from cables carrying video signals. Raster video is usually transmitted one line of pixels at a time, encoded as a varying...
frida
frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...
CVE-2026-80344
CVE-2026-80344 — camel-as2: asynchronous MDN SSRF and credential disclosure Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the AS2 receiver delivered the asynchronous Message Disposition Notification MDN to an address supplied by the sender the...
Damn-Vulnerable-Android-Components
The Damne Vulnerable Android Components - DVAC The sieve reborn! Damn Vulnerable Android Components DVAC is an educational Android application intentionally designed to expose and demonstrate vulnerabilities related to various Android components such as Activities, Intents, Content Providers, and...
JXL_Infotainment_CVE-2025-69515
CVE-2025-69515 Attack Name 📂 Additional Details Afftected product Affected Components GNSS Receiver Module / GPS Chipset Infotainment Navigation Module Location Services Framework Attack Vector The infotainment unit can be targeted by broadcasting spoofed GPS signals using an SDR device. Because...
AhsayCBS <= 10.3.4 - Unauthenticated RCE
Ahsay AhsayCBS = 10.3.2 contains a command injection caused by manipulation of the "random" argument in /rps/api/json/UpdateReceivers.do of Replication Receiver, letting remote attackers execute OS commands, exploit requires crafted request id: CVE-2026-105134 info: name: AhsayCBS = 10.3.4 -...
Ahsay CBS CVE-2026-105134 UpdateReceivers command injection
CVE-2026-105134: Ahsay AhsayCBS Replication Receiver POST /rps/api/json/UpdateReceivers.do passes the JSON random field into a shell command without sanitization. Supports confirm-only echo injection whoami/id when stdout is reflected in JSON, or time-based check. !/usr/bin/env python3 -- coding:...
Google Chrome Microsoft Edge DoS
The vulnerability in the Receiver component of Google Chrome and Microsoft Edge is related to a lack of secure information handling mechanisms. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...
Google Chrome Microsoft Edge DoS
The vulnerability in the Receiver component of Google Chrome and Microsoft Edge is related to use-after-free memory usage. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
CVE-2026-59229
The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPERUSER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USEPIPE or MAINTAIN who does NOT have WRITEDATA or DELETEDATA permissions on target databases c...
EUVD-2026-107167
The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPERUSER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USEPIPE or MAINTAIN who does NOT have WRITEDATA or DELETEDATA permissions on target databases c...
CVE-2026-59229
The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPERUSER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USEPIPE or MAINTAIN who does NOT have WRITEDATA or DELETEDATA permissions on target databases c...
PT-2026-120524
The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPER USER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USE PIPE or MAINTAIN who does NOT have WRITE DATA or DELETE DATA permissions on target databas...
CVE-2026-93441 IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service
IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
CVE-2026-93441 IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of service
IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...