linux-fingerprint-r503

linux-fingerprint-r503 — fingerprint login for Linux using a Grow R503 + Arduino A from-parts USB fingerprint reader for Linux desktops. Total parts cost under $15. Drop-in replacement for upstream fprintd — PAM, KDE Settings, GNOME Settings, fprintd-verify, sudo with finger, screen-unlock with...

radio-hackbox

SySS Radio Hack Box The SySS Radio Hack Box is a proof-of-concept software tool to demonstrate the replay and keystroke injection vulnerabilities of the wireless keyboard Cherry B.Unlimited AES. Requirements Raspberry Pi Raspberry Pi Radio Hack Box shield a LCD, some LEDs, and some buttons...

ams-failopen

AppleMediaServices의 Fail-Open 서명 제로데이 공개 요약 이 문제는 실제 제로데이 취약점으로, 특정 버전의 회귀 버그라기보다는 AppleMediaServices.framework의 구조적 설계 결함을 반영합니다. Apple의 AppleMediaServices 프레임워크에 있는 심각한 fail-open 결함으로 인해 원격 구성 파일"Bag"을 로드하지 못하면 요청 서명이 자동으로 비활성화될 수 있습니다. 이는 iOS, macOS, tvOS 및 watchOS에 영향을 미칩니다. DNS 조작, 시간 초과 또는...

CVE-2022-27254

CVE-2022-27254 PoC for vulnerability in Honda's Remote Keyless SystemCVE-2022-27254 Disclaimer: For educational purposes only. Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh, a student at UMass Dartmouth and HackingIntoYourHeart. Others mentioned in this repository ar...

RFCrack

/ | | | / | | | | / \ ' - / \ / - | / \ V V / ' / \ || - /||// /| ///|. //, / / |/ | /| | | || | / | | '/ /| / / | || || , | \ Welcome to RFCrack - A Software Defined Radio Attack Tool Developer: @Ficti0n - http://ConsoleCowboys.com CCLabs: http://cclabs.io Blog: console-cowboys.blogspot.com...

ESP-RFID-Tool

ESP-RFID-Tool By Corey Harding 공식 웹사이트: www.rfid-tool.com 현재 April Brother에서 이 하드웨어를 제조하고 있으며 중국에서 직접 구매할 수 있습니다: 공식 스토어: https://blog.aprbrother.com/product/esp-rfid-tool AliExpress 스토어: https://www.aliexpress.com/item/ESP-RFID-Tool/32850151497.html Tindie 스토어:...

nrf24-playset

nRF24 Playset The nRF24 Playset is a collection of software tools for wireless input devices like keyboards, mice, and presenters based on Nordic Semiconductor nRF24 transceivers, e.g. nRF24LE1 and nRF24LU1+. All software tools support USB dongles with the nrf-research-firmware by the Bastille...

CVE-2022-38766

CVE-2022-38766 르노 ZOE 키리스 시스템의 취약점에 대한 PoC CVE-2022-38766 소개 Companylogo AUTOCRYPT MalHyuk 개요 이 취약점은 ZOE 전기차가 RF 해킹으로부터 안전한지에 대한 의문을 제기했습니다. 이러한 이유로 올해 출시된 실제 ZOE 차량을 대상으로 공격을 수행했습니다. 또한 이 공격이 RF 해킹의 방어 기술인 롤링 코드를 어떻게 우회하는지에 대한 연구가 수행되었으며, 차량이 고장 날 경우의 처리 방법에 대해 많은 고민이 필요했습니다. 공격 시나리오 대부분의 자동차는 여...

CVE-2026-103514

The WP 2FA WordPress plugin before 4.1.0 does not invalidate a time-based one-time passcode once it has been used, allowing an attacker who knows an account's password and has observed a valid code within its validity window to replay it and bypass two-factor authentication, including on...

EUVD-2026-91934

The WP 2FA WordPress plugin before 4.1.0 does not invalidate a time-based one-time passcode once it has been used, allowing an attacker who knows an account's password and has observed a valid code within its validity window to replay it and bypass two-factor authentication, including on...

CVE-2026-103514

The WP 2FA WordPress plugin, in versions prior to 4.1.0 , is vulnerable to a two-factor authentication bypass. The root cause is the failure to invalidate a time-based one-time passcode (TOTP) after its initial use. An attacker who possesses an account's password and observes a valid code within ...

PT-2026-104520

Name of the Vulnerable Software and Affected Versions WP 2FA WordPress plugin versions prior to 4.1.0 Description The plugin fails to invalidate a time-based one-time passcode after its initial use. This allows an attacker who possesses a user's password and has intercepted a valid code during it...

CVE-2026-23003-Cross-Chain-Bridge-Message-Forging-via-Missing-Origin-Chain-ID

CVE-2026-23003 – 원본 체인 ID 누락으로 인한 크로스체인 브리지 메시지 위조 프로그램 코드 Solidity + Python 익스플로잇 // Bridge.sol - Vulnerable bridge contract contract Bridge mappingbytes32 = bool public processed; event Depositedaddress from, address to, uint256 amount, uint256 chainId; function depositaddress to, uint256 amoun...

CVE-2026-11117-WPA2-4-Way-Handshake-Reinstallation-KRACK-Sim-

CVE-2026-11117 – WPA2 4‑Way Handshake 재설치 KRACK 시뮬레이션 프로그램 코드 Python kracksim.py - Simulates reinstallation of an already-used PTK import hashlib, os class AccessPoint: def initself: self.anonce = os.urandom32 self.ptk = None def sendmsg3self, snonce: Normally would install PTK, but here we resen...

CVE-2026-21010-VoIP-SIP-Digest-Authentication-Replay

CVE-2026-21010 – VoIP SIP 다이제스트 인증 재전송 프로그램 코드 Python SIP 시뮬레이터 sipserversim.py - SIP server that accepts replayed authenticated requests from flask import Flask, request app = Flaskname Simulated nonce storage: doesn't track used nonces usednonces = set @app.route'/call', methods='POST' def call...

CVE-2026-23004-Automotive-UDS-Authentication-Bypass-via-Replay-Attack

CVE-2026-23004 – 재생 공격을 통한 자동차 UDS 인증 우회 프로그램 코드 Python CAN‑UDS 시뮬레이터 udssim.py - ECU that authenticates with a simple challenge import random, hashlib class ECU: def initself: self.secret = b'longsecretkey' def generatechallengeself: self.challenge = random.randbytes8 return self.challenge def...

tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator

A flaw was found in Apache Tomcat. This vulnerability, an authentication bypass by capture-replay, affects the DIGEST authenticator. A remote attacker can exploit this by making a specially crafted DIGEST authenticated request with a nonceCount at the upper boundary of the replay window. This...

CVE-2026-102369

TP-Link Tapo C120 v1 and C200 V5 security cameras are vulnerable to unauthenticated remote code execution due to insufficient protection of login challenge data and a lack of input sanitization in the MacTool handler . An attacker on the same local network can replay login challenge data to gain ...

CVE-2026-23010-CCSDS-Telecommand-Replay-Without-Sequence-Number

CVE-2026-23010 – シーケンス番号なしのCCSDSテレコマンドリプレイ プログラムコード（Python衛星シミュレータ） satellitesim.py - Spacecraft that executes telecommands without checking sequence number class Satellite: def initself: self.executed = set def receivetcself, cmdid, seqnum: Vulnerability: ignores seqnum, allowing replay of same...

tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator

A flaw was found in Apache Tomcat. This vulnerability, an authentication bypass by capture-replay, affects the DIGEST authenticator. A remote attacker can exploit this by making a specially crafted DIGEST authenticated request with a nonceCount at the upper boundary of the replay window. This...