CVE-2026-89179

WeenyGenius, a computer lab management system by Howyar Technologies, has a Missing Support for Integrity Check vulnerability. Unauthenticated attackers on the same network can intercept a student's connection packet and replay it, thereby forging the appearance that the student remains connected...

CVE-2026-89177

WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unauthenticated attackers on the same network can capture packets to leak transmitted data, or perform replay attacks with forged commands to...

CVE-2026-23003-Cross-Chain-Bridge-Message-Forging-via-Missing-Origin-Chain-ID

CVE-2026-23003 – 원본 체인 ID 누락으로 인한 크로스체인 브리지 메시지 위조 프로그램 코드 Solidity + Python 익스플로잇 root@kitploit: // Bridge.sol - Vulnerable bridge contract contract Bridge mappingbytes32 = bool public processed; event Depositedaddress from, address to, uint256 amount, uint256 chainId; function depositaddress to...

EUVD-2026-76006

WeenyGenius, a computer lab management system by Howyar Technologies, has a Missing Support for Integrity Check vulnerability. Unauthenticated attackers on the same network can intercept a student's connection packet and replay it, thereby forging the appearance that the student remains connected...

CVE-2026-89179 Howyar｜WeenyGenius - Missing Support for Integrity Check

WeenyGenius, a computer lab management system by Howyar Technologies, has a Missing Support for Integrity Check vulnerability. Unauthenticated attackers on the same network can intercept a student's connection packet and replay it, thereby forging the appearance that the student remains connected...

CVE-2026-89179

WeenyGenius , a computer lab management system by Howyar Technologies , is affected by a Missing Support for Integrity Check vulnerability. An unauthenticated attacker on the same (adjacent) network can intercept a student's connection packet and replay it, forging the appearance that the student...

EUVD-2026-76004

WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unauthenticated attackers on the same network can capture packets to leak transmitted data, or perform replay attacks with forged commands to...

CVE-2026-89177

WeenyGenius is a computer lab management system by Howyar Technologies . The vulnerability stems from reliance on ZMTP Null mode , an unauthenticated zero-message-transport-protocol handshake that provides no encryption or integrity. An unauthenticated attacker on the same (adjacent) network can ...

CVE-2026-89177 Howyar｜WeenyGenius - Use of Insecure Protocol

WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unauthenticated attackers on the same network can capture packets to leak transmitted data, or perform replay attacks with forged commands to...

BIT-TOMCAT-2026-65905 Apache Tomcat: Limited replay attack possible with DIGEST authentication

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while...

BIT-TOMCAT-2026-55955 Apache Tomcat: EncryptInterceptor not protected against replay attacks

Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the cluster component. This issue affects Apache Tomcat: from 11.0.0 through 11.0.22, from 10.1.0 through 10.1.55, from 9.0.13 through 9.0.18, from 8.5.38 through 8.5.100, from...

CVE-2026-11117-WPA2-4-Way-Handshake-Reinstallation-KRACK-Sim-

CVE-2026-11117 – WPA2 4‑Way Handshake 재설치 KRACK 시뮬레이션 프로그램 코드 Python root@kitploit: kracksim.py - Simulates reinstallation of an already-used PTK import hashlib, os class AccessPoint: def initself: self.anonce = os.urandom32 self.ptk = None def sendmsg3self, snonce: Normally would install PTK, bu...

CVE-2026-21010-VoIP-SIP-Digest-Authentication-Replay

CVE-2026-21010 – VoIP SIP 다이제스트 인증 재전송 프로그램 코드 Python SIP 시뮬레이터 root@kitploit: sipserversim.py - SIP server that accepts replayed authenticated requests from flask import Flask, request app = Flaskname Simulated nonce storage: doesn't track used nonces usednonces = set @app.route'/call',...

CVE-2026-21014-CAN-Bus-Frame-Replay-Attack-on-Automotive-ECU

CVE-2026-21014 – 자동차 ECU에 대한 CAN 버스 프레임 재생 공격 프로그램 코드 Python SocketCAN 시뮬레이션 root@kitploit: canreplaysim.py - Simulates CAN bus replay import time canmessages = def sendcanmsgid, data: printf"CAN msgid:x: data.hex" canmessages.appendmsgid, data def receivecan: return canmessages-1 if canmessages...

CVE-2026-23004-Automotive-UDS-Authentication-Bypass-via-Replay-Attack

CVE-2026-23004 – 재생 공격을 통한 자동차 UDS 인증 우회 프로그램 코드 Python CAN‑UDS 시뮬레이터 root@kitploit: udssim.py - ECU that authenticates with a simple challenge import random, hashlib class ECU: def initself: self.secret = b'longsecretkey' def generatechallengeself: self.challenge = random.randbytes8 return...

PT-2026-90333

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate dirty page table on log replay Each DIR PAGE ENTRY ends in a page lcns array whose length is the on-disk lcns follow field. check rstbl validates the table bookkeeping but never checks that this array fits in t...

PT-2026-90088

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cache replay, the writeback worker and the GC worker bounds its length by PCACHE SEG SIZE - seg off, the raw segment size rather than the data...

PT-2026-90380

In the Linux kernel, the following vulnerability has been resolved: nfsd: release OPEN-decoded posix ACLs via op release nfsd4 decode createhow4 calls nfsd4 decode fattr4, which allocates refcounted struct posix acl objects via posix acl alloc and stores them in open-op pacl and open-op dpacl...

connectwise-automate-AiTM-rce

ConnectWise Automate: Удалённое выполнение кода через «злоумышленника посередине» Содержание Предыстория Хронология Мысли и выводы Ответственное раскрытие PoC-код Отчёт, предоставленный ConnectWise Краткое описание Уязвимая конфигурация Воздействие Технические детали 1. HTTP-транспорт 2...

CVE-2026-31402

🛡️ CVE-2026-31402 – NFSv4 LOCK 재생 캐시 힙 오버플로 CVE-2026-31402: 23년 동안 숨겨진 Linux NFS 버그 📌 개요 CVE-2026-31402 는 Linux 커널의 NFSv4.0 LOCK 재생 캐시 에서 발생하는 힙 오버플로 취약점 입니다. 고정 버퍼 크기보다 큰 응답이 부적절하게 처리되어 메모리 손상 으로 이어질 수 있습니다. 🛠 영향받는 구성 요소 구성 요소: NFSv4 LOCK 재생 캐시 영향받는 시스템: NFS 서버 지원이 포함된 Linux 커널 취약점 유형: 힙 오버플로 /...