SKA

About SKA allows you to implement a very simple and fast karma attack. You can sniff probe requests to choose the fake AP name or, if you want, you can insert the name of the AP manually evil twin attack. When target is connected to your WLAN you can active the HTTP redirection and perform a MITM...

CVE-2026-107785

Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard requires. The agent does not validate this size; instead it attempts to use the wg s...

CVE-2026-107785 Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiated

Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard requires. The agent does not validate this size; instead it attempts to use the wg s...

CVE-2026-107785 Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiated

Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard requires. The agent does not validate this size; instead it attempts to use the wg s...

CVE-2026-107785

Crux Agent versions 1.9.0 before 2.0.3 are vulnerable to a silent failure during SKA preshared key rotation . When a peering session negotiates SHA-512 , the agent generates a 64-byte key instead of the 32 bytes required by WireGuard. Because the agent fails to validate this size, it attempts to ...

Malicious code in ska-low-cbf-fpga (PyPI)

--- Credit: OpenSSF source...

CVE-2026-33585

Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03...

CVE-2026-33585

Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03...

CVE-2026-33585 Arqit SKA-Platform Improper Handling of Parameters Vulnerability

Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03...

CVE-2026-33585

The CVE-2026-33585 issue involves improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform, allowing an attacker to impersonate an authenticated tenant user via an unexpired browser session. Affected product: Symmetric Key Agreement Platform (before 26...

CVE-2026-33584 Arqit SKA-Platform Enables Access to Debug Information

Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Symmetric Key Agreement Platform: before 26.03...

CVE-2026-33585: Improper Handling of Parameters

Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03...

MAL-2025-2997 Malicious code in ska-low-cbf-fpga (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ska-low-cbf-fpga (PyPI)

--- -= Per source details. Do not edit below this line.=-...

ska-lv.de XSS vulnerability

Open Bug Bounty ID: OBB-567070 Description| Value ---|--- Affected Website:| ska-lv.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

victoriaskafest.ca XSS vulnerability

Vulnerable URL: https://victoriaskafest.ca/index.php/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E?action=makeuseraction=createarticle Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8253546...

Russian hacker illegally ported Xbox LIVE Arcade Game to PC

A Russian hacker who goes by the handle "Barabus" on the GameDev.ru forums illegally crack Xbox Live Arcade game The Dishwasher: Vampire Smile, developed by Ska Studios and port it on PC. He claimed that he was justified in illegal cracking: "This is not piracy, this is restoration of justice. Th...

Russian hacker illegally ported Xbox LIVE Arcade Game to PC

A Russian hacker who goes by the handle “Barabus” on the GameDev.ru forums illegally crack Xbox Live Arcade game The Dishwasher: Vampire Smile, developed by Ska Studios and port it on PC. He claimed that he was justified in illegal cracking: “This is not piracy, this is restoration of justice. Th...