crackle

crackle cracks BLE Encryption AKA Bluetooth Smart. crackle exploits a flaw in the BLE pairing process that allows an attacker to guess or very quickly brute force the TK Temporary Key. With the TK and other data collected from the pairing process, the STK Short Term Key and later the LTK Long Ter...

kr00ker

kr00ker 説明 このスクリプトは、KR00K脆弱性（CVE-2019-15126）を悪用する簡単な実験であり、脆弱なデバイス（アクセスポイントまたはクライアント）の一部のWPA2 CCMPデータを復号できるようにします。 より具体的には、このスクリプトはWPA2 CCMPパケットの復号データを取得しようとします。ただし、以下の情報が必要です。 TK（128ビットすべてゼロ） Nonce（パケットヘッダで平文で送信） 暗号化データ ここで： WPA2 AES-CCMP復号 -- AESNonce,TK XOR 暗号化データ = 復号データ 復号されたストリームは...

Pollenisator

Pollenisator 는 침투 테스터와 감사자가 일부 도구/스크립트의 사용을 자동화하고 추적할 수 있도록 돕는 도구입니다. Python 3로 작성됨 "침투 테스트 객체"의 모델화 제공: 범위, 호스트, 포트, 명령, 도구 등 도구/스크립트는 4가지 카테고리로 분리: wave, Network/domain, IP, Port 객체는 NoSQL DB Mongo에 저장됨 객체 간 링크를 유지하여 쿼리 가능 객체는 파서/수동 입력을 통해 생성 가능 비즈니스 로직 구현 가능 자동 취약점 참조, 항목 트리거 등 많은 도구/스크립트 실행 조...

CentOS Linux 8 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2025:1754413156)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2025:1754413156 advisory. - Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk witho...

CentOS Linux 8.4 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1754413251)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1754413251 advisory. - Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without...

CentOS Linux 8.5 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1754342893)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1754342893 advisory. - Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without...

CVE-2024-55211

CVE-2024-55211 Tk-Rt-Wr135G 上的基于Cookie的身份验证漏洞 受影响供应商 ：Think Technology 受影响产品 ：无线路由器 Ac 1199Mbps Tk-Rt-Wr135G 受影响版本 ：固件 V3.0.2-X000 描述 该漏洞允许绕过路由器 TK-RT-WR135G 的登录表单，使攻击者能够更改为路由器设计的任何配置。 这是通过更改 LoginStatus cookie 的值实现的，将其初始值 "false" 改为 "true"，从而使用户在设定的时间段内保持登录状态。 利用 可通过网络浏览器的控制台或 cookie 检查器进行利用。 攻击...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2023-000317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000317 advisory. Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortable with using Git on the command-line. Git GU...

[SECURITY] Fedora 45 Update: tkimg-2.1.1-1.fc45

This package contains a collection of image format handlers for the Tk photo image type, and a new image type, pixmaps...

[SECURITY] Fedora 44 Update: tkimg-2.1.1-1.fc44

This package contains a collection of image format handlers for the Tk photo image type, and a new image type, pixmaps...

[SECURITY] Fedora 43 Update: tkimg-2.1.1-1.fc43

This package contains a collection of image format handlers for the Tk photo image type, and a new image type, pixmaps...

CVE-2026-81697 openssl_encrypt before 1.4.9 KDF Downgrade via CWD-relative Configuration

opensslencrypt pip package openssl-encrypt versions = 1.4.8 contain a CWD-relative configuration file resolution flaw in cryptsettings.py, where CONFIGFILE originally the absolute per-user path /.cryptsettings.json is reassigned at line 84 to the bare relative name 'cryptsettings.json'. As a...

CVE-2026-81697: Untrusted Search Path

opensslencrypt pip package openssl-encrypt versions = 1.4.8 contain a CWD-relative configuration file resolution flaw in cryptsettings.py, where CONFIGFILE originally the absolute per-user path /.cryptsettings.json is reassigned at line 84 to the bare relative name 'cryptsettings.json'. As a...

PT-2026-82598

Name of the Vulnerable Software and Affected Versions openssl-encrypt versions prior to 1.4.9 Description A configuration file resolution flaw exists in crypt settings.py where the CONFIG FILE variable is reassigned to a relative path. This causes the legacy Tk GUI's SettingsTab to read and write...

[SECURITY] Fedora 44 Update: python-pillow-12.3.0-1.fc44

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

[SECURITY] Fedora 44 Update: python-pillow-12.2.0-1.fc44

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

[SECURITY] Fedora 43 Update: python-pillow-11.3.0-8.fc43

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

CVE-2019-20470

An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It performs actions based on certain SMS commands. This can be used to set up a voice communication channel from the watch to any telephone number, initiated by sending a specific SMS and using the default password,...

CVE-2019-20471

An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. When using the device at initial setup, a default password is used 123456 for administrative purposes. There is no prompt to change this password. Note that this password can be used in combination with CVE-2019-2047...

CVE-2019-20473

An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. Any SIM card used with the device cannot have a PIN configured. If a PIN is configured, the device simply produces a "Remove PIN and restart!" message, and cannot be used. This makes it easier for an attacker to use...