pyrmax

pyrmax Ubiquiti AirMAX ワイヤープロトコルフレーム用のデコーダおよびエンコーダで、AC（WA ファームウェア）シリーズと M（XW/XM ファームウェア）シリーズの両方に対応しています。 クリアテキストの外部ヘッダーのデコード は、ksy/ 配下の Kaitai Struct スキーマによって駆動されます。AC ペイロード （msgtype で切り替わるバージョンゲート付き、deauth XOR アンマスクを含む）は ac.py に手書きで実装されています — このロジックはパース専用の Kaitai には適合しません。 エンコード...

Ubiquiti-CVE

Ubiquiti-CVE ⚡ 간단한 사용법 이 프로젝트는 다음과 같은 안전하고 허가된 환경에서만 사용하십시오: 로컬 가상 머신 Docker 컨테이너 격리된 실험실 설정 허가된 침투 테스트 환경 예제 설정: root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate...

wiremax

wiremax Ubiquiti AirMAX （AC + M）および付随するMikrotik / RouterBoard ベンダー情報要素（IE）用の、Luaで書かれたWireshark/tsharkディセクタです。 これはpyrmaxのオンザワイヤ版です：デコードロジックはそのPythonパッケージをフィールド単位でミラーリングしています。ACパケット形式はAirMAX ACファームウェアバイナリからリバースエンジニアリングされました。MおよびRouterBoardのレイアウトは、以前に公開された旧AirMAX-MベンダーIEに関するノートに基づいています。...

CVE-2026-22557

🛡️ CVE-2026-22557 - Ubiquiti UniFi Network Application 中的严重路径遍历漏洞 📋 概述 Ubiquiti UniFi Network Application （UniFi Controller）中存在一个严重的未认证路径遍历漏洞 （CWE-22）。 具有网络访问权限 的攻击者可利用此漏洞： 遍历目录边界（../） 读取并操作底层操作系统上的任意文件 可能未经授权访问系统账户，并实现完全入侵 无需任何身份验证或用户交互。 CVSS v3.1 基础评分：10.0（严重） 攻击向量：...

Ubiquiti UniFi OS Server < 5.1.37 Multiple Vulnerabilities

The version of Ubiquiti UniFi OS Server installed on the remote host is prior to 5.1.37. It is, therefore, affected by multiple vulnerabilities: - A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability fou...

CVE-Ubiquiti

CVE-Ubiquiti Ubiquiti UniFi セキュリティ脆弱性 このリポジトリには、以下のUbiquiti UniFiセキュリティ脆弱性に関連する情報とリソースが含まれています： CVE-2026-77542 CVE-2026-77543 CVE-2026-77545 CVE-2026-77550 CVE-2026-77551 CVE-2026-77552 CVE-2026-77553 CVE-2026-77554 CVE-2026-77557 寄付...

Vulnerabilities found in Ubiquiti’s UniFi products

Ubiquiti has identified vulnerabilities in various UniFi products, including UniFi Protect, UniFi OS, UniFi Network Application, UniFi Connect, UniFi Access Application, UniFi OS Server, UID Enterprise Agent, UniFi Connect Display Cast Pro, UniFi Enterprise Audio/Video Bridge, and UniFi Talk. The...

Ubiquiti UniFi OS Improper Access Control Vulnerability

Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make unauthorized changes to the system...

Ubiquiti UniFi OS Improper Input Validation Vulnerability

Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to conduct command injection...

UniFi OS Server Unauthenticated Remote Code Execution Chain Detection Script

This tool is a safe detector for the unauthenticated remote code execution chain in UniFi OS Server versions 5.0.6 and below, as disclosed in Ubiquiti Security Advisory Bulletin 064...

Ubiquiti UniFi OS Server 安全漏洞

The Ubiquiti UniFi OS Server is a server platform developed by the Ubiquiti company, designed for managing UniFi networks and security devices. The Ubiquiti UniFi OS Server has a security vulnerability that stems from improper access control. This vulnerability could allow malicious individuals...

Ubiquiti UniFi OS Server 安全漏洞

The Ubiquiti UniFi OS Server is a server platform developed by the Ubiquiti company, designed for managing UniFi networks and security devices. The Ubiquiti UniFi OS Server has a security vulnerability that stems from path traversal attacks. This vulnerability could allow malicious actors with...

Ubiquiti UniFi OS Server 安全漏洞

The Ubiquiti UniFi OS Server is a server platform developed by the Ubiquiti company, designed for managing UniFi networks and security devices. The Ubiquiti UniFi OS Server has a security vulnerability, which stems from improper input validation. This vulnerability could allow malicious actors wi...

Ubiquiti UniFi Play PowerAmp和Ubiquiti UniFi Play Audio Port 安全漏洞

Both the Ubiquiti UniFi Play PowerAmp and the Ubiquiti UniFi Play Audio Port are products of the American company Ubiquiti. The Ubiquiti UniFi Play PowerAmp is a home audio control device that supports multi-room audio distribution and amplifier integration. The Ubiquiti UniFi Play Audio Port is ...

Ubiquiti多款产品 加密问题漏洞

The Ubiquiti UniFi Network Controller and other products are all developed by the American company Ubiquiti. The Ubiquiti UniFi Network Controller is a control software platform for centralized management and monitoring of network devices. The Ubiquiti UniFi UAP consists of a series of wireless...

PT-2026-28262

Ubiquiti UniFi Network Controller prior to 5.10.12 excluding 5.6.42, UAP FW prior to 4.0.6, UAP-AC, UAP-AC v2, and UAP-AC Outdoor FW prior to 3.8.17, USW FW prior to 4.0.6, USG FW prior to 4.4.34 uses AES-CBC encryption for device-to-controller communication, which contains cryptographic weakness...

Ubiquiti UniFi Network Application 安全漏洞

The Ubiquiti UniFi Network Application is a centralized management and monitoring platform for network devices and wireless networks developed by the Ubiquiti company. The Ubiquiti UniFi Network Application has a security vulnerability that stems from a susceptibility to path traversal attacks...

Ubiquiti UniFi Network Application 安全漏洞

The Ubiquiti UniFi Network Application is a centralized management and monitoring platform for network devices and wireless networks developed by the Ubiquiti company. The Ubiquiti UniFi Network Application has a security vulnerability, which stems from an authenticated NoSQL injection. Malicious...

(Pwn2Own) Ubiquiti Networks AI Pro Uncaught Exception Denial-of-Service Vulnerability

This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Ubiquiti Networks AI Pro. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of WebSocket headers. The issue results fro...

(Pwn2Own) Ubiquiti Networks AI Pro Discovery Protocol Missing Encryption Protocol Downgrade Vulnerability

This vulnerability allows network-adjacent attackers to downgrade the communication protocol on affected installations of Ubiquiti Networks AI Pro. Authentication is not required to exploit this vulnerability. The specific flaw exists within the discovery protocol. The issue results from the lack...