pyrmax

pyrmax Ubiquiti AirMAX 와이어 프로토콜 프레임용 디코더 및 인코더로, ACWA 펌웨어 및 MXW/XM 펌웨어 시리즈를 모두 다룹니다. 클리어텍스트 외부 헤더의 디코드 는 ksy/ 아래의 Kaitai Struct 스키마에 의해 처리됩니다. AC 페이로드 msgtype에 따라 전환되고 버전에 따라 제한되며, deauth XOR 언마스크를 포함는 ac.py에 수기로 작성되어 있습니다 — 이 로직은 파싱 전용 Kaitai에는 맞지 않습니다. 인코드 는 디코드 경로를 필드 단위로 그대로 반영하도록 수기로 작성되었습니다...

wiremax

wiremax Ubiquiti AirMAXAC + M 및 관련 Mikrotik / RouterBoard 벤더 정보 요소Information Elements용 Wireshark/tshark 디섹터dissector로, Lua로 작성되었습니다. 이는 pyrmax의 와이어상 대응물입니다. 디코드 로직은 해당 Python 패키지를 필드 단위로 그대로 반영합니다. AC 패킷 형식은 AirMAX AC 펌웨어 바이너리에서 리버스 엔지니어링되었으며, M 및 RouterBoard 레이아웃은 이전 AirMAX-M 벤더 IE에 대한 기존 공개 노트...

CVE-2026-22557

🛡️ CVE-2026-22557 - Ubiquiti UniFi Network Application의 심각한 경로 탐색Path Traversal 취약점 📋 개요 Ubiquiti UniFi Network ApplicationUniFi Controller에 인증되지 않은 심각한 경로 탐색path traversal 취약점CWE-22이 존재합니다. 네트워크 접근 권한 을 가진 공격자는 이 결함을 악용하여 다음을 수행할 수 있습니다: 디렉터리 경계를 탐색../ 기본 운영 체제에서 임의의 파일을 읽고 조작 잠재적으로 시스템 계정에 대한 무단...

CVE-Ubiquiti

CVE-Ubiquiti Ubiquiti UniFi 보안 취약점 이 저장소는 다음 Ubiquiti UniFi 보안 취약점과 관련된 정보 및 리소스를 포함합니다: CVE-2026-77542 CVE-2026-77543 CVE-2026-77545 CVE-2026-77550 CVE-2026-77551 CVE-2026-77552 CVE-2026-77553 CVE-2026-77554 CVE-2026-77557 기부 이 프로젝트 유지 관리에 도움 주기 이 프로젝트가 유용하다고 생각되신다면, PayPal 또는 ABA Mobile을 통한 지속적...

Ubiquiti-CVE

Ubiquiti-CVE ⚡ 간단한 사용법 이 프로젝트는 다음과 같은 안전하고 허가된 환경에서만 사용하십시오: 로컬 가상 머신 Docker 컨테이너 격리된 실험실 설정 허가된 침투 테스트 환경 예제 설정: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Windows Git Bash ...

Malicious code in ubiquiti-agents-link-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8827e987697ea6ef619055c53ae1654800a838c18419ffc8a09e872c6f16adc4 The package's bin entry index.js runs execSync'id' and collects os.userInfo.username and os.hostname, then HTTPS-POSTs the JSON payload to the...

MAL-2026-16409 Malicious code in ubiquiti-agents-link-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8827e987697ea6ef619055c53ae1654800a838c18419ffc8a09e872c6f16adc4 The package's bin entry index.js runs execSync'id' and collects os.userInfo.username and os.hostname, then HTTPS-POSTs the JSON payload to the...

Ubiquiti UniFi OS Server < 5.1.37 Multiple Vulnerabilities

The version of Ubiquiti UniFi OS Server installed on the remote host is prior to 5.1.37. It is, therefore, affected by multiple vulnerabilities: - A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability fou...

Vulnerabilities found in Ubiquiti’s UniFi products

Ubiquiti has identified vulnerabilities in various UniFi products, including UniFi Protect, UniFi OS, UniFi Network Application, UniFi Connect, UniFi Access Application, UniFi OS Server, UID Enterprise Agent, UniFi Connect Display Cast Pro, UniFi Enterprise Audio/Video Bridge, and UniFi Talk. The...

Ubiquiti UniFi OS Improper Access Control Vulnerability

Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make unauthorized changes to the system...

Ubiquiti UniFi OS Improper Input Validation Vulnerability

Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to conduct command injection...

UniFi OS Server Unauthenticated Remote Code Execution Chain Detection Script

This tool is a safe detector for the unauthenticated remote code execution chain in UniFi OS Server versions 5.0.6 and below, as disclosed in Ubiquiti Security Advisory Bulletin 064...

Ubiquiti UniFi OS Server 安全漏洞

The Ubiquiti UniFi OS Server is a server platform developed by the Ubiquiti company, designed for managing UniFi networks and security devices. The Ubiquiti UniFi OS Server has a security vulnerability that stems from improper access control. This vulnerability could allow malicious individuals...

Ubiquiti UniFi OS Server 安全漏洞

The Ubiquiti UniFi OS Server is a server platform developed by the Ubiquiti company, designed for managing UniFi networks and security devices. The Ubiquiti UniFi OS Server has a security vulnerability that stems from path traversal attacks. This vulnerability could allow malicious actors with...

Ubiquiti UniFi OS Server 安全漏洞

The Ubiquiti UniFi OS Server is a server platform developed by the Ubiquiti company, designed for managing UniFi networks and security devices. The Ubiquiti UniFi OS Server has a security vulnerability, which stems from improper input validation. This vulnerability could allow malicious actors wi...

The vulnerability of Ubiquiti UniFi Protect’s microprogramming software, related to deficiencies in authentication procedures, allows a intruder to gain unauthorized access to the device.

The vulnerability of Ubiquiti UniFi Protect’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to the device...

Ubiquiti UniFi Play PowerAmp和Ubiquiti UniFi Play Audio Port 安全漏洞

Both the Ubiquiti UniFi Play PowerAmp and the Ubiquiti UniFi Play Audio Port are products of the American company Ubiquiti. The Ubiquiti UniFi Play PowerAmp is a home audio control device that supports multi-room audio distribution and amplifier integration. The Ubiquiti UniFi Play Audio Port is ...

Ubiquiti多款产品 加密问题漏洞

The Ubiquiti UniFi Network Controller and other products are all developed by the American company Ubiquiti. The Ubiquiti UniFi Network Controller is a control software platform for centralized management and monitoring of network devices. The Ubiquiti UniFi UAP consists of a series of wireless...

PT-2026-28262

Ubiquiti UniFi Network Controller prior to 5.10.12 excluding 5.6.42, UAP FW prior to 4.0.6, UAP-AC, UAP-AC v2, and UAP-AC Outdoor FW prior to 3.8.17, USW FW prior to 4.0.6, USG FW prior to 4.4.34 uses AES-CBC encryption for device-to-controller communication, which contains cryptographic weakness...

CVE-2019-25651: Use of a Broken or Risky Cryptographic Algorithm

Ubiquiti UniFi Network Controller prior to 5.10.12 excluding 5.6.42, UAP FW prior to 4.0.6, UAP-AC, UAP-AC v2, and UAP-AC Outdoor FW prior to 3.8.17, USW FW prior to 4.0.6, USG FW prior to 4.4.34 uses AES-CBC encryption for device-to-controller communication, which contains cryptographic weakness...