CVE-2026-80936

CVE-2026-80936 affects the mt7925 Wi-Fi driver in the Linux kernel (part of the mt76 subsystem). During multi-link power-save setup, the driver queues mlo_pm_work with a 5-second delay but never cancels it on the stop path. If the device is torn down within that window, the timer fires after tear...

CVE-2026-80936 wifi: mt76: mt7925: cancel mlo_pm_work on stop

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlopmwork on stop mt7925 queues mlopmwork with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work outlives...

CVE-2026-80935

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy mt7996mcugeteeprom derives the destination of the EFUSE/EXT block copy from the address reported by the MCU response event-addr, a device-controlled le32 a...

CVE-2026-80935

CVE-2026-80935 affects the Linux kernel mt76 Wi-Fi driver for MediaTek MT7996 devices. The function mt7996_mcu_get_eeprom() uses a device-controlled 32-bit address (event->addr) as a destination offset into dev->mt76.eeprom.data without bounds-checking it, only clamping the copy length. A m...

Komfy-Switch-Wifi-Password-Disclosure

Komfy-Switch-Wifi-Password-Disclosure Introducción Este writeup detallará mi hallazgo en el Komfy Switch with Camera de D-Link para recuperar el SSID y la contraseña wifi asociados al dispositivo a través de bluetooth 4.0 BLE. El Komfy switch es un producto de seguridad y automatización para el...

Google-Nest-Cam-Bug-Disclosures

Google-Nest-Cam-Bug-Disclosures Afectados: Dropcam Pro, modelos Nest Cam Indoor/Outdoor Última compilación afectada: 205-600052 Compilación parcialmente corregida: 205-600055 ACTUALIZACIÓN La última versión de firmware 205-600055 no corrige la vulnerabilidad de desasociación WiFi en Dropcam Pro. ...

KawaiiDeauther

KawaiiDeauther Kawaii Deauther is a pentest toolkit whose goal is to perform jam on WiFi clients/routers and spam many fake AP for testing purposes. Dependencies macchanger mdk3 nmcli Installation Dependencies will be automatically installed. root@kitploit: $ git clone...

lscript

The lazy script has not been updated for a while due to me being very busy with my life. I will try my best to upload an update when I find the time Welcome to the LAZY script v2.1.4 A video Hackersploit made : https://www.youtube.com/watch?v=oBpo5sElrMY A video sstec made:...

WiFi-Pumpkin-deprecated

Este repositorio está ⛔️ OBSOLETO, ¡se ha lanzado wifipumpkin3, échale un vistazo! WiFi-Pumpkin - Framework para Ataques de Punto de Acceso Wi-Fi Falso Descripción WiFi-Pumpkin es un framework de AP falso para crear fácilmente estas redes fraudulentas, mientras se reenvía tráfico legítimo hacia y...

AR150-WiFiPineapple

¡DEPRECADO! Este proyecto fue deprecado en favor de su hermano menor Universal Wifi pineapple hardware cloner https://github.com/xchwarze/wifi-pineapple-cloner Allí puedes encontrar el firmware para el AR150 junto con otros firmwares para otros dispositivos e incluso el método que desarrollé para...

PT-2026-90066

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlo pm work on stop mt7925 queues mlo pm work with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work...

AlmaLinux 10 : kernel (ALSA-2026:65334)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:65334 advisory. kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: Bluetooth: SMP: force responder MITM requirements before building...

PT-2026-90068

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex mt7615 suspend acquired the mt76 mutex and then called cancel delayed work sync on mac work. mt7615 mac work acquires the same mutex via mt7615 mutex acquire at...

PT-2026-90239

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel pending mlo pm work If the device is reset, suspended or unregistered within that window, the pending work can still run and access vif/bss data that may already be freed, or send MCU commands while the...

wificurse

Este programa escucha las balizas enviadas por puntos de acceso inalámbricos dentro del rango de su estación inalámbrica. Una vez recibidas, el programa extrae el BSSID del AP y transmite paquetes de desautenticación usando la dirección MAC de difusión. Esto provoca la desconexión de todos los...

create_ap

NOT MAINTAINED This project is no longer maintained. Forks and continuation of this project linux-wifi-hotspot - Fork that is focused on providing GUI and improvements. linux-router - Fork that is focused on providing new features and improvements which are not limited to WiFi. Some interesting...

ios-nehelper-wifi-info-0day

Nehelper Wifi Info 0-day iOS 15.0 He actualizado este código para evitar usar la API privada directamente. Leer más en mi entrada de blog. Sin embargo, eso significa que ahora este código es específico de la versión de iOS y posiblemente específico del modelo de dispositivo. Así que, si no funcio...

DroneCamera

DroneCamera Una aplicación Android para ver la transmisión de video en vivo de los drones FPV HASAKEE. Creada mediante ingeniería inversa del protocolo UDP propietario utilizado por la cámara WiFi del dron. Dron compatible Dron FPV HASAKEE SSID WiFi: HASAKEE-WiFi-XXXXX Cámara VGA que utiliza el...

CVE-2021-1965

CVE-2021-1965 CVE-2021-1965 WiFi Zero Click RCE Trigger PoC This is a quick&dirty Proof-of-Concept code to verify if your phone is vulnerable. After running the poc code, your phone is supposed to crash&reboot within seconds. In case you need more info about the bug & vulnerable code, here you ar...

RockyLinux 10 : kernel (RLSA-2026:65334)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:65334 advisory. kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: Bluetooth: SMP: force responder MITM requirements before buildin...