pico-usb-wifi

= pico-usb-wifi :toc: macro :toclevels: 3 :idprefix: :idseparator: - pico-usb-wifi — это прошивка для Raspberry Pi Pico W, превращающая её в бездрайверный USB Wi-Fi адаптер, определяемый как USB CDC-NCM устройство. :figure-caption: AI Slop .Диаграмма pico-usb-wifi...

Project-Pwnag0dchi

Проект Pwnag0dchi Создал это, так как многие спрашивали о кастомных плагинах и конфигурациях, которые я использую. Следуя этому руководству, ваш Pwnagotchi будет выглядеть точно так, как в моих соцсетях и видео на YouTube, примерно за 5 минут. Вы также найдете здесь полное руководство по сборке...

wifit3

wifit3 A standalone USB Wi-Fi auditor for Linux, Windows, and macOS. At least one of the supported USB adapters is required. Why? Cross-Platform: Runs identically on Linux, macOS, and Windows. Wireless Driver Heaven: Built-in wireless stack avoids kernel driver versioning hell and Windows' NDIS...

pi-pwnbox-rogueap

Pi-PwnBox 🚀 -RogueAP 📡 Самодельная безголовая PwnBox / RogueAP на основе Raspberry Pi и USB-адаптеров Alfa WiFi. Шпаргалки и ментальная карта по взлому WiFi 💡 Предназначена для использования в: Выездных Red Team-заданиях, Оценках безопасности WiFi, Практике атак на WiFi. Содержание...

CVE-2025-58179-Check

CVE-2025-58179-Check CVE-2025-58179-Check 은는 Astro 프레임워크의 /image 엔드포인트에서 SSRFServer-Side Request Forgery / 콘텐츠 스푸핑 취약점을 확인하는 간단한 Python 스크립트입니다. 이 취약점은 GHSA-qpr4-c339-7vq8 및 CVE-2025-58179로 추적됩니다. 취약점 배경 이 취약점은 output: 'server' 구성으로 @astrojs/cloudflare 어댑터를 사용하는 Astro 사이트에 영향을 미칩니다. 이미지를 최적화해야 하는...

Astro Cloudflare Adapter - Server Side Request Forgery

Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URL...

FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

Summary The published fix for GHSA-v6ph-xcq9-qxxj / CVE-2026-39885 added a direct hostname denylist for OpenAPI external $ref dereferencing, but the latest patched dependency mcp-from-openapi 2.3.0 still makes backend-origin requests to loopback when the target is reached through hostname...

axios: Axios: Information disclosure of proxy credentials via redirect flows

A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final...

axios: Axios: Denial of Service due to unenforced request and response size limits

A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or...

axios: Axios: Information disclosure of proxy credentials via HTTP redirects

A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can...

GHSA-P569-5GJG-9CMJ rclone: RC per-server auth-proxy bypass

Summary serve/start accepts protocol options in a per-server proxyOpt object. The FTP and S3 RC adapters parse that object and pass it to their server constructors, but the constructors decide whether proxy authentication is enabled by checking the process-global proxy.Opt.AuthProxy instead of th...

axios: Axios: Information disclosure of proxy credentials via HTTP redirects

A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can...

axios: Axios: Denial of Service due to unenforced request and response size limits

A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or...

axios: Axios: Information disclosure of proxy credentials via redirect flows

A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final...

CLEANSTART-2026-BR58082 Echo is a Go web framework

Multiple security vulnerabilities affect the kube-metrics-adapter package. Echo is a Go web framework. See references for individual vulnerability details...

CVE-2026-87806

Parse Server versions = 9.0.0 9.10.1-alpha.7 contain an authentication bypass in the built-in LDAP authentication adapter. The adapter forwarded the client-supplied password to the directory without verifying that a password had been supplied, and treated any non-error response from the directory...

CVE-2026-87806

Parse Server versions = 9.0.0

CVE-2026-87806 Parse Server 9.0.0 Authentication Bypass via LDAP Empty Password

Parse Server versions = 9.0.0 9.10.1-alpha.7 contain an authentication bypass in the built-in LDAP authentication adapter. The adapter forwarded the client-supplied password to the directory without verifying that a password had been supplied, and treated any non-error response from the directory...

quick-fix-cve-2024-38063

quick-fix-cve-2024-38063 быстрый powershell скрипт для исправления cve-2024-38063 Пожертвования если вы хотите поддержать мою работу, вы можете сделать пожертвование по следующему monero адресу: root@kitploit:...

SAP NetWeaver AS Java Denial of Service (3736494)

The version of SAP NetWeaver Application Server Java detected on the remote host is affected by a denial of service vulnerability as referenced in SAP Security Note 3736494: - SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested...