EUVD-2026-80555

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix NULL deref in statusshow during queue probe When vfioapmdevprobequeue creates the sysfs attribute group, the queue's driver data has not yet been set. A concurrent read of the 'status' attribute can therefore ca...

EUVD-2026-80556

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix missing lock required to access list of apmatrixmdev objects In order to traverse or add/remove apmatrixmdev objects in the matrixdev-mdevlist, the matrixdev-guestslock mutex must be held. There are two function...

M5PORKCHOP

root@kitploit: Volume Zero, Issue 3, Phile 1 of 1 M5PORKCHOP README v0.1.8b-PSTH ^^ oo\ \ /\ ||----w | || || yes that's a cow. the pig ate the pig art budget. the horse was unavailable for comment. 67% of skids skip READMEs. 100% of those skids report bugs we documented. the horse thinks this is...

killosx

killosx Usa el exploit de Apple CoreText CVE-2012-3716 y lanza un AP para afectar a todos los dispositivos Apple vulnerables dentro del alcance wifi. Instalación: Ejecuta 'make install' en el directorio de killosx. Ahora killosx se puede ejecutar desde cualquier lugar con 'killosx'. Uso:...

PRISM-AP

PRISM-AP ACERCA DE: PRISM-AP es un framework automatizado de ataque MITM con RogueAP inalámbrico. CARACTERÍSTICAS: Fácil de configurar y usar, y totalmente automatizado Aprovecha el ataque wifi MANA para atraer conexiones de clientes Bypass parcial de HSTS mediante bettercap Intercepta y visualiz...

Wavlink Multiple AP - Remote Command Injection

Wavlink products are affected by a vulnerability that may allow remote unauthenticated users to execute arbitrary commands as root on Wavlink devices. The user input is not properly sanitized which allows command injection via the "key" parameter in a login request. It has been tested on Wavlink...

PrestaShop AP Pagebuilder <= 2.4.4 - SQL Injection

A SQL injection vulnerability in the productalloneimg and imageproduct parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data. id: CVE-2022-22897 info: name: PrestaShop AP Pagebuilder = 2.4.4 - SQL Injection...

AP Pricing Tables Lite <= 1.1.6 - SQL Injection

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins. id: CVE-2023-0900 info: name: AP Pricing Tables Lite = 1.1.6 - SQL Injection author: r3Y3r53 severity: high description: ...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

EUVD-2026-79780

Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2020-27301-hostapd

CVE-2020-27301-hostapd Rogue AP PoC for CVE-2020-27301 Build On Ubuntu 20.04 LTS root@kitploit: apt install libnl-genl-3-dev libssl-dev libsqlite3-dev libgnutls28-dev cd hostapd && make -j4 all Run In the hostapd directory, use root@kitploit: ./start.sh hostapd README wpasupplicant and hostapd...

xepor

Xepor Xepor pronounced /ˈzɛfə/ , zephyr is a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP requests and/or HTTP responses in a human-friendly coding style. This project is meant to be used with mitmproxy...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — PoC de desbordamiento de montón en el AP WLAN de MediaTek Exploit de prueba de concepto para CVE-2026-20452, un desbordamiento de búfer basado en montón en el controlador del punto de acceso WLAN de MediaTek. Vulnerabilidad CVE : CVE-2026-20452 CVSS : 8.0 ALTA CWE : CWE-122 —...

bugstropics

Cazando bugs en los trópicos Este es un repositorio con las diapositivas utilizadas en mi presentación «Hunting Bugs in the Tropics» en DEFCON30. Incluye el script de Python utilizado para calcular la contraseña de soporte basándose en la clave privada obtenida al romper la clave pública EC del...

CVE-2023-37073

CVE-2023-37073 Las credenciales predeterminadas de Telnet pueden provocar divulgación de información y ataques de denegación de servicio DoS. Pasos para reproducir Esto afecta al AP AR-5310 root@kitploit: Telnet 192.168.1.1 username:user password:user Then Boom ... You logged in Divulgación de...

ZyXel USG - Hardcoded Credentials

A hardcoded credential vulnerability was identified in the 'zyfwp' user account in some Zyxel firewalls and AP controllers. The account was designed to deliver automatic firmware updates to connected access points through FTP. id: CVE-2020-29583 info: name: ZyXel USG - Hardcoded Credentials autho...

KawaiiDeauther

KawaiiDeauther Kawaii Deauther is a pentest toolkit whose goal is to perform jam on WiFi clients/routers and spam many fake AP for testing purposes. Dependencies macchanger mdk3 nmcli Installation Dependencies will be automatically installed. root@kitploit: $ git clone...

CVE-2026-0709

Herramienta RCE Autenticada para Hikvision Wireless AP – CVE-2026-0709 Esta herramienta es una prueba de concepto en Python para probar puntos de acceso inalámbricos de Hikvision para CVE-2026-0709 , una vulnerabilidad de inyección de comandos autenticada que puede conducir a la ejecución remota ...

CVE-2026-51743

Incorrect access control in the guestwifisync function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to disable guest virtual AP interfaces via sending a crafted MQTT message to the csbroker component...

CVE-2026-51743

Incorrect access control in the guestwifisync function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to disable guest virtual AP interfaces via sending a crafted MQTT message to the csbroker component...