wifi-pentesting-guide

WiFi 渗透测试指南 目录 1. 基本命令 2. 开放网络 2.1. 认证门户 2.2. 中间人攻击 3. WEP 破解 3.1. 无客户端 4. WPA2-PSK 破解 4.1. 破解四次握手 4.2. PMKID 攻击 4.3. 无 AP 攻击 5. WPA2-企业版 5.1. 伪造接入点 5.2. 暴力破解 5.3. 支持的 EAP 方法 6. 其他攻击 6.1. Krack 攻击与 Frag 攻击 6.2. OSINT 6.3. WiFi 干扰 6.4. 其他框架 7. 后渗透 7.1. 攻击路由器 7.2. 扫描器类型 7.3. 欺骗 1. 基本命令 设置环境变量...

CVE-2026-98157

A flaw was found in the Linux kernel's Error Detection and Correction EDAC subsystem. The sysfs interface for device polling improperly validated input values when configuring the polling interval, allowing integer truncation and zero-delay settings. A local user with write permissions to the...

CVE-2025-27591

CVE-2025-27591 description Basically below tool allow for universal modification on its log file which lead to privilege escalation as root. details. The log file created by below is world-writable, allowing any user to modify or replace it. An attacker can exploit this by creating a symbolic lin...

CVE-2026-87114

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...

CVE-2026-101894

The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompressinput, output API relies on lexical containment checks that do not account for the kernel following a planted symlink chain. An attacker can supply a crafted archive containing chained symlink...

CVE-2026-101082

A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of the argument FullFileName/FileName causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public an...

CVE-2026-101098

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pu...

CVE-2026-101081

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

CVE-2026-97514

A flaw was found in the Linux kernel's Chips Wave5 video processing driver. Improper synchronization during dynamic resolution changes allows functions that may sleep to run while holding an atomic lock, and permits state changes without required locks held. A local user with access to the video...

EUVD-2026-88369

A vulnerability was detected in ag-ui-protocol ag-ui up to 2026-09-23. This affects an unknown part of the file SseParser.kt of the component Kotlin Community SDK. Performing a manipulation results in handling of exceptional conditions. The attack may be initiated remotely. The pull request to fi...

CVE-2026-101099

A vulnerability exists in the Kotlin Community SDK component of ag-ui-protocol ag-ui (up to 2026-09-23). The issue is located within the SseParser.kt file, where a specific manipulation can trigger the handling of exceptional conditions . This vulnerability may be exploited remotely . A pull requ...

CVE-2026-98154

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over RDMA Remote Direct Memory Access driver. This vulnerability can lead to a Denial of Service DoS due to improper error cleanup during request processing. When an input/output I/O communication error occurs while queuing a...

SecOPD

SecOPD: Mitigating Adaptive Prompt Injections by On-Policy Distillation Yibo Peng · Long Lian · David Wagner† · Sizhe Chen† † Joint supervision. Paper Project page Model This release implements the paper's final full-response KL formulation, also described as the no-parsing variant. The student...

CVE-2026-101098

A security vulnerability exists in the ag-ui-protocol ag-ui software (versions up to 2026-09-23). The flaw is located in the readAllBytes function within the JdkAgentHttpHandler.java file of the HTTP Handler component. Exploitation of this issue allows for remote resource consumption . A pull req...

EUVD-2026-88366

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file JdkAgentHttpHandler.java of the component HTTP Handler. Such manipulation leads to resource consumption. The attack can be launched remotely. The pu...

CVE-2010-4231-EXPLOIT

CVE-2010-4231 - Vulnerabilidad de Directory Traversal en Cámaras IP Camtron y TecVoz CVE-2010-4231 es una vulnerabilidad de directory traversal que existe en la interfaz de administración basada en web de la Cámara IP Camtron CMNC-200 Full HD y la Cámara IP TecVoz CMNC-200 Megapíxel. La...

CVE-2022-20866

RSA密钥检查工具（用于CVE-2022-20866） 运行Cisco自适应安全设备（ASA）软件和Firepower威胁防御（FTD）软件的设备在处理RSA密钥时存在漏洞，此漏洞可能允许未经身份验证的远程攻击者检索RSA私钥。该漏洞是由于在硬件加密平台上将RSA密钥存储于内存时出现逻辑错误所致。攻击者可通过针对目标设备实施Lenstra侧信道攻击来利用此漏洞。成功利用后，攻击者可获取RSA私钥。 受漏洞影响的设备可能出现以下情况： RSA密钥可能格式错误且无效。格式错误的RSA密钥无法正常工作，若TLS客户端连接到使用此类错误RSA密钥的Cisco...

EUVD-2026-88362

An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session...

CVE-2026-97510

A flaw was found in the Linux kernel's Thunderbolt subsystem. When handling communication responses, a failure to set up a configuration request—such as when the control channel is already shut down—causes the system to return an error without releasing allocated memory. A local user or repeated...

CVE-2026-97509

A flaw was found in the Linux kernel's Thunderbolt subsystem. A local attacker could exploit this issue to cause a Denial of Service DoS or potentially execute arbitrary code. The vulnerability occurs because the driver fails to maintain a reference to the parent domain device during the lifetime...