260 matches found
phantom-brain
PHANTOM BRAIN v0.9 Offline AI-powered pentesting analysis tool with real hardware integration Local LLM analysis via Ollama for WiFi, Sub-GHz, NFC/RFID and WPA2 captures — no internet required, no cloud APIs, 100% offline. The main LLM runs on a Windows PC. The Raspberry Pi acts as a lightweight...
Improper exception handling vulnerability in Brain ADM-ZIP for NodeJS
The Brain ADM-ZIP for NodeJS versions prior to 0.6.1 contain an improper exception handling vulnerability. This flaw stems from the lack of error monitoring for the zlib stream in the inflateAsync method within methods/inflater.js. When an attacker supplies a malicious ZIP file containing corrupt...
The Brain ADM-ZIP for NodeJS: Resource management error vulnerability
The Brain ADM-ZIP for NodeJS version 0.6.0 has a resource management vulnerability. This vulnerability stems from bypassing compression bomb protection. Attackers can exploit the asynchronous getDataAsync method in methods/inflater.js to bypass the maxOutputLength protection and create ZIP entrie...
The Brain ADM-ZIP for NodeJS has vulnerabilities related to permissions and access control.
The Brain ADM-ZIP for NodeJS versions prior to 0.6.1 has a vulnerability related to permission granting and access control. This vulnerability arises from improper permission allocation when keepOriginalPermission is enabled. An attacker can manipulate the properties of external zip files, allowi...
The Brain ADM-ZIP for NodeJS processing logic has a vulnerability in its handling of errors.
The Brain ADM-ZIP for NodeJS versions prior to 0.6.1 has a processing logic vulnerability. This vulnerability stems from inconsistent entry parsing: the getEntry function returns the last duplicate entry, while the extractAllTo function writes the first duplicate entry. This allows attackers to...
Trina
Trina · 全自动渗透测试 Agent（omp 二开）：ReAct 决策大脑 17 个渗透工具 多靶场适配 合规护栏 报告与评测...
Organizational Context for the Enterprise Security Brain
Agents that investigate and decide on enterprise security reason over a machine-readable view of the environment: its assets, identities, configurations, relations, and findings. The correct judgment about an asset also depends on what the organization knows about it: who owns it, what business...
EUVD-2026-80739
In Sooma 2GEN brain stimulator, an attacker within Bluetooth range can make unauthenticated changes to brain stimulation parameters...
CVE-2026-85104 Brain stimulation parameters can be modified via Bluetooth in Sooma
In Sooma 2GEN brain stimulator, an attacker within Bluetooth range can make unauthenticated changes to brain stimulation parameters...
CVE-2026-85104
CVE-2026-85104 affects the Sooma 2GEN brain stimulator. An attacker within Bluetooth range can make unauthenticated changes to brain stimulation parameters, meaning no credentials are required to alter therapy settings on the device. The vulnerability is classified with a CVSS 4.0 base score of 5...
CVE-2026-85104: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
In Sooma 2GEN brain stimulator, an attacker within Bluetooth range can make unauthenticated changes to brain stimulation parameters...
PT-2026-93738
Name of the Vulnerable Software and Affected Versions Sooma 2GEN brain stimulator affected versions not specified Description An attacker within Bluetooth range can make unauthenticated changes to brain stimulation parameters. Recommendations At the moment, there is no information about a newer...
NERVE Attacks: Breaking AI-Powered Brain-Computer Interfaces
The rapid integration of AI into human-centred systems such as Brain-Computer Interfaces BCIs has created a poorly understood attack surface linking neural signals to physical systems. Exploits in this domain threaten cognitive autonomy, mental privacy, and physical safety, from neural data...
CVE-2026-18164 Flow Neuroscience FL-100 Use of Hard-coded Credentials
An undocumented hard-coded credential, shared by all device units, is authorized to bypass authentication. This allows an attacker within Bluetooth range to arbitrarily manipulate brain stimulation parameters and state...
EUVD-2026-58274
An undocumented hard-coded credential, shared by all device units, is authorized to bypass authentication. This allows an attacker within Bluetooth range to arbitrarily manipulate brain stimulation parameters and state...
CVE-2026-18164
The CVE concerns Flow Neuroscience FL-100 with an undocumented hard-coded credential that bypasses authentication. The credential is shared across all device units, allowing an attacker within Bluetooth range to arbitrarily manipulate brain stimulation parameters and state. Affected component is ...
Flow Neuroscience FL-100
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker within Bluetooth range to manipulate brain stimulation parameters and override safety limits. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...
CVE-2026-18164: Use of Hard-coded Credentials
An undocumented hard-coded credential, shared by all device units, is authorized to bypass authentication. This allows an attacker within Bluetooth range to arbitrarily manipulate brain stimulation parameters and state...
PT-2026-71745
An undocumented hard-coded credential, shared by all device units, is authorized to bypass authentication. This allows an attacker within Bluetooth range to arbitrarily manipulate brain stimulation parameters and state...
