222 matches found
pico-usb-wifi
= pico-usb-wifi :toc: macro :toclevels: 3 :idprefix: :idseparator: - pico-usb-wifi is firmware for the Raspberry Pi Pico W that turns it into a driverless USB Wi-Fi adapter, enumerating as a USB CDC-NCM device. :figure-caption: AI Slop .pico-usb-wifi Diagram...
spb
spb Shortest Path Bridging vulnerability testing scripts used to find CVE-2016-2783...
mediator
Mediatorは、オペレーターとシェルが接続をブリッジする「mediator」サーバーに接続する、エンドツーエンド暗号化されたリバースシェルです。これにより、オペレーター/ハンドラーが接続を待ち受けるためにポートフォワーディングを設定する必要がなくなります。Mediatorでは、リバースシェルの機能を拡張するプラグインを作成することもできます。 Mediatorのスクリプトはスタンドアロンの実行可能ファイルとして実行することも、他のペネトレーションテストやインシデントレスポンスツールに統合するためにインポートすることもできます。 アーキテクチャ:...
BridgeBlock
BridgeBlock BridgeBlock es una aplicación de barra de menú que previene ataques de puente inalámbrico detectando condiciones de puente y tomando medidas. También tiene una versión de línea de comandos para administradores de sistemas. Patrocinadores: Instalación Lanzamientos de GitLab Los archivo...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: don't assume adequate headroom for SDIO headers mt7921usbsdiotxprepareskb calls mt7921usbsdiowritetxwi and mt7921skbaddusbsdiohdr, both of which blindly assume that adequate headroom will be available in the passed...
PT-2026-64651
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the ntb epf vec isr function calls pci irq vector within a hardirq context to determine the vector number. Because pci irq vector subsequently calls msi get virq,...
PYSEC-2026-3522 PraisonAI: Compute-bridged file tools allow shell command injection
Compute-bridged file tools allow shell command injection Summary LocalManagedAgent / SandboxedAgent compute bridging wraps readfile, listfiles, and writefile when a compute provider is attached. The bridge converts those file operations into shell command strings using raw path arguments, then...
CVE-2026-49098
A flaw was found in the Apache Camel Kafka Component. A remote attacker can exploit an improper input validation vulnerability by manipulating specific Kafka headers, such as kafka.OVERRIDETOPIC, when an HTTP consumer bridges into a Kafka producer. This allows the attacker to redirect messages to...
CVE-2026-49097
CVE-2026-49097 affects Apache Camel’s Camel-IRC component. The issue arises when outbound IRC message destinations are taken from non-Camel header names (irc.sendTo and related irc.* headers), which bypass the HTTP header filter. In routes bridging HTTP to irc:, an attacker could set irc.sendTo t...
CVE-2026-49097
Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel IRC component. The camel-irc producer chooses the destination of an outgoing IRC message from the irc.sendTo Exchange header the constant...
PraisonAI: Compute-bridged file tools allow shell command injection
Compute-bridged file tools allow shell command injection Summary LocalManagedAgent / SandboxedAgent compute bridging wraps readfile, listfiles, and writefile when a compute provider is attached. The bridge converts those file operations into shell command strings using raw path arguments, then...
Can I Check What I Designed? Mapping Security Design DSLs to Code Analyzers
When assessing the potential impact of code-level vulnerabilities, e.g., discovered by automated analyzers, it is essential to consider them in the context of the system's security design. However, this is a challenging task due to the abstraction gap between security design, often specified usin...
CVE-2026-33773 Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied
An Incorrect Initialization of Resource vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on specific EX Series and QFX Series device allows an unauthenticated, network-based attacker to cause an integrity impact to downstream networks. When the same family inet or...
OpenClaw 访问控制错误漏洞
OpenClaw is an open-source intelligent artificial assistant. Versions of OpenClaw prior to 2026.2.14 contained a access control vulnerability. This vulnerability stemmed from the sandbox browser bridging server not requiring gateway authentication, which could allow local attackers to access...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005499)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005499 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dcb: choose correct policy to parse DCBATTRBCN The dcbnlbcnsetcfg uses erroneous policy to...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005615)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005615 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dcb: choose correct policy to parse DCBATTRBCN The dcbnlbcnsetcfg uses erroneous policy to...
Elysium-Vanguard-Honor-Tool-Kit
🌌 Elysium Vanguard Honor Tool Kit: TITAN v13.0 Hardware-B...
CVE-2025-64125
A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 December, 2025. End users do not have to take any action to mitigate the issue...
CVE-2025-64123
Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Network Boundary Bridging.This issue affects Multi-Stack Controller MSC: through and including release 2.5.1...
CVE-2025-64125
A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 December, 2025. End users do not have to take any action to mitigate the issue...