CVE-2025-63353

CVE-2025-63353 PoC - FiberHome HG6145F1 PSK Wi-Fi predefinito prevedibile Toolkit di ricerca educativa e PoC multilingue per CVE-2025-63353 , una vulnerabilità critica di PSK predefinito prevedibile che colpisce i dispositivi GPON ONT FiberHome HG6145F1 RP4423. Riepilogo La chiave pre-shared Wi-F...

wificurse

Questo programma ascolta i beacon inviati dai punti di accesso wireless nel raggio della tua stazione wireless. Una volta ricevuti, il programma estrae il BSSID dell'AP e trasmette pacchetti di deautenticazione utilizzando l'indirizzo MAC broadcast. Questo causa la disconnessione di tutti i clien...

Damn-Vulnerable-Android-Components

The Damne Vulnerable Android Components - DVAC Il setaccio rinato! Damn Vulnerable Android Components DVAC è un'applicazione Android educativa intenzionalmente progettata per esporre e dimostrare vulnerabilità relative a vari componenti Android come Activity, Intent, Content Provider e Broadcast...

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

Android-Passive-Location-Tracker

Android-Passive-Location-Tracker App di localizzazione passiva senza richiedere esplicitamente autorizzazioni di posizione! Sfrutta la CVE-2018-15835 che sfrutta la perdita di informazioni del sistema operativo Android attraverso gli intent di broadcasting...

EUVD-2026-64553

In the Linux kernel, the following vulnerability has been resolved: xdp: reject clones that overrun skbsharedinfo tailroom xdpfclone clones broadcast copies into a single page and sets framesz to PAGESIZE. xdpbuildskbfromframe later treats that page like a normal XDP frame and expects the usual...

CVE-2026-74616

CVE-2026-74616 affects the Linux kernel XDP (eXpress Data Path) subsystem. The flaw resides in xdpf_clone(), which clones broadcast copies into a single page and sets frame_sz to PAGE_SIZE. The existing size check only validates that the linear xdp_frame header, headroom, and packet data do not e...

CVE-2026-74616 xdp: reject clones that overrun skb_shared_info tailroom

In the Linux kernel, the following vulnerability has been resolved: xdp: reject clones that overrun skbsharedinfo tailroom xdpfclone clones broadcast copies into a single page and sets framesz to PAGESIZE. xdpbuildskbfromframe later treats that page like a normal XDP frame and expects the usual...

asus-cmd

ASUS Router infosvr UDP Broadcast root Command Execution Diversi modelli di router ASUS includono un servizio chiamato infosvr che resta in ascolto sulla porta broadcast UDP 9999 sull'interfaccia LAN o WLAN. Viene utilizzato da uno strumento ASUS per facilitare la configurazione del router...

Malicious code in broadcast-graphics-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48987a1a0ccff7dce1134e1a98122cd902961ac34ba623ae0e2fef62f75fe213 The package's postinstall script runs automatically on npm install and collects host identifiers from the installer machine os.hostname, platform,...

Linux Distros Unpatched Vulnerability : CVE-2026-72116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: fix stale rx/tx ops after device removal RX: an RXSETUP update! for an existing op skipped canrxregister unconditionally, even when a concurrent...

CVE-2026-72810

SiYuan versions before v3.7.4 contain a publish-boundary bypass vulnerability in WebSocket broadcast sessions that allows anonymous readers to receive unfiltered edits. Attackers can establish a WebSocket connection to the publish surface and passively receive real-time content events including...

PT-2026-71980

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description A publish-boundary bypass exists in WebSocket broadcast sessions. This allows anonymous readers to establish a WebSocket connection to the publish surface and passively receive real-time content event...

CVE-2026-73308

Budibase CVE-2026-73308 affects the server-side automation handling prior to version 3.39.25. The issue arises in packages/server/src/api/controllers/automation.ts (and testProgress.ts) where automation test results exposed trigger.outputs.user.oauth2 and were broadcast to the app room without pr...

CVE-2026-73308 Budibase: OAuth2 Token Disclosure via Automation Test Results Broadcast to Other Builders

Budibase is an open-source low-code platform. Prior to 3.39.25, packages/server/src/api/controllers/automation.ts returned automation test results containing trigger.outputs.user.oauth2, broadcast BuilderSocketEvent.AutomationTestProgress to the app room, and stored progress in...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Discard Beacon frames sent to non-broadcast addresses Beacon frames are required to be sent to the broadcast address. See IEEE Std 802.11-2020, 11.1.3.1: “The ‘Address 1’ field of the Beacon frame shall be set to...

CVE-2025-71411

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71411 In CPDLC, Broadcast Control Frames Can Disconnect Multiple Aircraft Simultaneously

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71411

The CVE-2025-71411 entry describes a CPDLC-related issue where broadcast control frames can remotely disconnect multiple aircraft, causing delayed clearances and ATC overload. Affected component is broadcast/control frames in CPDLC; root cause and vendor/version details are not specified in the p...

EUVD-2025-210652

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...