CVE-2026-82488 Beetel 450TC3 User Management cross site scripting

A vulnerability was identified in Beetel 450TC3 01.00.0001. This vulnerability affects unknown code of the component User Management. The manipulation of the argument Username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and...

EUVD-2026-68180

A vulnerability was identified in Beetel 450TC3 01.00.0001. This vulnerability affects unknown code of the component User Management. The manipulation of the argument Username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and...

Arduino_mousejack

Arduino Mousejack ShutDô Arduino Mousejack is a project, based on uCmousejeck by insecuritythings , to get Mousejack attacks into a small embedded device, with the form factor of a key chain. Prototype Mousejack Device Building the device is straight-forward, and the code provides a tool to use...

Ivanti-EPM-Coercion-Vulnerabilities

Ivanti EPM Coercion Vulnerabilities Proof of concept exploits for Ivanti EPM CVE-2024-13159 and others which allows for unauthenticated coercion of the Ivanti EPM machine credential for use in relay attacks. Blog Post Deep-dive analysis here:...

CVE-2023-0045

Bypassing Spectre-BTI User Space Mitigations on Linux This is a working document, please send us feedback if you think we got something wrong or if we missed a citation Version 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introduction When testing the success rate of Spectre-BTI attacks, we...

commando-vm

What is CommandoVM? Complete Mandiant Offensive VM "CommandoVM" is a comprehensive and customizable, Windows-based security distribution for penetration testing and red teaming. CommandoVM comes packaged with a variety of offensive tools not included in Kali Linux which highlight the effectivenes...

CVE-2026-82487 Beetel 450TC3 password recovery

A vulnerability was determined in Beetel 450TC3 01.00.0001. This affects an unknown part. Executing a manipulation can lead to weak password recovery. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this...

CVE-2026-82487

Beetel 450TC3 router (firmware 01.00.00_01 ) is affected by a weak password recovery vulnerability that enables authenticated privilege escalation . The attack is executable remotely with low privileges and no user interaction. The affected component is described as an unknown part in the provide...

EUVD-2026-68177

A vulnerability was determined in Beetel 450TC3 01.00.0001. This affects an unknown part. Executing a manipulation can lead to weak password recovery. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this...

Bluetooth-Attacks-CVE-2025-27840

This paper discusses how an attacker can introduce a hidden list of vulnerabilities through module updates, which can lead to compromise of ESP32 devices and gaining unauthorized access to private keys, affecting billions of devices using this microcontroller. One of the key issues is the...

OSTE-Web-Log-Analyzer

OSTE-Web-Log-Analyzer Automate the process of analyzing web server logs with the Python Web Log Analyzer. This powerful tool is designed to enhance security by identifying and detecting various types of cyber attacks within your server logs. Stay ahead of potential threats with features that...

CVE-2023-4450-Attack

CVE-2023-4450-Attack An automated tool for attacking the CVE-2023-4450 vulnerability in JimuReport Introduction This tool is only for security testing, do not use it for illegal purposes! Usage root@kitploit: java -jar CVE-2023-4450-Attack.jar Provides three functions: command execution,...

rbcd-attack

إساءة استخدام تفويض Kerberos المقيد القائم على الموارد الملخص التنفيذي هذا المستودع يتعلق بهجوم عملي ضد تفويض Kerberos المقيد القائم على الموارد في مجال ويندوز Active Directory. الفرق عن التطبيقات الأخرى الشائعة هو أننا نشن الهجوم من خارج مجال ويندوز ، وليس من جهاز كمبيوتر منضم للمجال عادة ما يكو...

rbcd-attack

Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...

Arkhota

Arkhota, a web brute forcer for Android What? Arkhota is a web HTTP/S brute forcer for Android OS. Why? A web brute forcer is always in a hacker's computer, for obvious reasons. Sometimes attacks require to be quick or/and with minimal device preparation. Also a phone takes less attention rather...

Covenant

Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers. Covenant is an ASP.NET Core, cross-platform application that includes a...

Sec5GLoc

Sec5GLoc : sécuriser la localisation intérieure 5G grâce à une architecture d'apprentissage profond résiliente aux adversaires Notre travail aborde les défis de sécurité et de confidentialité dans la localisation intérieure 5G en proposant une architecture d'apprentissage profond résiliente aux...

confluencePot

confluencePot ConfluencePot is a simple honeypot for the Atlassian Confluence unauthenticated and remote OGNL injection vulnerability CVE-2022-26134. About the vulnerability You can find the official advisory by Atlassian to this vulerability here. For details about the inner workings and exploit...

CVE-2024-8190

CVE-2024-8190: حقن أوامر بعد المصادقة في Ivanti Cloud Service Appliance إثبات مفهوم لاستغلال CVE-2024-8190 على الأجهزة القابلة للاستغلال. منشور المدونة السبب الجذري ومؤشرات الاختراق هنا: https://www.horizon3.ai/attack-research/cisa-kev-cve-2024-8190-ivanti-csa-command-injection/ الاستخدام...

VMProtect-devirtualization

VMProtect Devirtualization An experimental dynamic approach to devirtualize pure functions protected by VMProtect 3.x TL;DR Introduction The approach Example 1: A simple bitwise operation protected Example 2: A MBA operation protected Example 3: More than one basic block Conclusion and limitation...