73 matches found
reaver-wps-fork-t6x
Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...
AutoWIFI
Wireless penetration testing framework. Automates the full attack chain - recon through exploitation - with a clean terminal interface. Features Multi-vector attacks - WEP ARP replay, fragmentation, chopchop, WPA/WPA2 handshake capture, PMKID, WPS pixie dust, PIN brute force Smart target selectio...
reaver-wps-fork-t6x
Resumen Reaver implementa un ataque de fuerza bruta contra los PINs del registrador de Wifi Protected Setup WPS para recuperar contraseñas WPA/WPA2 , como se describe en Fuerza bruta a Wi-Fi Protected Setup: cuando un mal diseño se encuentra con una mala implementación. por Stefan Viehböck. Reave...
pixiewps
Resumen Pixiewps es una herramienta escrita en C utilizada para realizar un ataque de fuerza bruta fuera de línea al PIN de WPS aprovechando la baja o nula entropía de algunas implementaciones de software, el llamado "ataque pixie-dust" descubierto por Dominique Bongard en el verano de 2014. Está...
org.http4k:http4k-aws (3.34.3), org.http4k:http4k-contract (3.34.3) +1 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.34.3)
org.http4k:http4k-core MAVEN version 3.34.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.34.3 - org.http4k:http4k-contract 3.34.3 - org.http4k:http4k-template-dust 3.34.3 Source...
org.http4k:http4k-aws (3.22.3), org.http4k:http4k-client-apache (3.22.3) +10 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.22.3)
org.http4k:http4k-core MAVEN version 3.22.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.22.3 - org.http4k:http4k-client-apache 3.22.3 - org.http4k:http4k-client-apache-async 3.22...
Malicious code in dust-helpers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e08146748974a55b50e565bc0ae7fc1788c9b8a28858536c697505032334310 On npm install, the package's preinstall script runs node callback.js, which collects os.hostname, os.userInfo.username, process.cwd,...
org.http4k:http4k-aws (3.34.3), org.http4k:http4k-contract (3.34.3) +1 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.34.3)
org.http4k:http4k-core MAVEN version 3.34.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.34.3 - org.http4k:http4k-contract 3.34.3 - org.http4k:http4k-template-dust 3.34.3 Source...
org.http4k:http4k-aws (3.13.2), org.http4k:http4k-contract (3.13.2) +4 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.13.2)
org.http4k:http4k-core MAVEN version 3.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.13.2 - org.http4k:http4k-contract 3.13.2 - org.http4k:http4k-template-dust 3.13.2 -...
org.http4k:http4k-aws (3.34.3), org.http4k:http4k-contract (3.34.3) +1 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.34.3)
org.http4k:http4k-core MAVEN version 3.34.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.34.3 - org.http4k:http4k-contract 3.34.3 - org.http4k:http4k-template-dust 3.34.3 Source...
Dust Specter Targets Iraqi Officials with New SPLITDROP and GHOSTFORM Malware
A suspected Iran-nexus threat actor has been attributed to a campaign targeting government officials in Iraq by impersonating the country's Ministry of Foreign Affairs to deliver a set of never-before-seen malware. Zscaler ThreatLabz, which observed the activity in January 2026, is tracking the...
CVE-2021-41593
Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure...
CVE-2021-41591
ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure...
EUVD-2021-28607
Malicious code in bioql PyPI...
EUVD-2021-28606
Malicious code in bioql PyPI...
CVE-2021-41592
Blockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure...
Türkiye Hackers Exploited Output Messenger Zero-Day to Drop Golang Backdoors on Kurdish Servers
A Türkiye-affiliated threat actor exploited a zero-day security flaw in an Indian enterprise communication platform called Output Messenger as part of a cyber espionage attack campaign since April 2024. "These exploits have resulted in a collection of related user data from targets in Iraq," the...
Marbled Dust leverages zero-day in Output Messenger for regional espionage
Since April 2024, the threat actor that Microsoft Threat Intelligence tracks as Marbled Dust has been observed exploiting user accounts that have not applied fixes to a zero-day vulnerability CVE-2025-27920 in the messaging app Output Messenger, a multiplatform chat software. These exploits have...
Marbled Dust leverages zero-day in Output Messenger for regional espionage
Since April 2024, the threat actor that Microsoft Threat Intelligence tracks as Marbled Dust has been observed exploiting user accounts that have not applied fixes to a zero-day vulnerability CVE-2025-27920 in the messaging app Output Messenger, a multiplatform chat software. These exploits have...
PT-2025-19714
Name of the Vulnerable Software and Affected Versions Output Messenger versions prior to 2.0.63 Description Output Messenger is affected by a directory traversal issue caused by improper file path handling. Remote attackers can use ../ sequences in parameters to access sensitive files outside the...