GHOST

GHOST 通用黑客与观察安全工具 适用于 Adafruit ESP32-S3 Reverse TFT Feather 的独立 WPA/WPA2 握手包捕获 固件：内置 240×135 TFT 和 三个按钮 —— 正常使用无需配套手机应用或浏览器。捕获内容以 .pcap 格式保存到 LittleFS；Captures → Download AP 会开放一个小型 WiFi 网络，以便你在另一台设备上列出并下载文件。 仅限教育和授权测试使用。 只能在你拥有或明确获得测试许可的网络上使用。 功能说明 在授权目标上，固件可以发送去认证帧，在客户端重连时捕获 WPA 4...

uC_mousejack

μC Mousejack Microcontrolador Mousejack es un proyecto para llevar los ataques de Mousejack a un pequeño dispositivo embebido, con el factor de forma de un llavero. Dispositivo prototipo Mousejack Nuestra primera iteración utiliza una placa protoboard Adafruit Feather 32u4 y un módulo NRF24L01+...

BLEBoy

BLEBoy Ziel Ein BLE-Peripheral erstellen, das alle BLE-Pairing-Methoden unterstützt, die für Training und Tests verwendet werden können, einschließlich Out-of-Band-Pairing OOB. Das Peripheral muss konfigurierbar und mit handelsüblichen Bauteilen einfach nachzubauen sein. Überblick BLEBoy ist ein...

CVE-2023-49861

Missing Authorization vulnerability in socialmediafeather Social Media Feather social-media-feather allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Media Feather: from n/a through = 2.1.3...

CVE-2025-62107

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through = 1.1.7...

CVE-2025-62107

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through = 1.1.7...

CVE-2025-62107 WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through = 1.1.7...

CVE-2025-62107 WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through = 1.1.7...

CVE-2025-62107

This CVE concerns a Cross-Site Request Forgery (CSRF) vulnerability in the PluginOps Feather Login Page for WordPress, affecting versions up to 1.1.7. The underlying issue allows an attacker to perform actions on behalf of an authenticated user on Feather Login Page. Concrete affected item: Feath...

EUVD-2025-204705

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through 1.1.7...

WordPress plugin Feather Login Page 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

PT-2025-52639

Name of the Vulnerable Software and Affected Versions PluginOps Feather Login Page versions through 1.1.7 Description A Cross-Site Request Forgery CSRF issue exists in PluginOps Feather Login Page. This allows attackers to perform actions on behalf of an unsuspecting user. Recommendations Update...

WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by daroo in WordPress Plugin Feather Login Page versions = 1.1.7...

EUVD-2021-23424

Malware in sbrugna...

EUVD-2023-34024

Malicious code in bioql PyPI...

EUVD-2023-53769

Malicious code in bioql PyPI...

EUVD-2022-7140

Malicious code in bioql PyPI...

EUVD-2024-29781

Malicious code in bioql PyPI...

CVE-2024-31923

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page.This issue affects Feather Login Page: from n/a through 1.1.5...

CVE-2023-2547

The Feather Login Page plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'deleteUser' function in versions starting from 1.0.7 up to, and including, 1.1.1. This makes it possible for authenticated attackers, with subscriber-level permissions...