CVE-2026-81640 Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials

An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose the live video stream, device services, status interfaces, and firmware-update functionality...

ESPTouchCatcher

eWeLink移动应用 - 不正确的访问控制漏洞（CVE-2020-12702） eWeLink移动应用（Android应用V4.9.2及更早版本，iOS应用V4.9.1及更早版本）的快速配对模式中存在弱加密，允许物理邻近的攻击者通过监听配对过程中的Wi-Fi频谱来窃听Wi-Fi凭证和其他敏感信息。 漏洞利用脚本 eWeLinkESPT是一个利用CVE-2020-12702漏洞的python3脚本。eWeLinkESPT自动解码并解密 eWeLink 移动应用在 快速配对 关联过程中传输的WiFi网络凭证。具体来说，该工具逆向分析了 eWeLink 对 ESP Touch...

eWeLink-QR-Code

eWeLink 移动应用 - 不正确的访问控制漏洞 CVE-2021-27941 在 eWeLink 移动应用（Android 版至 4.9.2，iOS 版至 4.9.1）的二维码配对模式中，对设备私有加密密钥的无限制 Web 访问，使得物理邻近的攻击者能够通过监听设备配对过程中的 Wi-Fi 频谱，窃听 Wi-Fi 凭据及其他敏感信息。 配对协议及漏洞详情 从用户角度来看，通过 eWeLink 应用实现的物联网设备与用户 Wi-Fi 之间的基于二维码的配对过程如下： 用户将物联网设备启动至配对模式。 用户使用 eWeLink 应用扫描贴在物联网设备上的二维码。...

skylift

SkyLift SkyLift es un dispositivo experimental de suplantación de geolocalización Wi-Fi/BT que utiliza las placas ESP8266 o ESP32 para emitir tramas de baliza Wi-Fi o anuncios BT que emulan la infraestructura inalámbrica de una ubicación remota/objetivo. El ejemplo anterior muestra una...

kernel: wifi: nl80211: reject oversized EMA RNR lists

A flaw was found in the Linux kernel's nl80211 Wi-Fi subsystem. The nl80211parsernrelems function, responsible for parsing EMA RNR Enhanced Multiple Access Reduced Neighbor Report lists, does not properly handle an excessive number of nested NL80211ATTREMARNRELEMS inputs. This improper input...

kernel: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses

A flaw was found in the Linux kernel. The mt7925 Wi-Fi driver incorrectly dispatches a memory-mapped I/O MMIO specific event to non-MMIO buses, such as USB. This improper handling leads to a NULL pointer dereference when attempting to clean up DMA transmit queues. A remote attacker could exploit...

kernel: wifi: mt76: mt7925: fix crash in reset link replay

A flaw was found in the MediaTek mt7925 Wi-Fi driver within the Linux kernel. During a reset recovery process, the driver can attempt to access a network configuration that no longer exists. This can lead to a null pointer dereference, causing the system to crash and resulting in a Denial of...

rinhit

RinHit RinHit - framework de reconocimiento del ecosistema macOS. Recopila artefactos del ecosistema Apple para construir líneas temporales de actividad de red, identidad entre dispositivos y correlación de ubicación física. Este es el módulo de reconocimiento de código abierto. El payload Swift...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — MediaTek WLAN AP 堆溢出 PoC 针对 CVE-2026-20452 的概念验证漏洞利用代码，该漏洞是 MediaTek WLAN 接入点驱动程序中的堆缓冲区溢出。 漏洞信息 CVE : CVE-2026-20452 CVSS : 8.0 高危 CWE : CWE-122 — 堆缓冲区溢出 子组件 : wlan（AP 驱动） 攻击向量 : 相邻网络（Wi-Fi）— 已关联客户端 受影响设备 : MT7615, MT7915, MT7916, MT7981, MT7986, MT7990, MT7992, MT7993, MT6890 补丁...

CVE-2025-29338

CVE-2025-29338 — 安全公告 NXP moal.ko Wi-Fi 内核驱动中的缓冲区溢出（woalsetupmoduleparam / parsecfggetline） 字段| 值 ---|--- CVE ID| CVE-2025-29338 严重性| 高 CVSS v3.1 分数| 7.8 CVSS v3.1 向量| CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 漏洞类型| 基于栈的缓冲区溢出 CWE-121 攻击向量| 本地 供应商| NXP Semiconductors 供应商补丁状态| 已修补 发现者| Mahmoud...

CVE-2025-63353

CVE-2025-63353：FiberHome GPON ONT设备中的可预测Wi-Fi密码漏洞 参考文献 基于Hanianis的研究（原始CVE披露地址：CVE-2025-63353） 感谢识别此漏洞的安全研究人员。 法律免责声明 此信息仅用于教育和安全研究目的。用户有责任遵守所有适用的地方法律、州法律和联邦法律。作者对因使用或滥用此信息而产生的任何损害不承担任何责任。 摘要 在FiberHome GPON ONU HG6145F1...

frameworks_opt_net_wifi_CVE-2021-0390

此存储库没有 README。...

fragattacks

FragAttacks: Ataques de fragmentación y agregación 1. Introducción Este repositorio contiene la herramienta FragAttacks. Puede probar clientes Wi-Fi y puntos de acceso contra ataques de fr agmentación y ag regación. Estas vulnerabilidades afectan a todas las redes Wi-Fi protegidas. Para obtener...

CVE-2021-44319

Parrot AR.Drone 1 and AR.Drone 2 are vulnerable to Denial of Service. The Parrot AR.Drone platform is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controller during mid-flight...

VulnCheck KEV: CVE-2026-58457

Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilterconf handler in the commuos web backend. Attackers...

CVE-2021-44319

Parrot AR.Drone 1 and AR.Drone 2 are vulnerable to a Wi-Fi deauthentication attack that allows a remote, unauthenticated attacker to disconnect the drone from its controller during mid-flight, resulting in a Denial of Service . The vulnerability is rated CVSS 7.5 (HIGH) with a network attack vect...

CVE-2021-44319

Parrot AR.Drone 1 and AR.Drone 2 are vulnerable to Denial of Service. The Parrot AR.Drone platform is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controller during mid-flight...

EUVD-2021-34874

Parrot AR.Drone 1 and AR.Drone 2 are vulnerable to Denial of Service. The Parrot AR.Drone platform is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controller during mid-flight...

ASB-A-503551046

In getehtoperationchannelwidth of ieee80211common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-51733

Incorrect access control in the FirmwareUpgrade function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove Wi-Fi schedule entries via sending a crafted POST request to /cgi-bin/cstecgi.cgi...