r00kie-kr00kie

r00kie-kr00kie إخلاء مسؤولية هذا إثبات مفهوم PoC لاستغلال الثغرة الأمنية CVE-2019-15126 المعروفة باسم kr00k. هذا المشروع مخصص للأغراض التعليمية فقط ولا يمكن استخدامه لانتهاك القانون أو لتحقيق مكاسب شخصية. مؤلف هذا المشروع غير مسؤول عن أي ضرر محتمل ناتج عن استخدام المواد. المتطلبات لاستخدام هذه...

rtl8812au

RTL8812AU/21AU 및 RTL8814AU 리눅스 드라이버 모니터 모드 및 프레임 인젝션 지원 마스터 브랜치는 https://github.com/ulli-kroll/rtl8821au 브랜치 v4.3.22-beta/rework를 기반으로 합니다. rtwversion.c에 따르면 실제 드라이버 버전은 4.3.20입니다. 브랜치 v4.3.21은 RTL8814AU 또는 RTL8812AU/RTL8821AU 칩셋용으로 빌드할 수 있습니다. RTL8812AU/RTL8821AU 드라이버를 빌드하려면 다음을 입력하세요: $ make...

CVE2026-42926

CVE-2026-42926 NGINX HTTP/2 Frame Injection Lab Контролируемая лаборатория по кибербезопасности для валидации и сравнения поведения, связанного с CVE-2026-42926 — проблемой внедрения инъекции HTTP/2-фреймов , затрагивающей определённые версии NGINX при использовании уязвимой конфигурации прокси...

fracture

Fracture FragAttacks: фреймворк для пентеста Wi-Fi CVE-2020-24586 / CVE-2020-24587 / CVE-2020-24588 Fracture автоматизирует три новые цепочки атак с помощью инжекции фреймов 802.11. Он использует уязвимость агрегации A-MSDU в WPA2/WPA3 для инжекции произвольных незашифрованных фреймов в...

nexmon

Qu'est-ce que nexmon ? Nexmon est notre framework de correction de firmware basé sur C pour les puces WiFi Broadcom/Cypress qui vous permet d'écrire vos propres correctifs de firmware, par exemple pour activer le mode moniteur avec des en-têtes radiotap et l'injection de trames. Vous trouverez...

CVE-2026-54511

LogTape is an unobtrusive logging library. Prior to 1.3.11, 2.0.14, and 2.1.5, the @logtape/syslog package's escapeStructuredDataValue function in packages/syslog/src/syslog.ts does not neutralize C0 control characters from U+0000 through U+001F in structured data values, and formatStructuredData...

USN-8666-2 linux-azure-5.4, linux-azure-fips vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel versions 5.8 through 5.19.x, prior to 5.19.16, local attackers who were able to inject WLAN frames into the mac80211 stack could carry out a NULL pointer dereferencing denial-of-service attack against the beacon protection of P2P devices...

CVE-2026-42926

A flaw was found in NGINX Open Source. When NGINX is configured to proxy HTTP/2 traffic and uses proxysetbody, a remote attacker may be able to inject malicious data into the upstream peer. This could lead to unintended data manipulation or bypass of security controls. Mitigation To mitigate this...

CVE-2026-61634 RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP framemax value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and...

CVE-2026-60113

AMMOS Instrument Toolkit AIT Deep Space Network DSN Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension SLE interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no...

CVE-2026-60113 AIT-DSN < 2.2.2 Missing Authentication via SLE API Routes

AMMOS Instrument Toolkit AIT Deep Space Network DSN Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension SLE interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no...

CVE-2026-60113

AMMOS Instrument Toolkit (AIT) DSN Interface before 2.2.2 has a missing authentication vulnerability in the Space Link Extension (SLE) interface manager. Unauthenticated network attackers can reach seven unprotected API routes via direct HTTP requests, enabling actions such as starting/stopping D...

CVE-2026-59919

A flaw was found in the netty-codec-haproxy component, part of the Netty network application framework. This vulnerability allows a remote attacker to perform protocol-level injection attacks by crafting malformed HAProxy protocol frames that contain embedded carriage return CR and line feed LF...

CVE-2026-10733 Improper Restriction of Rendered UI Layers or Frames in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that could have allowed an authenticated user to cause denial of service on the CI/CD Catalog page due to improper sanitization...

CVE-2026-49316

Expected behavior violation in the in-vehicle network of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the motorcycle's anti-theft shutdown by forcing the Wireless Control Module WCM into the CAN bus-off state. Using a well-known CAN...

CVE-2026-49316

Expected behavior violation in the in-vehicle network of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the motorcycle's anti-theft shutdown by forcing the Wireless Control Module WCM into the CAN bus-off state. Using a well-known CAN...

CVE-2026-49316

The CVE-2026-49316 entry describes an in-vehicle CAN bus‑level fault: an adjacent-network attacker can force the Wireless Control Module (WCM) into bus‑off via a CAN error‑frame‑injection technique against periodic WCM transmissions. This drives the WCM CAN controller’s transmit error counter pas...

CVE-2026-49316 Indian Scout Bobber 2025 WCM CAN bus-off attack silently bypasses anti-theft shutdown

Expected behavior violation in the in-vehicle network of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the motorcycle's anti-theft shutdown by forcing the Wireless Control Module WCM into the CAN bus-off state. Using a well-known CAN...

SUSE CVE-2026-42926

When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxyhttpversion to 2, and also uses proxysetbody, an attacker may be able to inject frame headers and payload bytes to the upstream peer. Note: Software versions which have reached End of Technical Support EoTS are not...