DLPwn

DLPwn Bluetoothスピーカーによるデータ漏洩防止（Data Leak Prevention via Bluetooth Speaker） DLPwnは、EDR（Endpoint Detection and Response）、XDR（Extended Detection and Response）、DLP（Data Loss Prevention）、そしてより広義にはエアギャップ化された情報システムなどのセキュリティシステムをバイパスするためのファイル外部漏洩を目的としたRed...

SigDigger

SigDigger - 自由数字信号分析仪 SigDigger 是一款面向 GNU/Linux 和 macOS 的自由数字信号分析仪，旨在从未知无线电信号中提取信息。它通过 SoapySDR 支持多种 SDR 设备，并支持对 FSK、PSK 和 ASK 信号进行可调解调、模拟视频解码、突发信号分析以及模拟语音信道监听（全部实时进行）。 现有用户须知 我们不再克隆 develop 分支。这四个项目（SigDigger、SuWidgets、Suscan 和 Sigutils）将最新的可用更改保留在 master 分支中。 首次使用说明 您可能想先查阅用户手册。 SigDigger 是一款 G...

wave-share

wave-share WebRTCシグナリングを音で行うための概念実証です。マイクとスピーカーを備えたすべてのデバイスで動作します。ブラウザ上で実行します。 近くのデバイスは、一連のオーディオトーンを介して必要なSession Description Protocol SDPデータを交換することで、WebRTC接続をネゴシエーションします。ネゴシエーションが成功すると、ブラウザ間でローカルのWebRTC接続が確立され、LAN経由でデータを交換できるようになります。 動作の様子（2分の動画）: 自分で試す: ggerganov.github.io/wave-share 最新ニュース:...

lrs-pager-systems-bruteforce

lrs-pager-systems-bruteforce Long Range Pager Systems 寻呼机和杯垫式寻呼机（coasters）的 URH 和 YS1（yardstick one / cc11xx）信息与暴力破解工具 lrs-pager-systems-bruteforce Long Range Pager Systems 寻呼机和杯垫式寻呼机（coasters）的 URH 和 YS1（yardstick one / cc11xx）信息与暴力破解工具 灵感来源于 Tony Tiger 使用 HackRF One 的先前工作 我使用 LRS 发射机调谐手册...

EUVD-2020-0961

Malware in sbrugna...

Automaker Cybersecurity Lagging Behind Tech Adoption, Experts Warn

A pair of recent vulnerabilities found in the automaker ecosystem might not seem like a real danger taken separately. But experts warn a lack of attention on cybersecurity could plague “smart” car and electric vehicle systems — and users — in years to come, as the use of automotive technology...

fsk-lohfelden.de Cross Site Scripting vulnerability OBB-1465251

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Directory Traversal in fsk-server

Affected versions of fsk-server resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...

GHSA-C3HR-WWH3-QM54 Directory Traversal in fsk-server

Affected versions of fsk-server resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...

fsk-server Directory Traversal Vulnerability

Node.js module fsk-server is a simple http server. A directory traversal vulnerability exists in fsk-server. An attacker can exploit this vulnerability by placing ". /" in a url to access the file system...

Directory Traversal

fsk-server is vulnerable to directory traversal attacks. The attack is possible by requesting a url such as /..%2f..%2fetc/passwd to get sensitive information...

CVE-2017-16090

fsk-server is a simple http server. fsk-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16090

fsk-server is a simple http server. fsk-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16090

CVE-2017-16090 affects the Node.js fsk-server, which is vulnerable to a directory traversal issue in its HTTP server. An attacker can access the filesystem by placing "."/"" in the URL (e.g., requests like /../../../../../../../../../../etc/passwd). The vulnerability leads to potential disclosure...

Directory Traversal

Overview Affected versions of fsk-server resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...

fsk-squad.com XSS vulnerability

Open Bug Bounty ID: OBB-236653 Description| Value ---|--- Affected Website:| fsk-squad.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...