WifiForge

WifiForge 提供一个安全合法的环境来学习 WiFi 黑客攻击。基于开源 mininet-wifi，该项目自动设置运行多种 WiFi 利用实验所需的网络和工具，消除了执行这些攻击通常需要的开销和硬件。 浏览文档 · 社区帮助 · 什么是 Wifi Forge？ · 博客文章 导航 注意：WifiForge 仍处于早期阶段，不断变化和成长，成长伴随着问题和痛苦。此产品不能保证稳定，目前不应在虚拟机之外使用。 安装文档 演练指南 故障排除 概览 贡献指南 参考 https://mininet-wifi.github.io/ 由 Black Hills Infosec 用 ❤️ 制作...

CVE-2019-7711

🛡️ CVE-2019-7711: Green Hills INTEGRITY RTOS 信息泄露 📌 关于 Green Hills INTEGRITY RTOS v5.0.4 Telnet 服务器中 格式化字符串 漏洞的技术文档和资源仓库。 📖 概述 该漏洞影响 Green Hills INTEGRITY RTOS 5.0.4 中 Interpeak 的 IPCOMShell Telnet 服务器，其中一个未文档化的命令解释器允许配置命令输入的值。该值直接被用作 printf 函数的输入，未经任何验证 ，从而允许执行恶意格式化字符串。 🔍 影响 ✅ 严重信息泄露...

Exploit for Use of Externally-Controlled Format String in Ghs Integrity_Rtos

🛡️ CVE-2019-7711: Green Hills INTEGRITY RTOS Information Lea...

Exploit for Use of Externally-Controlled Format String in Ghs Integrity_Rtos

Green Hills INTEGRITY RTOS F-16 Exploit - CVE-2019-7711 Ful...

AI-Powered Surveillance in Schools

It all sounds pretty dystopian: Inside a white stucco building in Southern California, video cameras compare faces of passersby against a facial recognition database. Behavioral analysis AI reviews the footage for signs of violent behavior. Behind a bathroom door, a smoke detector-shaped device...

CVE-2022-26519

There is no limit to the number of attempts to authenticate for the local configuration pages for the Hills ComNav Version 3002-19 interface, which allows local attackers to brute-force credentials...

CVE-2019-7712

An issue was discovered in handleripcomshellpwd in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. When using the pwd command, the current working directory path is used as the first argument to printf without a proper check. An attacker may thus forge a path containin...

CVE-2019-7713

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. There is a heap-based buffer overflow in the function responsible for printing the shell prompt, when a custom modifier is used to display information such as a process ID, IP address, or curren...

EUVD-2019-17244

Malware in sbrugna...

EUVD-2019-17246

Malware in sbrugna...

EUVD-2019-17245

Malware in sbrugna...

EUVD-2019-17247

Malware in sbrugna...

EUVD-2024-22240

Malicious code in bioql PyPI...

EUVD-2022-31077

Malicious code in bioql PyPI...

CVE-2022-1318

Hills ComNav version 3002-19 suffers from a weak communication channel. Traffic across the local network for the configuration pages can be viewed by a malicious actor. The size of certain communications packets are predictable. This would allow an attacker to learn the state of the system if the...

CVE-2019-7714

An issue was discovered in Interpeak IPWEBS on Green Hills INTEGRITY RTOS 5.0.4. It allocates 60 bytes for the HTTP Authentication header. However, when copying this header to parse, it does not check the size of the header, leading to a stack-based buffer overflow...

CVE-2019-7715

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The main shell handler function uses the value of the environment variable ipcom.shell.greeting as the first argument to printf. Setting this variable using the sysvar command results in a...

CVE-2024-24877

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magic Hills Pty Ltd Wonder Slider Lite allows Reflected XSS.This issue affects Wonder Slider Lite: from n/a through 13.9...

camelot-hills.com Cross Site Scripting vulnerability OBB-3949366

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cs.beverlyhills.org Cross Site Scripting vulnerability OBB-3889819

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...