hakuin

Hakuin is a Blind SQL Injection BSQLI optimization and automation framework written in Python 3. It abstracts away the extraction logic and allows users to easily and efficiently dump databases from vulnerable web applications. To speed up the process, Hakuin utilizes a variety of optimization...

zizzania

zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...

inception

Note: This tool is no longer under active development, please look at PCILeech instead. INCEPTION Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces...

killerbee

KillerBee KillerBee is a Framework and Tools for Testing & Auditing ZigBee and IEEE 802.15.4 Networks Notice usb0.x support is being deprecated/removed Apimote v1 support is being deprected/removed If you require these features please create an issue to explain your usecase and requirements...

CVE-2024-42861

CVE-2024-42861 The DOS attack against IEEE 802.1AS standardgPTP protocol CVE ID CVE-2024-42861 PRODUCT IEEE 802.1AS standard VERSION IEEE 802.1AS-2020, IEEE 802.1AS-2010 PROBLEM DOS attack DESCRIPTION When a port of a device with IEEE 802.1AS enabled receives two PdelayReq messages with different...

org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcutil-fips: Bouncy Castle for Java: Denial of Service via OER parser unbounded recursion

A flaw was found in Bouncy Castle for Java. A remote attacker could exploit this vulnerability by providing a specially crafted self-referential IEEE 1609.2 schema to the OER Octet Encoding Rules parser. This can cause the parser to recurse without a depth limit, leading to resource exhaustion an...

org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcutil-fips: Bouncy Castle for Java: Denial of Service via OER parser unbounded recursion

A flaw was found in Bouncy Castle for Java. A remote attacker could exploit this vulnerability by providing a specially crafted self-referential IEEE 1609.2 schema to the OER Octet Encoding Rules parser. This can cause the parser to recurse without a depth limit, leading to resource exhaustion an...

CVE-2026-87042

The IEEE 1588 PTP port implementation in subsys/net/lib/ptp/port.c adopted the logMessageInterval field of a received DelayResp message without any validation. portdelayrespmsgprocess stored the raw wire value a full-range int8t into portds.logmindelayreqinterval, and that value is later used as ...

Raven-Storm

Raven-Storm Toolkit Raven-Storm is a powerful DDoS toolkit for penetration tests, including attacks for several protocols written in python3.8. Takedown WiFi access points, devices in your network, servers, services, and Bluetooth devices with ease. Ravenabbreviation is desinged to help you to...

CVE-2026-120976

Arista EOS platforms running IEEE 802.1X authentication and MACsec with dynamically derived keys are vulnerable to sensitive information disclosure. During or after a Smart Switch Upgrade (SSU) reload involving an active 802.1X session, sensitive authentication information may be recorded in diag...

PT-2026-144629

On affected platforms running Arista EOS with IEEE 802.1X authentication and MACsec using dynamically derived keys, sensitive authentication information may be recorded in diagnostic data during a Smart Switch Upgrade SSU. An attacker with administrative access on the device who obtains the...

Security Advisory 0216

Security Advisory 0216 . CSAF PDF Date: November 10, 2026 Revision | Date | Changes ---|---|--- 1.0 | November 10, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-120976 CVSSv3.1 Base Score: 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N CVSSv4.0 Base Score: 7.0...

Interpretable Cyber-Physical Attack Detection in Smart Grids: A Leakage-Controlled Multi-Testbed Evaluation of Fusion, Robustness, and Observability Limits

Cyber-physical smart-grid detectors are typically treated as black boxes and validated exclusively on clean, temporally shuffled datasets, which risk overly optimistic performance claims. This work presents a multi-testbed evaluation study built around an interpretable, time-windowed fusion Rando...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: reject frames shorter than the authentication tag llsecdodecryptauth computes the associated-data length for the AEAD request as assoclen += datalen - authlen; where datalen is the number of bytes after the MAC...

CLEANSTART-2023-ZZ97302 IEEE 802

Security vulnerability affects the tcpdump package. The IEEE 802...

CLEANSTART-2023-ET74837 IEEE 802

Security vulnerability affects the tcpdump package. The IEEE 802...

CLEANSTART-2024-AB71408 NULL pointer exception in the IEEE 802

Security vulnerability affects the wireshark package. NULL pointer exception in the IEEE 802...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146322 advisory. In the Linux kernel, the following vulnerability has been resolved: ieee802154: admin-gate legacy LLSEC dump operations In net/ieee802154/netlink.c, the legacy...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146268)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146268 advisory. In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: reject frames shorter than the authentication tag llsecdodecryptauth computes t...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Recursion in Bouncy Castle for Java (CVE-2026-59645)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Recursion in Bouncy Castle for Java, due to a flaw where the OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. Bouncy Castle is used in our Speech microservices. This vulnerability has been...