Inveigh

Inveigh Inveigh 是一款面向渗透测试人员的跨平台 .NET IPv4/IPv6 中间人工具。此仓库包含主要的 C 版本以及旧版 PowerShell 版本。 概述 Inveigh 通过数据包嗅探和基于协议特定的监听器/套接字来执行欺骗攻击以及哈希/凭据捕获。数据包嗅探方法（最初版本 PowerShell 版工具的基础）具有以下优势： 通过 Windows SMB 服务捕获 SMB NTLM 挑战/响应 主机系统上可见端口绑定更少 主要缺点是需要提升的访问权限。 在当今版本的 Windows 上，默认运行的 UDP 服务允许端口复用。因此，数据包嗅探不再具有绕过正在使用的 U...

Security Bulletin: Vulnerability in openssh and libssh libraries (CVE-2023-28709) affects Power HMC

Summary The openssh and libssh libraries are used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-48795 DESCRIPTION: OpenSSH is vulnerable to a machine-in-the-middle attack, caused by a flaw in the extension negotiation process ...

EUVD-2021-24870

Malware in sbrugna...

RLSA-2025:6993 Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled CVE-2025-26465 For more...

EUVD-2024-46511

Malicious code in bioql PyPI...

EUVD-2022-31730

Malicious code in bioql PyPI...

EUVD-2025-4555

Malicious code in bioql PyPI...

EUVD-2025-18743

Malicious code in bioql PyPI...

EUVD-2024-25842

Malicious code in bioql PyPI...

EUVD-2024-47249

Malicious code in bioql PyPI...

EUVD-2025-16891

Malicious code in bioql PyPI...

EUVD-2025-18755

Malicious code in bioql PyPI...

EUVD-2023-35790

Malicious code in bioql PyPI...

EUVD-2023-45283

Malicious code in bioql PyPI...

EUVD-2021-31533

Malicious code in bioql PyPI...

CVE-2025-32880

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and machine-in-the-middle attacks...

CVE-2025-32875

An issue was discovered in the COROS application through 3.8.12 for Android. Bluetooth pairing and bonding is neither initiated nor enforced by the application itself. Also, the watch does not enforce pairing and bonding. As a result, any data transmitted via BLE remains unencrypted, allowing...

CVE-2025-32877

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It identifies itself as a device without input or output capabilities, which results in the use of the Just Works pairing method. This method does not implement any authentication, which therefore allows machine-in-the-middle...

CVE-2025-32880

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and machine-in-the-middle attacks...

CVE-2025-32877

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It identifies itself as a device without input or output capabilities, which results in the use of the Just Works pairing method. This method does not implement any authentication, which therefore allows machine-in-the-middle...