Inveigh

Inveigh Inveigh è uno strumento .NET multipiattaforma IPv4/IPv6 per attacchi machine-in-the-middle per penetration tester. Questo repository contiene la versione principale in C e la versione legacy PowerShell. Panoramica Inveigh esegue attacchi di spoofing e cattura di hash/credenziali tramite s...

pyrdp

PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...

CVE-2026-81034

Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose skip-verify field is set to true unconditionally, directly beneath a comment stating that the setting should be false in production. No...

EUVD-2026-66610

Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose skip-verify field is set to true unconditionally, directly beneath a comment stating that the setting should be false in production. No...

CVE-2026-81034 Netmaker through 1.6.0 Improper Certificate Validation in SMTP Client

Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose skip-verify field is set to true unconditionally, directly beneath a comment stating that the setting should be false in production. No...

CVE-2026-81034 Netmaker through 1.6.0 Improper Certificate Validation in SMTP Client

Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose skip-verify field is set to true unconditionally, directly beneath a comment stating that the setting should be false in production. No...

CVE-2026-54548

kas is a setup tool for bitbake-based projects. Prior to version 5.4 , when internal SSH key setup is triggered via SSH_PRIVATE_KEY or SSH_PRIVATE_KEY_FILE and no user-specific SSH configuration exists, the function ssh_no_host_key_check() in kas/libcmds.py creates ~/.ssh/config with a global Hos...

CVE-2026-54548 kas: Persistent SSH Host Key Checking Disablement

kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...

open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder

A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...

-CVE-2017-0785-BlueBorne-PoC

-CVE-2017-0785-BlueBorne-PoC CVE-2017-0785 BlueBorne PoC Panoramica Generale Armis Labs ha rivelato un nuovo vettore d'attacco che mette in pericolo i principali sistemi operativi mobili, desktop e IoT, tra cui Android, iOS, Windows e Linux, e i dispositivi che li utilizzano. Il nuovo vettore è...

Ssh Mitm

SSH-MITM SSH-MITM è un proxy SSH man-in-the-middle per audit di sicurezza e penetration testing. Supporta l'intercettazione di sessioni SSH, SCP e SFTP, l'inoltro dell'agente agent forwarding, l'inoltro di porte port forwarding e altro ancora. Questo repository era un mirror e non viene più...

CVE-2024-42657

CVE-2024-42657 CVE-2024-42657 Ein Problem im wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 ermöglicht es einem entfernten Angreifer, vertrauliche Informationen durch die fehlende Verschlüsselung während des Anmeldeprozesses zu erlangen. CVE-2024-42657: Zusammenfassung: Eine Schwachstelle im...

EUVD-2025-210783

CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack...

CVE-2025-29419

CTFd v3.7.6 is affected by a man-in-the-middle attack vulnerability. The provided documents do not specify the exact component, root cause, or CVSS score. No remediation or patch version is mentioned in the available sources. Exploitation details are not provided. Further technical context can be...

CVE-2026-79785

X-AnyLabeling's model downloader disabled TLS certificate verification. downloadwithretry in anylabeling/services/autolabeling/model.py built a context with ssl.createunverifiedcontext and passed it to urllib.request.urlopen, so neither the certificate chain nor the hostname was checked on any...

CVE-2026-79785 X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads

X-AnyLabeling's model downloader disabled TLS certificate verification. downloadwithretry in anylabeling/services/autolabeling/model.py built a context with ssl.createunverifiedcontext and passed it to urllib.request.urlopen, so neither the certificate chain nor the hostname was checked on any...

netzob

=========================================================== Netzob : Protocol Reverse Engineering, Modeling and Fuzzing .. image:: https://img.shields.io/badge/Python-3-brightgreen.svg :target: https://github.com/netzob/netzob :alt: Python3 See complete documentation here:...

Docker-Container-CVE-2020-13401

Estudo da CVE-2020-13401 Estudo sobre a vulnerabilidade CVE-2020-13401 em contêineres de dockers anteriores à versão 19.03.11 Contêineres criados com versões do Docker Engine anteriores à 19.03.11 estão vulneráveis a receber e aplicar mensagens RA Router Advertisement falsas de outros contêineres...

UBUNTU-CVE-2026-63310

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...

EUVD-2026-65063

Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 and earlier, 2026.1.24.0 and earlier, allows an on-path attacker to intercept and tamper with VNC sessions via automatic acceptance of the server's RSA key during RSA-AES...