polymorph

Polymorph Polymorph는 실시간으로 가로채는 네트워크 패킷에 대해 Python 코드를 실행할 수 있게 하여 네트워크 트래픽을 즉석에서 수정할 수 있도록 지원하는 도구입니다. 이 프레임워크는 공개적으로 명시된 모든 네트워크 프로토콜을 구현하는 패킷을 실시간으로 수정하는 데 사용할 수 있습니다. 또한, 사용자 정의 추상화 및 필드를 생성하여 비공개로 명시된 네트워크 프로토콜을 수정하는 데도 사용할 수 있습니다. 설치 Polymorph는 Linux 운영 체제에 설치 및 실행되도록 특별히 설계되었습니다. 프레임워크를 설치...

nat-tunnel

NAT Tunnel v0.01 공인 IP와 필터링되지 않은 포트에 접근할 수 있는 서버가 있다면, 해당 서버에서 NAT Tunnel NT 서버를 실행하고, NAT 뒤에 있는 자신의 장비에서 NT 클라이언트를 실행할 수 있습니다. 서버에는 두 개의 열린 포트가 필요합니다. 하나는 NT 클라이언트와의 통신용 --admin, 다른 하나는 일반 클라이언트가 연결하기 위한 포트 --public: 사용자들이 사용할 포트 입니다. NT 클라이언트는 서버의 admin IP/포트로 연결을 엽니다. 서버가 새 연결을 수신하면 NT 클라이언트에...

EUVD-2020-28247

Malware in sbrugna...

EUVD-2019-19048

Malware in sbrugna...

EUVD-2017-6777

Malware in sbrugna...

EUVD-2023-45613

Malicious code in bioql PyPI...

EUVD-2025-18244

Malicious code in bioql PyPI...

Palo Alto GlobalProtect App MacOS 6.x < 6.2.8-h2 / 6.3.x < 6.3.3-650 Improper Access Control (CVE-2025-4227)

The version of Palo Alto GlobalProtect App installed on the remote macOS host is 6.x prior to 6.2.8-h2 or 6.3.x prior to 6.3.3-650. It is, therefore, affected by a improper access control vulnerability: - An improper access control vulnerability in the Endpoint Traffic Policy Enforcement feature ...

CVE-2025-4227

An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement feature of the Palo Alto Networks GlobalProtect™ app allows...

CVE-2025-4227

CVE-2025-4227 affects Palo Alto Networks GlobalProtect App (Windows and macOS). The Endpoint Traffic Policy Enforcement feature is vulnerable to improper access control, allowing certain packets to remain unencrypted within the tunnel. A physical-access attacker could inject rogue devices to inte...

CVE-2025-4227 GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement

An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement feature of the Palo Alto Networks GlobalProtect™ app allows...

CVE-2025-4227 GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement

An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement feature of the Palo Alto Networks GlobalProtect™ app allows...

CVE-2025-4229: Exposure of Sensitive System Information to an Unauthorized Control Sphere

An information disclosure vulnerability in the SD-WAN feature of Palo Alto Networks PAN-OS® software enables an unauthorized user to view unencrypted data sent from the firewall through the SD-WAN interface. This requires the user to be able to intercept packets sent from the firewall. Cloud NGFW...

GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement

An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement feature of the Palo Alto Networks GlobalProtect™ app allows...

PAN-OS: Traffic Information Disclosure Vulnerability

An information disclosure vulnerability in the SD-WAN feature of Palo Alto Networks PAN-OS® software enables an unauthorized user to view unencrypted data sent from the firewall through the SD-WAN interface. This requires the user to be able to intercept packets sent from the firewall. Cloud NGFW...

CVE-2023-41093

Use After Free vulnerability in Silicon Labs Bluetooth SDK on 32 bit, ARM may allow an attacker with precise timing capabilities to intercept a small number of packets intended for a recipient that has left the network.This issue affects Silabs Bluetooth SDK: through 8.0.0...

CVE-2020-7113

A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to intercept and change parameters in the HTTP packets resulting in the compromise of some of ClearPass' service accounts. Resolution: Fixed in 6.7.10, 6.8.1, 6.9.0 and higher...

CVE-2019-9682

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker c...

CVE-2019-5291

Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some field...

CVE-2025-32886

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. All packets sent over RF are also sent over UART with USB Shell, allowing someone with local access to gain information about the protocol and intercept sensitive data...