CVE-2025-63353

CVE-2025-63353 fiberhome GPON ONU HG6145F1 RP4423의 취약점으로 인해 장치의 공장 기본 Wi-Fi 비밀번호WPA/WPA2 사전 공유 키가 SSID로부터 예측될 수 있습니다...

SYNwall

SYNwall Брандмауэр с нулевой конфигурацией для IoT. SYNwall — это проект, реализованный пока что в виде модуля ядра Linux, для создания прозрачного брандмауэра, не требующего настройки и обслуживания. Возможно, вы захотите взглянуть на для ознакомления с примером использования. Основы Обычно...

pmkidcracker

PMKID WPA2 Взломщик Эта программа — инструмент на Python для восстановления предварительного общего ключа pre-shared key сети WPA2 WiFi без деаутентификации и без необходимости наличия клиентов в сети. Она использует уязвимость некоторых точек доступа, которые передают значение PMKID в первом...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

ike-scan

ike-scan Обнаружение и идентификация IKE-хостов IPsec VPN серверов Содержание Сборка и установка Обзор Использование Детали реализации Ввод хостов и требования к памяти Ограничение скорости Генерация cookie и идентификация удалённых хостов Детали IKE-пакетов Backoff-идентификация Вывод программы...

tinydtls

CONTENTS このライブラリには、C99 で DTLS をサポートしたシングルスレッド UDP サーバーの構築に役立つ関数と構造体が含まれています。利用可能なコンポーネントは次のとおりです： dtls 事前共有鍵モードによる DTLS の基本サポート。 tests サブディレクトリ tests には、各コンポーネントの使用方法を示すテストプログラムが含まれています。 BUILDING git リポジトリのコードを使用する場合は、make を実行して DTLS を共有ライブラリとしてビルドします。...

ReverseSocks5

ReverseSocks5 Golang으로 작성된 리버스 SOCKS5 프록시. 사용법 root@kitploit: Usage of ReverseSocks5.exe: -cert string 서버에서 TLS를 사용하는 경우 인증서 파일 -connect string SOCKS 에이전트 연결 주소 address:port -key string 서버에서 TLS를 사용하는 경우 개인 키 파일 -listen string SOCKS 에이전트 수신 주소 address:port 기본값 ":10443" -password string SOCKS5 인증에...

CVE-2025-63353

FiberHome Wi-Fi 비밀번호 예측기 CVE-2025-63353 FiberHome HG6145F1 RP4423 라우터에서 발견된 결정적deterministic 비밀번호 생성 결함에 대한 보안 감사 및 개념 증명PoC 데모를 위해 설계된 Python 유틸리티입니다. 📋 개요 이 스크립트는 브로드캐스트되는 SSID에서 공장 기본 WPA/WPA2 사전 공유 키PSK가 수학적으로 파생되는 심각한 취약점인 CVE-2025-63353을 악용합니다. 공격자는 네트워크 이름SSID을 관찰하는 것만으로 사용자 상호작용 없이 기본 비밀번...

CVE-2025-63353

CVE-2025-63353: Предсказуемая уязвимость Wi-Fi пароля в устройствах FiberHome GPON ONT Ссылки Основано на исследовании Hanianis оригинальное раскрытие CVE на CVE-2025-63353 Благодарность исследователям безопасности, выявившим эту уязвимость. Отказ от ответственности Эта информация предоставлена...

CVE-2026-66781 Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication

A flaw was found in the Submariner operator. The Submariner Custom Resource CR, used for configuring network connectivity, stores the IPsec pre-shared key PSK in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by...

PT-2026-77225

Name of the Vulnerable Software and Affected Versions Submariner operator affected versions not specified Description A flaw exists in the Submariner operator where the Submariner Custom Resource CR, used for network connectivity configuration, stores the IPsec pre-shared key PSK in an unencrypte...

CVE-2026-74243

A flaw was found in Red Hat Quay. When the SECURITYSCANNERV4PSK pre-shared key is not set, a remote unauthenticated attacker can send POST requests to the security scanner notification endpoint. This allows the attacker to flood the notification queue and inject path traversal characters into Cla...

Remote Denial Of Service (Dos)

github.com/pion/dtls is vulnerable to Remote Denial of Service Dos. The vulnerability is due to improper parsing of a crafted ECDHEPSK ServerKeyExchange message, which allows a remote attacker to trigger a panic...

openSUSE 16 Security Update : libkrun (openSUSE-SU-2026:21464-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21464-1 advisory. - CVE-2025-24898: openssl: use-after-free in ssl::selectnextproto due to improper lifetime handling bsc1270429. - CVE-2026-41676: openssl: short...

CVE-2026-67596 CSL 1010 M2M 3G WiFi Module 2.2.1.4 Weak Encryption via Router.cfg

CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher that uses a static key to obfuscate the configuration backup file. Attackers can...

EUVD-2026-51157

CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher with a static key applied to the configuration backup file. Attackers can trivially...

OPENSUSE-SU-2026:21464-1 Security update for libkrun

This update for libkrun fixes the following issues: - CVE-2025-24898: openssl: use-after-free in ssl::selectnextproto due to improper lifetime handling bsc1270429. - CVE-2026-41676: openssl: short buffer overflow via Deriver:derive and PkeyCtxRef:derive when using OpenSSL 1.1.1 bsc1270198. -...

Amazon Linux 2023 : golang-github-burntsushi-toml-test, golang-github-burntsushi-toml-test-devel (ALAS2023-2026-1977)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1977 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /...

openSUSE 16 Security Update : go1.26 (openSUSE-SU-2026:21341-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21341-1 advisory. This update for go1.26 fixes the following issues - Update to version go1.26.5 bsc1255111. - CVE-2026-39822: os: Root escape via symlink plus...

OPENSUSE-SU-2026:21341-1 Security update for go1.26

This update for go1.26 fixes the following issues - Update to version go1.26.5 bsc1255111. - CVE-2026-39822: os: Root escape via symlink plus trailing slash bsc1271014. - CVE-2026-42505: crypto/tls: omit PSK in ECH outer client hello bsc1271015...