kanidm

Kanidm - シンプルで安全なアイデンティティ管理 概要 Kanidm は、シンプルで安全なアイデンティティ管理プラットフォームであり、他のアプリケーションやサービスが、 認証とアイデンティティの保存という課題を Kanidm にオフロードできるようにします。 このプロジェクトの目標は、可能な限り幅広い要件と 統合をカバーする、完全なアイデンティティプロバイダーになることです。Kanidm を使う際に、他のコンポーネント（Keycloak など）は必要ありません。 必要なものはすべて揃っています。...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

freeradius-server

FreeRADIUS 서버 소개 FreeRADIUS 서버 프로젝트는 고성능이며 매우 유연하게 구성할 수 있는 다중 프로토콜 정책 서버로, RADIUS, DHCPv4 DHCPv6, DNS, TACACS+ 및 VMPS를 지원합니다. GNU GPLv2 조건에 따라 사용할 수 있습니다. RADIUS를 사용하면 네트워크에 대한 인증 및 권한 부여를 중앙 집중화할 수 있으며, 네트워크에 새 사용자를 추가하거나 삭제할 때 수행해야 하는 변경 횟수를 최소화할 수 있습니다. FreeRADIUS는 802.1xWiFi, 전화 접속dialup,...

CVE-2024-3596-Detector

RADIUS脆弱性検出ツール コードの制限: このコードはMD5競合の検出を直接目的としています。ただし、CVE-2024-3596のすべての側面を徹底的にテストするには、より包括的な分析が必要になる場合があります。 このコードはMD5衝突に基づく攻撃のみを検出できます。その他の潜在的な脆弱性（TLSやIPSecの欠陥など）を検出するには、追加の分析が必要になる場合があります。 Alperen Ugurlu このスクリプトは、MD5衝突をチェックすることにより、RADIUS/UDPトラフィックにおけるCVE-2024-3596 脆弱性を検出します。RADIUS...

kamerka

NOT SUPPORTED OR DEVELOPED ANYMORE PLEASE USE GUI VERSION https://github.com/woj-ciech/Kamerka-GUI ꓘamerka 2.0 aka FIST Flickr, Instagram, Shodan, Twitter Build interactive map of cameras, printers, tweets and photos. The script creates a map of cameras, printers, tweets and photos based on your...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343: Уязвимость DoS на подавление RADIUS в Cisco ISE 🌐 ⚠️ Обзор 🚨 Высокий уровень опасности — отказ в обслуживании DoS в Cisco Identity Services Engine ISE! 💥 Неаутентифицированный удаленный злоумышленник может вызвать сбой устройства с помощью специально сформированных RADIUS-пакетов...

Palo Alto Networks PAN-OS 10.1.x / 10.2.x / 11.0.x / 11.1.x / 9.1.x Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 9.1.x, 10.1.x, 10.2.x, 11.0.x, or 11.1.x. It is, therefore, affected by a vulnerability. This vulnerability allows an attacker performing a meddler-in-the-middle attack between Palo Alto Networks PAN-OS...

CVE-2026-35333

CVE-2026-35333 strongSwan RADIUS attribute-iterator pre-auth бесконечный цикл / удаленный DoS. Описание attributeenumerate в src/libradius/radiusmessage.c:247-271 принимает RADIUS атрибуты, у которых байт length меньше sizeofrattrt 2. Для length == 0: data-len = next-length - sizeofrattrt андерфл...

Security Advisory 0149

Security Advisory 0149 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73449 CVSSv3.1 Base Score: 5.9 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L CVSSv4.0 Base Score: 5.9...

yolo-cage

yolo-cage: 해를 끼치지 않는 자율 코딩 에이전트 당신은 책임감 있는 엔지니어입니다. AI가 가장 민감한 시스템과 코드베이스를 마구 휘젓도록 내버려두지 않을 것입니다. 그렇기에 Claude Code와 같은 도구의 안전 장치를 절대 해제하지 않을 것입니다. 위험한 작업마다 허가를 요청하니까요! 안전합니다! 그래서 당신은 기다립니다. 그리고 응답합니다. 결정 피로가 쌓입니다. 그리고 바로 그때 일이 발생합니다. 권한 프롬프트는 위협 모델의 가장 약한 부분인 피곤한 사용자를 무시합니다. 에이전트의 폭발 반경을 제한하면서 권한...

CVE-2026-77217 PLANET GS-4210-16P2S V3 Stack Buffer Overflow and NULL Pointer Dereference via dispatcher.cgi RADIUS Handlers

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The webradiusSrvpost family of handlers copies the radKey, radKey0, radDftParamKey, radName, and radIp POST parameters into...

CVE-2026-77217

PLANET GS-4210-16P2S firmware prior to 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The web_radiusSrv*_post handlers copy the radKey , radKey_0 , radDftParamKey , radName , and radIp POST parameters into fixed-s...

CVE-2026-77217 PLANET GS-4210-16P2S V3 Stack Buffer Overflow and NULL Pointer Dereference via dispatcher.cgi RADIUS Handlers

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The webradiusSrvpost family of handlers copies the radKey, radKey0, radDftParamKey, radName, and radIp POST parameters into...

Astra Linux – Vulnerability in krb5

The RADIUS protocol, as described in RFC 2865, is vulnerable to forgery attacks by local attackers who can modify any valid response—whether an Access-Accept, Access-Reject, or Access-Challenge response—into any other response, using a chosen-prefix collision attack against the MD5 Response...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.2.6, <=1.4.11), com.github.vzakharchenko:cisco-radius-plugin (>=1.2.5, <=1.4.11) +54 more potentially affected by CVE-2026-19608 via org.keycloak:keycloak-authz-policy-common (>=2.0.0.cr1, <=26.7.2)

org.keycloak:keycloak-authz-policy-common MAVEN version =2.0.0.cr1, =1.2.6, =1.2.5, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =24.3.0.0, =24.3.0.0, =2.5.6-24.0, =0.1.0, =8.1, =1.0.0, =1.1.0 and more Source cves: CVE-2026-19608 Source advisory:...

SUSE-SU-2026:23072-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: Security issues fixed: - CVE-2025-24912: RADIUS pending request dropping bsc1239461. - CVE-2026-58374: missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be MLO association request processing allows an unauthenticated user to send a crafte...

SUSE-SU-2026:23038-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issue: - CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail bsc1239461...

OESA-2026-3177 wpa_supplicant security update

wpasupplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key...

SUSE-SU-2026:3159-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issue: - CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail bsc1239461...

SUSE-SU-2026:3103-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail bsc1239461. - CVE-2026-58374: missing...