rtl_433

rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

IMSI-catcher

IMSI-catcher This program shows you IMSI numbers, country, brand and operator of cellphones around you. /!\ This program was made to understand how GSM network work. Not for bad hacking ! What you need 1 PC with Gnu/Linux. Tested with : debian 10 Ubuntu 20.04/LinuxMint 22.2+ Kali 2025+ 1 SDR...

TempestSDR

TempestSDR This project is a software toolkit for remotely eavesdropping video monitors using a Software Defined Radio SDR receiver. It exploits compromising emanations from cables carrying video signals. Raster video is usually transmitted one line of pixels at a time, encoded as a varying...

AhsayCBS-Auth-Bypass-RCE

AhsayCBS Authentication Bypass & RCE CVE-2026-105133 + CVE-2026-105134 — Unauthenticated remote code execution in AhsayCBS ≤10.3.4 Blog Post Technical analysis covering root cause, exploitation, and indicators of compromise is available on the Horizon3.ai attack research blog:...

EvilCrowRF_Custom_Firmware_CC1101_FlipperZero

EvilCrowRFCustomFirmwareCC1101FlipperZero Idea, development and implementation of this firmware: h-RAT https://github.com/h-RAT/. Discord: hrat Idea, development and implementation of the original firmware: Joel Serna @JoelSernaMoreno - https://github.com/joelsernamoreno/. Main collaborator: Litt...

TempestSDR

TempestSDR This project is a software toolkit for remotely eavesdropping video monitors using a Software Defined Radio SDR receiver. It exploits compromising emanations from cables carrying video signals. Raster video is usually transmitted one line of pixels at a time, encoded as a varying...

Damn-Vulnerable-Android-Components

The Damne Vulnerable Android Components - DVAC The sieve reborn! Damn Vulnerable Android Components DVAC is an educational Android application intentionally designed to expose and demonstrate vulnerabilities related to various Android components such as Activities, Intents, Content Providers, and...

JXL_Infotainment_CVE-2025-69515

CVE-2025-69515 Attack Name 📂 Additional Details Afftected product Affected Components GNSS Receiver Module / GPS Chipset Infotainment Navigation Module Location Services Framework Attack Vector The infotainment unit can be targeted by broadcasting spoofed GPS signals using an SDR device. Because...

CVE-2026-59229

The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPERUSER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USEPIPE or MAINTAIN who does NOT have WRITEDATA or DELETEDATA permissions on target databases c...

EUVD-2026-107167

The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPERUSER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USEPIPE or MAINTAIN who does NOT have WRITEDATA or DELETEDATA permissions on target databases c...

PT-2026-120524

The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPER USER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USE PIPE or MAINTAIN who does NOT have WRITE DATA or DELETE DATA permissions on target databas...

CVE-2026-93441

The IBM QRadar SIEM is vulnerable to a denial of service via the HTTP Receiver protocol due to uncontrolled resource consumption (CWE-400). The vulnerability impacts versions 7.4-20210823144546 through 7.5-20260930064858 , and 7.6-20260330053257 through 7.6-20260930064910 . Affected customers sho...

CVE-2026-80344

CVE-2026-80344 — camel-as2: asynchronous MDN SSRF and credential disclosure Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the AS2 receiver delivered the asynchronous Message Disposition Notification MDN to an address supplied by the sender the...

CVE-2026-111999

Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/ns/eventbus/name/events or legacy...

EUVD-2026-103452

Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/ns/eventbus/name/events or legacy...

CVE-2026-111999

Versions 0.8.0 through 0.9.0 of Vanus are affected by a missing authentication vulnerability in the gateway CloudEvents HTTP receiver . This flaw allows unauthenticated remote attackers to bypass token authentication and authPublish checks by sending forged CloudEvents to the /namespaces/{ns}/eve...

CVE-2026-111999 Vanus 0.8.0 through 0.9.0 Missing Authentication via Gateway CloudEvents HTTP Receiver

Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/ns/eventbus/name/events or legacy...

CVE-2026-111999 Vanus 0.8.0 through 0.9.0 Missing Authentication via Gateway CloudEvents HTTP Receiver

Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/ns/eventbus/name/events or legacy...

CVE-2026-111999: Missing Authentication for Critical Function

Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/ns/eventbus/name/events or legacy...