CVE-2026-21010-VoIP-SIP-Digest-Authentication-Replay

CVE-2026-21010 – إعادة إرسال مصادقة Digest في SIP/VoIP كود البرنامج محاكي SIP بلغة Python root@kitploit: sipserversim.py - SIP server that accepts replayed authenticated requests from flask import Flask, request app = Flaskname Simulated nonce storage: doesn't track used nonces usednonces = set...

CVE-2026-23003-Cross-Chain-Bridge-Message-Forging-via-Missing-Origin-Chain-ID

CVE-2026-23003 – تزوير رسائل الجسر عبر السلاسل بسبب غياب معرّف السلسلة الأصلية كود البرنامج استغلال Solidity + Python root@kitploit: // Bridge.sol - Vulnerable bridge contract contract Bridge mappingbytes32 = bool public processed; event Depositedaddress from, address to, uint256 amount, uint256...

ESP-RFID-Tool

ESP-RFID-Tool بواسطة Corey Harding الموقع الرسمي: www.rfid-tool.com تتولى April Brother حالياً تصنيع هذا الجهاز ويمكن شراؤه مباشرة من الصين من متاجرها: المتجر الرسمي: https://blog.aprbrother.com/product/esp-rfid-tool متجر AliExpress: https://www.aliexpress.com/item/ESP-RFID-Tool/32850151497.html...

linux-fingerprint-r503

linux-fingerprint-r503 — fingerprint login for Linux using a Grow R503 + Arduino A from-parts USB fingerprint reader for Linux desktops. Total parts cost under $15. Drop-in replacement for upstream fprintd — PAM, KDE Settings, GNOME Settings, fprintd-verify, sudo with finger, screen-unlock with...

CVE-2026-11117-WPA2-4-Way-Handshake-Reinstallation-KRACK-Sim-

CVE-2026-11117 – إعادة تثبيت مصافحة WPA2 رباعية الخطوات محاكاة KRACK كود البرنامج Python root@kitploit: kracksim.py - Simulates reinstallation of an already-used PTK import hashlib, os class AccessPoint: def initself: self.anonce = os.urandom32 self.ptk = None def sendmsg3self, snonce: Normally...

RFCrack

/ | | | / | | | | / \ ' - / \ / - | / \ V V / ' / \ || - /||// /| ///|. //, / / |/ | /| | | || | / | | '/ /| / / | || || , | \ root@kitploit: Welcome to RFCrack - A Software Defined Radio Attack Tool Developer: @Ficti0n - http://ConsoleCowboys.com CCLabs: http://cclabs.io Blog:...

CVE-2022-27254

CVE-2022-27254 PoC for vulnerability in Honda's Remote Keyless SystemCVE-2022-27254 Disclaimer: For educational purposes only. Kindly note that the discoverers for this vulnerability are Ayyappan Rajesh, a student at UMass Dartmouth and HackingIntoYourHeart. Others mentioned in this repository ar...

nrf24-playset

nRF24 Playset The nRF24 Playset is a collection of software tools for wireless input devices like keyboards, mice, and presenters based on Nordic Semiconductor nRF24 transceivers, e.g. nRF24LE1 and nRF24LU1+. All software tools support USB dongles with the nrf-research-firmware by the Bastille...

ams-failopen

Signature fail-open dans AppleMediaServices Divulgation d'une faille zero-day Résumé Ce problème constitue une faille zero-day active et reflète un défaut de conception systémique dans AppleMediaServices.framework, plutôt qu'une régression ou un bug spécifique à une version. Une faille critique d...

CVE-2022-38766

CVE-2022-38766 PoC for vulnerability in Renault ZOE Keyless System CVE-2022-38766 Introduce Companylogo AUTOCRYPT MalHyuk Overview This vulnerability raised the question of whether ZOE electric vehicles are safe form RF hacking. For this reason, the actual ZOE vehicle released this year was...

CVE-2026-23004-Automotive-UDS-Authentication-Bypass-via-Replay-Attack

CVE-2026-23004 – تجاوز مصادقة UDS في السيارات عبر هجوم إعادة الإرسال كود البرنامج محاكي Python CAN‑UDS root@kitploit: udssim.py - ECU that authenticates with a simple challenge import random, hashlib class ECU: def initself: self.secret = b'longsecretkey' def generatechallengeself: self.challenge...

radio-hackbox

SySS Radio Hack Box The SySS Radio Hack Box is a proof-of-concept software tool to demonstrate the replay and keystroke injection vulnerabilities of the wireless keyboard Cherry B.Unlimited AES. Requirements Raspberry Pi Raspberry Pi Radio Hack Box shield a LCD, some LEDs, and some buttons...

CVE-2026-23010-CCSDS-Telecommand-Replay-Without-Sequence-Number

CVE-2026-23010 – Rejeu de télécommande CCSDS sans numéro de séquence Code du programme simulateur satellite Python root@kitploit: satellitesim.py - Spacecraft that executes telecommands without checking sequence number class Satellite: def initself: self.executed = set def receivetcself, cmdid,...

CVE-2026-53636

Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 3a5ac85, a security vulnerability has been identified in the Open edX LMS platform's LTI Learning Tools Interoperability Provider implementation. The validatetimestampandnonce function in...

EUVD-2026-70222

Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 3a5ac85, a security vulnerability has been identified in the Open edX LMS platform's LTI Learning Tools Interoperability Provider implementation. The validatetimestampandnonce function in...

CVE-2026-53636

The Open edX LMS platform has a replay vulnerability in its LTI (Learning Tools Interoperability) Provider implementation. The validate_timestamp_and_nonce function in lms/djangoapps/lti_provider/signature_validator.py does not validate OAuth nonces or timestamps, allowing an attacker who capture...

CVE-2026-0101-BLE-Address-Spoofing-via-Weak-Resolvable-Private-Address

CVE-2026-0101 – انتحال عنوان BLE عبر العنوان الخاص القابل للحل الضعيف كود البرنامج محاكاة Python باستخدام bleak root@kitploit: bleperipheralsim.py - Simulated BLE peripheral with weak RPA verification import asyncio, random, hashlib from bleak import BleakServer, BleakScanner Simplified - we'll u...

CVE-2026-82470

Rodauth (a Ruby authentication library) before 2.47.0 contains a TOTP code reuse vulnerability in its otp feature. The root cause is a failure to track the last accepted code timestamp, allowing an attacker who observes a valid time-based one-time password to replay it within the drift window and...

CVE-2026-13734

Zephyr's WireGuard VPN data-plane receive handler wgprocessdatamessage in subsys/net/lib/wireguard/wgcrypto.c validated the anti-replay counter too late. After AEAD decryption of a MESSAGETRANSPORTDATA packet succeeded, the code committed several peer-state changes — updatepeeraddr endpoint roami...

CVE-2026-13734 Zephyr WireGuard mutates peer state before anti-replay check, enabling capture-replay endpoint hijack

Zephyr's WireGuard VPN data-plane receive handler wgprocessdatamessage in subsys/net/lib/wireguard/wgcrypto.c validated the anti-replay counter too late. After AEAD decryption of a MESSAGETRANSPORTDATA packet succeeded, the code committed several peer-state changes — updatepeeraddr endpoint roami...