FTC-Skystone-Dark-Angels-Romania-2020

NOTICE This repository contains the public FTC SDK for the SKYSTONE 2019-2020 competition season. Formerly this software project was hosted here. Teams who are competing in the SKYSTONE Challenge should use this new SKYSTONE repository instead of the older and no longer updated ftcapp repository...

burp-automation

BurpOMation Realizando escaneo automatizado usando Burp Suite Pro & Vmware Burp Rest API con Robot Framework usando Python3. Blog Visita el blog para una explicación detallada de cada paso. Blog de Explicación e Instalación Qué hace Ejecución con un solo clic usando bash que instala todas las...

WordPress RobotCPA 5 - Directory Traversal

The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter. id: CVE-2015-9480 info: name: WordPress RobotCPA 5 - Directory Traversal author: daffainfo severity: high description: The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter...

CVE-2022-29856-PoC

CVE-2022-29856-PoC CVE-2022-29856 の最小限の PoC クレジット: https://dolosgroup.io/blog/2022/4/28/anatomy-of-a-zero-day-how-to-decrypt-a-robot...

Lock-Picking-Robot

🔑 Unlocked 🔑 はじめに 背景 オープンソースの鍵開けロボットです。基本的に、多くのマスターキー（最も一般的な例はTSA 007で、これは問題があります）が使われています。1つの鍵で多くの異なるロックを開けられること、特にロックの所有者がその存在を知らない（またはAliExpressで1ポンドで購入できる）ことは、重大なセキュリティ問題です。しかし、TSAや鍵屋などは特定の状況でロックを開ける必要があり、彼らにとってロックを開けやすくすると、誰にとっても開けやすくなってしまいます。 🔒 ➡️ 🔑🤖 ➡️ 🔓 というわけで、鍵開けロボット!!!...

aztarna

此仓库已存档，不再维护。关于机器人足迹和指纹识别的未来进展，请参阅 alurity。 aztarna 此仓库包含 Alias Robotics 的 aztarna，一款用于机器人足迹探测的工具。 Alias Robotics 支持原始机器人制造商评估其安全性并提升软件质量。我们绝不鼓励或促进对运行中机器人系统的未经授权篡改。这可能导致严重的人身伤害和物质损失。 HTML 阅读版： Aztarna, a footprinting tool for robots 针对 ROS 系统中存在的 ROS 节点列表（发布者和订阅者） 每个节点发布和订阅的话题，包括话题类型 每个节点提供的 ROS 服...

golismero

What's GoLismero? GoLismero is an open source framework for security testing. It's currently geared towards web security, but it can easily be expanded to other kinds of scans. The most interesting features of the framework are: Real platform independence. Tested on Windows, Linux, BSD and OS X. ...

fsociety

Paquete de Herramientas de Hacking Fsociety Un marco de pruebas de penetración, tendrás cada script que un hacker necesita. Funciona con Python 2. Para una versión de Python 3, consulta nuestra versión actualizada en fsociety-team/fsociety. Fsociety contiene todas las herramientas utilizadas en l...

dr_robot

root@kitploit: . . . . . . . : \ : \ : \ : . \ : / : . \ \ :| | | || || || : | || | \ | : | | | :| | . | || : \ | : \ | : || | | : | | | |. / | || |\ . / |/ . / | | :/ || || :/ :/ || : : : Copyright 2019 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of...

EUVD-2026-58817

A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...

CVE-2026-74240

A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...

CVE-2026-74240 Quay: jwt claim validation bypasses in quay federated robot and sso authentication

A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...

CVE-2026-74240

The CVE concerns Red Hat Quay’s JWT validation for federated robot accounts and SSO, where flawed audience verification and insufficient enforcement of azp and sub allow a token from the same identity provider to bypass security boundaries, potentially leading to unauthorized access where audienc...

CVE-2026-74240

A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...

PT-2026-72126

Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description Red Hat Quay contains flaws in the validation of JSON Web Tokens JWT used for single sign-on SSO authentication and federated robot accounts. The issues involve improper audience...

CVE-2026-66403

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor map and log information stored on the affected products may be retrieved...

CVE-2026-66411

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot...

CVE-2026-66411

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot...

CVE-2026-66411

The CVE-2026-66411 entry concerns DEEBOT PRO M1 and DEEBOT PRO K1VAC, where the WebSocket authentication implementation is incorrect (CWE-303). An unauthenticated attacker may connect to and operate the affected robot. Documented impact includes potential unauthorized control of the device, with ...

CVE-2026-66409

DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot...