323 matches found
btrpa-scan
btrpa-scan 一款蓝牙低功耗（BLE）扫描器，具有高级可解析私有地址（RPA）解析功能。发现附近的 BLE 设备，通过 MAC 地址跟踪特定设备，或使用身份解析密钥（IRK）解析隐私随机化地址。 作者： David Kennedy @HackingDave 公司： TrustedSec 功能 发现所有设备 - 扫描范围内所有广播的 BLE 设备，包含信号强度、估计距离、制造商数据和服务 UUID 定向搜索 - 通过 MAC 地址搜索特定设备并监控每次检测 IRK 解析 - 使用一个或多个身份解析密钥解析可解析私有地址，以识别使用随机地址保护隐私的设备 多 IRK -...
RF-CHAOS
RF CHAOS - Caos vía BLE / BT / WiFi / NFC / Etc. mediante Teléfonos Android RF CHAOS es una herramienta nativa de Android para escanear, registrar y explotar señales WiFi, Bluetooth, BLE y NFC. Creado porScramblr AKA @notdan AKA alotofnamesyoudontknow ℹ️ Si te mueres por tener el APK ya, las...
CentOS Linux 6 [TuxCare] Security Update: dovecot / dovecot-devel / dovecot-mysql / dovecot-pgsql / etc (CENTOS6:CLSA-2025:1758896552)
The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1758896552 advisory. - In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled...
CVE-2026-0101-BLE-Address-Spoofing-via-Weak-Resolvable-Private-Address
CVE-2026-0101 – Suplantación de dirección BLE mediante dirección privada resoluble débil Código del programa Python usando simulación bleak bleperipheralsim.py - Simulated BLE peripheral with weak RPA verification import asyncio, random, hashlib from bleak import BleakServer, BleakScanner...
CVE-2023-52709-PoC
CVE 2023-52709 "TI蓝牙协议栈无法生成可解析随机私有地址（RPA），导致已绑定对等设备服务中断" 的概念验证 CVE 2023-52709 摘要 在对待测设备（DUT）配置为可解析私有地址并运行Defensics测试用例SMP legacy 1001（循环模式）时，一段时间后设备会生成无法解析的随机私有地址，导致已绑定对等设备发生拒绝服务。 该潜在漏洞可能影响运行受影响SDK版本并启用了蓝牙隐私功能（使用可解析私有地址特性）的低功耗蓝牙设备。 本仓库中的脚本（cve-2023-52709.py）模拟了Defensics测试用例 1001 和 3 的攻击序列 重要函数...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dovecot (UTSA-2026-090088)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090088 advisory. In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled. Tenable has extracted the...
Security Bulletin: Security vulnerability in JavaScript affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak
Summary A security vulnerability in JavaScript affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak. JavaScript is used by IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak as part of its deployment. This bulletin identifies the fix...
Security Bulletin: Security vulnerability in IBM WebSphere Application Server Liberty affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak
Summary A security vulnerability in IBM WebSphere Application Server Liberty affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak. IBM WebSphere Application Server Liberty is used by IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak...
Oracle Linux 7 : dovecot (ELSA-2026-26564)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-26564 advisory. - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts 1866752 - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation...
dovecot security update
1:2.2.36-8 - update release number 1:2.2.36-7.1 - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts 1866752 - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation 1866757 - fix CVE-2020-12674 crash due to assert in RPA implementation 1866764 1:2.2.36-7 - generate...
MAL-2026-3573 Malicious code in @uipath/rpa-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27baf6f8e722fd9803bff5f0d455ae5867fcf87135864df02a6f269cccf659fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @uipath/rpa-legacy-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d4b6219eecb1a7c42be7dd373aba1a49cc25afcadaabb38d6ebf90522094568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-3572 Malicious code in @uipath/rpa-legacy-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d4b6219eecb1a7c42be7dd373aba1a49cc25afcadaabb38d6ebf90522094568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MiracleLinux 8 : dovecot-2.3.8-2.el8.2 (AXSA:2020-546:03)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-546:03 advisory. dovecot: Resource exhaustion via deeply nested MIME parts CVE-2020-12100 dovecot: Out of bound reads in dovecot NTLM implementation CVE-2020-12673...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001342)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001342 advisory. In drivers/pci/hotplug/rpadlparsysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device...
CVE-2023-31902
RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution RCE...
EUVD-2020-4970
Malware in sbrugna...
EUVD-2023-36191
Malicious code in bioql PyPI...