easy-exploits

easy-exploits The current repository contains exploits of different CVE IDs that were identified in the past by me CVE-2021-37910, CVE-2021-40288, CVE-2021-41435, CVE-2021-41436, CVE-2021-41437, CVE-2021-41441, CVE-2021-41442, CVE-2021-41445, CVE-2021-41449, CVE-2021-41450, CVE-2021-41451,...

WPAxFuzz

!Contributorscontributors-shieldcontributors-url !Stargazersstars-shieldstars-url !Forksforks-shieldforks-url !Issuesissues-shieldissues-url !MIT Licenselicense-shieldlicense-url Un Fuzzer Wi-Fi completo Reportar un error · Solicitar una característica Tabla de contenidos 1. Acerca del proyecto 2...

bcm4360-wpa3

WPA3-SAE + 802.11w en el Broadcom BCM4360 blob wl cerrado Apple/Broadcom nunca le dio al BCM4360 14e4:43a0 WPA3. Su único controlador para Linux es el blob cerrado broadcom-sta wl; brcmfmac no puede manejarlo. Esto añade WPA3-SAE + PMF 802.11w completo a ese blob cerrado — enteramente desde...

CVE-2024-20137

CVE-2024-20137 Python code for expoiting the vulnerability in wlan driver of MediaTek SOCs MT6890, MT7622, MT7915, MT7916, MT7981, MT7986 MediaTek: https://corp.mediatek.com/product-security-bulletin/December-2024 NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-20137 About the code This code is...

kernel: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. A remote attacker, by sending a specially crafted short authentication frame during the SAE Simultaneous Authentication of Equals authentication exchange, could trigger a heap overflow. This vulnerability allows for potential arbitrary...

Astra Linux – Vulnerability in wpa

Implementations of SAE in hostapd before version 2.10, and wpasupplicant before version 2.10, are vulnerable to side-channel attacks due to cache access patterns. NOTE: This issue exists due to an incomplete fix for CVE-2019-9494...

SUSE CVE-2026-72003

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame brcmfnotifyauthframerx takes the frame length from the firmware event and copies the frame body with the management header offset subtracted: u32 mgmtframelen = e-datal...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: brcmfnotifyauthframerx – A heap overflow occurs when a short auth frame is processed. The function brcmfnotifyauthframerx retrieves the frame length from the firmware event and copies the frame body by subtracting the offse...

CVE-2026-72003

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. A remote attacker, by sending a specially crafted short authentication frame during the SAE Simultaneous Authentication of Equals authentication exchange, could trigger a heap overflow. This vulnerability allows for potential arbitrary...

CVE-2026-72003

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame brcmfnotifyauthframerx takes the frame length from the firmware event and copies the frame body with the management header offset subtracted: u32 mgmtframelen = e-datal...

UBUNTU-CVE-2026-72003

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame brcmfnotifyauthframerx takes the frame length from the firmware event and copies the frame body with the management header offset subtracted: u32 mgmtframelen = e-datal...

CVE-2026-72003

CVE-2026-72003 observable in the Linux kernel affects the brcmfmac cyw WLAN driver. The issue arises in brcmf_notify_auth_frame_rx(), where the code derives mgmt_frame_len from e->datalen and subtracts offsetof(struct ieee80211_mgmt, u). If mgmt_frame_len is smaller than the 24-byte header off...

PT-2026-72192

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A remotely triggered heap overflow exists in the brcmfmac module. The brcmf notify auth frame rx function calculates the frame length by subtracting the management header offset from the...

Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail bsc1239461. Missing network context...

SUSE-SU-2026:3490-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail bsc1239461. - Missing network context...

SUSE-SU-2026:23072-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: Security issues fixed: - CVE-2025-24912: RADIUS pending request dropping bsc1239461. - CVE-2026-58374: missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be MLO association request processing allows an unauthenticated user to send a crafte...

SUSE SLED15 / SLES15 Security Update : wpa_supplicant (SUSE-SU-2026:3103-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3103-1 advisory. - CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the...

Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail bsc1239461. CVE-2026-58374: missing bounds...

SUSE-SU-2026:3103-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail bsc1239461. - CVE-2026-58374: missing...

CVE-2026-42467

An issue was discovered in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe 2025-11-30 in SAEJ1939ReadBinaryDataTransferDM16 causing a denial of service via crafted CAN frame on the J1939 bus...