CVE-2025-65753

CVE-2025-65753 CVE-2025-65753 的概念验证：在 Gryphon Guardian 接入点（固件版本 01.06.0006.22）上，由于 TLS 证书验证不当而导致的远程代码执行。 描述 Gryphon Guardian WiFi 接入点（固件版本 01.06.0006.22）未能正确验证通过应用提示后下载的互联网 speedtest 客户端的 TLS 证书。此缺陷使攻击者能够拦截并操纵通信，向该客户端注入恶意代码，随后该代码会以 root 身份在接入点上执行。 PoC 利用此漏洞有两种方式： 通过 MitM 攻击，直接拦截接入点与服务器之间的通信 通过伪造...

penglab

Penglab Abuse of Google Colab for fun and profit. 🐧 What is it ? Penglab is a ready-to-install setup on Google Colab for cracking hashes with an incredible power, really useful for CTFs. See benchmarks below. It installs by default : Hashcat John Hydra SSH with ngrok And now, it can also : Launch...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: promxy, kiali, nri-mssql, opentofu, src-fingerprint, prometheus-adapter, kubernetes-csi-node-driver-registrar, delve, rancher, crossplane-provider-aws-dynamodb, neuvector-scanner, opa-envoy, terragrunt, harbor-registry, pulumi-kubernetes-operator, cass-operator,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: etcd, opencost, supercronic, newrelic-k8s-metadata-injection, kafka-proxy, neuvector-scanner, hey, envoy-ratelimit, sriov-network-device-plugin, zot, fluxcd-kustomize-mutating-webhook, tkn, hugo-extended, clickhouse-operator, ghaudit, kyverno-notation-aws,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: omnibump, rancher-loglevel, beats, terraform-provider-azapi-fips, crossplane-provider-gitlab-fips, prometheus-snmp-exporter, longhorn-manager-fips, kubernetes-dashboard-web-fips, vault-k8s, cilium-cli, ingress-nginx-controller, local-path-provisioner, s5cmd, cortex,...

Exploit for CVE-2025-65753

CVE-2025-65753 Proof of concept for CVE-2025-65753: Remote co...

CVE-2025-12946

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...

EUVD-2025-202283

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...

CVE-2025-12946

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...

CVE-2025-12946

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...

CVE-2025-12946 Improper input validation in NETGEAR Nighthawk routers

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...

CVE-2025-12946

CVE-2025-12946 affects NETGEAR Nighthawk routers and related models (RS700, RAX54Sv2, RAX41v2, RAX50, RAXE500, RAX41, RAX43, RAX35v2, RAXE450, RAX43v2, RAX42, RAX45, RAX50v2, MR90, MS90, RAX42v2, RAX49S). Root cause is improper input validation in the speedtest feature, enabling WAN-side attacker...

CVE-2025-12946 Improper input validation in NETGEAR Nighthawk routers

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...

NETGEAR多款产品 安全漏洞

NETGEAR Nighthawk is a series of wireless routers from NETGEAR. A security vulnerability exists in various NETGEAR products that stems from improper input validation for the speedtest feature, which could allow an attacker to use man-in-the-middle techniques to manipulate DNS responses and execut...

CVE-2025-12946: Improper Input Validation

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...

PT-2025-50105

Name of the Vulnerable Software and Affected Versions NETGEAR Nighthawk routers versions 1.0.7.82 and earlier NETGEAR RAX54Sv2 versions before V1.1.6.36 NETGEAR RAX41v2 versions before V1.1.6.36 NETGEAR RAX50 versions before V1.2.14.114 NETGEAR RAXE500 versions before V1.2.14.114 NETGEAR RAX41...

EUVD-2022-52210

Malicious code in bioql PyPI...

CVE-2022-4957

A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file results/stats.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: kubecolor, velero-plugin-for-csi, opencost, supercronic, gosu, neuvector-scanner, hey, cass-operator, kube-metrics-adapter, nri-cassandra, sriov-network-device-plugin, zot, buildkitd, tkn, flux-kustomize-controller, kyverno-notation-aws, ghaudit, velero-plugin-for-aw...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: kubecolor, velero-plugin-for-csi, opencost, supercronic, gosu, neuvector-scanner, hey, cass-operator, kube-metrics-adapter, nri-cassandra, sriov-network-device-plugin, zot, buildkitd, tkn, flux-kustomize-controller, kyverno-notation-aws, ghaudit, velero-plugin-for-aw...