crackle

crackle cracks BLE Encryption AKA Bluetooth Smart. crackle exploits a flaw in the BLE pairing process that allows an attacker to guess or very quickly brute force the TK Temporary Key. With the TK and other data collected from the pairing process, the STK Short Term Key and later the LTK Long Ter...

kr00ker

kr00ker ============ 설명 이 스크립트는 KR00K 취약점CVE-2019-15126을 악용하기 위한 간단한 실험입니다. 이 취약점은 취약한 장치액세스 포인트 또는 클라이언트에서 일부 WPA2 CCMP 데이터를 복호화할 수 있게 합니다. 보다 구체적으로, 이 스크립트는 다음을 알 때 WPA2 CCMP 패킷의 복호화된 데이터를 검색하려고 시도합니다: TK 128비트 모두 0 Nonce 패킷 헤더에 평문으로 전송됨 암호화된 데이터 여기서: WPA2 AES-CCMP 복호화 -- AESNonce,TK XOR 암호화된 데...

Pollenisator

Pollenisator 는 침투 테스터와 감사자가 일부 도구/스크립트의 사용을 자동화하고 추적할 수 있도록 돕는 도구입니다. Python 3로 작성됨 "침투 테스트 객체"의 모델화 제공: 범위, 호스트, 포트, 명령, 도구 등 도구/스크립트는 4가지 카테고리로 분리: wave, Network/domain, IP, Port 객체는 NoSQL DB Mongo에 저장됨 객체 간 링크를 유지하여 쿼리 가능 객체는 파서/수동 입력을 통해 생성 가능 비즈니스 로직 구현 가능 자동 취약점 참조, 항목 트리거 등 많은 도구/스크립트 실행 조...

CentOS Linux 8.4 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1754413251)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1754413251 advisory. - Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without...

CentOS Linux 8 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2025:1754413156)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2025:1754413156 advisory. - Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk witho...

CentOS Linux 8.5 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1754342893)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1754342893 advisory. - Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without...

CVE-2024-55211

CVE-2024-55211 Tk-Rt-Wr135G의 쿠키 기반 인증 취약점 영향을 받는 공급업체 : Think Technology 영향을 받는 제품 : Wireless Router Ac 1199Mbps Tk-Rt-Wr135G 영향을 받는 버전 : 펌웨어 V3.0.2-X000 설명 이 취약점으로 인해 TK-RT-WR135G 라우터의 로그인 양식을 우회할 수 있으며, 공격자는 라우터를 위해 설계된 모든 구성을 변경할 수 있습니다. 이는 LoginStatus 쿠키의 값을 변경하여 초기 값인 "false"를 "true"로 바꿈으로써...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2023-000317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000317 advisory. Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortable with using Git on the command-line. Git GU...

[SECURITY] Fedora 45 Update: tkimg-2.1.1-1.fc45

This package contains a collection of image format handlers for the Tk photo image type, and a new image type, pixmaps...

[SECURITY] Fedora 44 Update: tkimg-2.1.1-1.fc44

This package contains a collection of image format handlers for the Tk photo image type, and a new image type, pixmaps...

[SECURITY] Fedora 43 Update: tkimg-2.1.1-1.fc43

This package contains a collection of image format handlers for the Tk photo image type, and a new image type, pixmaps...

CVE-2026-81697 openssl_encrypt before 1.4.9 KDF Downgrade via CWD-relative Configuration

opensslencrypt pip package openssl-encrypt versions = 1.4.8 contain a CWD-relative configuration file resolution flaw in cryptsettings.py, where CONFIGFILE originally the absolute per-user path /.cryptsettings.json is reassigned at line 84 to the bare relative name 'cryptsettings.json'. As a...

CVE-2026-81697: Untrusted Search Path

opensslencrypt pip package openssl-encrypt versions = 1.4.8 contain a CWD-relative configuration file resolution flaw in cryptsettings.py, where CONFIGFILE originally the absolute per-user path /.cryptsettings.json is reassigned at line 84 to the bare relative name 'cryptsettings.json'. As a...

PT-2026-82598

Name of the Vulnerable Software and Affected Versions openssl-encrypt versions prior to 1.4.9 Description A configuration file resolution flaw exists in crypt settings.py where the CONFIG FILE variable is reassigned to a relative path. This causes the legacy Tk GUI's SettingsTab to read and write...

[SECURITY] Fedora 44 Update: python-pillow-12.3.0-1.fc44

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

[SECURITY] Fedora 44 Update: python-pillow-12.2.0-1.fc44

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

[SECURITY] Fedora 43 Update: python-pillow-11.3.0-8.fc43

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

CVE-2019-20470

An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It performs actions based on certain SMS commands. This can be used to set up a voice communication channel from the watch to any telephone number, initiated by sending a specific SMS and using the default password,...

CVE-2019-20471

An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. When using the device at initial setup, a default password is used 123456 for administrative purposes. There is no prompt to change this password. Note that this password can be used in combination with CVE-2019-2047...

CVE-2019-20473

An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. Any SIM card used with the device cannot have a PIN configured. If a PIN is configured, the device simply produces a "Remove PIN and restart!" message, and cannot be used. This makes it easier for an attacker to use...