browsertunnel

browsertunnel Browsertunnel is a tool for exfiltrating data from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a feature intended to reduce the perceived latency of websites by doing DNS lookups in the background for specified domains. DNS traffic does not appear i...

piraterf

🏴‍☠️ PIrateRF - Software-Defined Radio Transmission Platform PIrateRF transforms your Raspberry Pi Zero W into a portable RF signal generator that spawns its own WiFi hotspot. Control everything from FM broadcasts to digital modes through your browser - hack the airwaves from anywhere! 📡⚡ 🎬 Click...

CVE-2025-26199

🛡️ CVE-2025-26199 — Insecure Password Transmission via Cleartext in CloudClassroom-PHP-Project v1.0 📄 Description CloudClassroom-PHP-Project v1.0 is vulnerable to insecure transmission of user credentials. During the authentication process, passwords are submitted over unencrypted HTTP rather than...

etherify

Etherify - bringing the ether back to ethernet c 2020 Jacek Lipkowski SQ5BPF [email protected] 2020 RC3 Conference talk: https://www.youtube.com/watch?v=7ek994-fwNE Etherify 1 and 2: https://lipkowski.com/etherify with RPI 4 Etherify 3: https://lipkowski.com/etherify3/ with no ethernet cable...

TagTinker

TagTinker V2.1 Infrared ESL Research Toolkit for Flipper Zero Protocol study • Signal analysis • Digital Art → Launch the TagTinker Image Prep web app ← Overview TagTinker is a Flipper Zero app for exploring infrared electronic shelf-label ESL protocols. It allows you to transmit custom images an...

CVE-2025-50110

CVE-2025-50110 Cleartext Transmission of Sensitive Information in EagleEyes Lite Android Application 1. Overview Name : EagleEyesLite Version : 2.0.0 Vendor : AVTECH CWE : CWE-319: Cleartext Transmission of Sensitive Information, CWE-598: Use of GET Request Method With Sensitive Query Strings CVS...

http-stalling-detector

HTTP Stalling Detector HTTP stalling DoS attacks take advantage of an inability for webservers to determine if a remote client is just connected over a slow link or if the remote client is deliberately sending data very slowly to avoid the webserver doing a timeout and shutting down the connectio...

CVE-2026-77812

CVE-2026-77812 — DJI 无人机通过 BLE 明文传输 Wi-Fi PSK 和会话 UUID POC CVE 记录： https://vulners.com/cve/CVE-2026-77812 NVD： https://nvd.nist.gov/vuln/detail/CVE-2026-77812 描述 DJI 无人机通过蓝牙暴露了一个 DUML 控制通道。该通道上的每条消息——双向传输，即在 DJI Fly 应用和无人机之间——均以明文发送。未应用 BLE 链路层加密，也未应用应用层加密。 处于无线电范围内的被动攻击者可以读取每条命令和响应的完整内容，包括：...

masscan

MASSCAN: マスIPポートスキャナ これはインターネット規模のポートスキャナです。1台のマシンから1秒間に1000万パケットを送信し、5分未満でインターネット全体をスキャンできます。 使い方（パラメータ、出力）は、最も有名なポートスキャナである nmap と似ています。迷ったら、それらの機能のいずれかを試してみてください。多くのマシンの広範囲スキャンをサポートする機能は対応していますが、単一マシンの詳細スキャンは対応していません。 内部的には、scanrand、unicornscan、ZMap...

wave-share

wave-share 这是一个利用声音进行WebRTC信令的概念验证。适用于所有配备麦克风和扬声器的设备。在浏览器中运行。 附近的设备通过一系列音频音调交换必要的会话描述协议（SDP）数据，从而协商WebRTC连接。协商成功后，浏览器之间建立本地WebRTC连接，允许通过LAN交换数据。 观看演示视频（2分钟）： 亲自尝试：ggerganov.github.io/wave-share 最新消息： 我已将声音数据传输算法提取到独立的库 ggwave 中。 它可以轻松嵌入其他项目。 工作原理 WebRTC...

CVE-2026-103878

Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API. A StartTLS extended operation started after a Search request has been sent can lead to receive data in plain text before the TLS Handshake has been completed. This issue affects Apache Directory LDAP API:...

CVE-2026-103878 Apache Directory LDAP API: Injection of plaintext responses during StartTLS

Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API. A StartTLS extended operation started after a Search request has been sent can lead to receive data in plain text before the TLS Handshake has been completed. This issue affects Apache Directory LDAP API:...

EUVD-2026-91378

Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API. A StartTLS extended operation started after a Search request has been sent can lead to receive data in plain text before the TLS Handshake has been completed. This issue affects Apache Directory LDAP API:...

CVE-2026-103878

The Apache Directory LDAP API is vulnerable to a cleartext transmission of sensitive information (CWE-345). A StartTLS extended operation initiated after a Search request has been sent can result in the system receiving data in plain text before the TLS Handshake is completed. This issue affects ...

CVE-2026-103878

Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API. A StartTLS extended operation started after a Search request has been sent can lead to receive data in plain text before the TLS Handshake has been completed. This issue affects Apache Directory LDAP API:...

Fujitsu IP Series - Hardcoded Credentials

Fujitsu Real-time Video Transmission Gear “IP series” use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. The credentials cannot be changed by the end-user and provide administrative...

CVE-2026-103098

Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key...

EUVD-2026-91074

Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issue affects EasyIO NEO: before 3.3b25...

CVE-2026-103098

The GV-Eye software is vulnerable to sensitive information exposure due to the transmission of a sensitive key within the URL query parameter over an unencrypted HTTP connection. Because the request is sent in plaintext rather than via HTTPS, an attacker capable of monitoring network traffic can ...

EUVD-2026-91148

Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key...