CVE-2013-4322_PoC

CVE-2013-4322PoC Простой PoC скрипт на Python, демонстрирующий уязвимость медленной передачи с chunked-кодированием POST...

browsertunnel

browsertunnel Browsertunnel is a tool for exfiltrating data from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a feature intended to reduce the perceived latency of websites by doing DNS lookups in the background for specified domains. DNS traffic does not appear i...

piraterf

🏴‍☠️ PIrateRF - Plateforme de transmission radio logicielle PIrateRF transforme votre Raspberry Pi Zero W en un générateur de signaux RF portable qui crée son propre hotspot WiFi. Contrôlez tout, des émissions FM aux modes numériques, depuis votre navigateur – piratez les ondes où que vous soyez !...

TagTinker

TagTinker V2.1 Инфракрасный инструментарий для исследования ESL для Flipper Zero Изучение протоколов • Анализ сигналов • Цифровое искусство → Запустить веб-приложение TagTinker Image Prep ← Обзор TagTinker — это приложение для Flipper Zero, предназначенное для изучения инфракрасных протоколов...

CVE-2025-45620

이슈 세부 정보 카메라 모델 PTC310UV2, 펌웨어 버전 0.1.0000.59 실행 중. 취약점은 카메라에 접근하는 데 사용되는 웹 인터페이스에서 발견되었습니다. 이 취약점은 침투 테스트 중 발견되었으며, 따라서 PoC 스크린샷의 일부 정보는 편집되었습니다. 설명 본 공개 자료에는 AVer 펌웨어 로그인 웹 인터페이스에서 식별된 두 가지 취약점이 포함되어 있습니다. 귀사 제품에 대해 잘 알지 못하므로 일부 용어가 정확하지 않을 수 있음을 유의해 주시기 바랍니다. 이 발견은 CVE-2025-45619에 비해 다소 포괄적이지만...

wave-share

wave-share Une preuve de concept pour la signalisation WebRTC via le son. Fonctionne avec tous les appareils dotés d'un microphone + haut-parleurs. S'exécute dans le navigateur. Les appareils à proximité négocient la connexion WebRTC en échangeant les données nécessaires du protocole de descripti...

masscan

MASSCAN : Scanner de ports IP massif Ceci est un scanner de ports à l'échelle d'Internet. Il peut scanner l'ensemble d'Internet en moins de 5 minutes, en transmettant 10 millions de paquets par seconde, à partir d'une seule machine. Son utilisation paramètres, sortie est similaire à nmap, le...

CVE-2025-26199

🛡️ CVE-2025-26199 — Transmission de mot de passe non sécurisée en clair dans CloudClassroom-PHP-Project v1.0 📄 Description CloudClassroom-PHP-Project v1.0 est vulnérable à la transmission non sécurisée des identifiants utilisateur. Lors du processus d'authentification, les mots de passe sont soumi...

Fujitsu IP Series - Hardcoded Credentials

Fujitsu Real-time Video Transmission Gear “IP series” use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. The credentials cannot be changed by the end-user and provide administrative...

http-stalling-detector

Детектор замедления HTTP DoS-атаки с замедлением HTTP используют неспособность веб-серверов определить, подключён ли удалённый клиент через медленное соединение или удалённый клиент намеренно отправляет данные очень медленно, чтобы веб-сервер не выполнил таймаут и не закрыл соединение для...

CVE-2026-77812

CVE-2026-77812 — DJI Drone Cleartext BLE Transmission of Wi-Fi PSK and Session UUID POC CVE record: https://vulners.com/cve/CVE-2026-77812 NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77812 Description DJI Drone expose a DUML control channel over Bluetooth. Every message on that channel — in bo...

etherify

Etherify - ramener l'éther dans l'ethernet c 2020 Jacek Lipkowski SQ5BPF [email protected] Conférence RC3 2020 : https://www.youtube.com/watch?v=7ek994-fwNE Etherify 1 et 2 : https://lipkowski.com/etherify avec RPI 4 Etherify 3 : https://lipkowski.com/etherify3/ sans câble ethernet Etherify ...

CVE-2026-98207

A flaw was found in the Linux kernel's MultiMediaCard Serial Peripheral Interface MMC SPI driver. A local user or connected device can trigger this flaw during multi-block data transfers that encounter a Cyclic Redundancy Check CRC transmission error. The driver initiates a recovery retry without...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Enterprise Webapps

Summary Multiple vulnerabilities were addressed in IBM Aspera Enterprise Webapps version 1.0.7 Vulnerability Details CVEID:CVE-2026-75095 DESCRIPTION: IBM Aspera Enterprise WebApps could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. CWE:CWE-400:...

CVE-2026-30081

CVE-2026-30081 CVE-2026-30081 официально опубликован организацией MITRE. Обзор уязвимости Поле| Значение ---|--- ID CVE| CVE-2026-30081 CWE| CWE-319: Передача конфиденциальной информации в открытом виде Модель устройства| QN-I-470 Прошивка| 6.1.1.B1 Степень серьёзности| ВЫСОКАЯ HIGH Производитель...

CVE-2026-104704 Cleartext Transmission of Sensitive Information in hMailServer

Progressive Robot hMailServer 6.0.0 through 6.3.5 does not enforce TLS for outbound SMTP delivery to a mail exchanger whose DNSSEC-validated TLSA records contain no DANE-EE usage 3 record, contrary to RFC 7672 section 2.2. The server used only DANE-EE records and treated a validated TLSA record s...

CVE-2026-104704 Cleartext Transmission of Sensitive Information in hMailServer

Progressive Robot hMailServer 6.0.0 through 6.3.5 does not enforce TLS for outbound SMTP delivery to a mail exchanger whose DNSSEC-validated TLSA records contain no DANE-EE usage 3 record, contrary to RFC 7672 section 2.2. The server used only DANE-EE records and treated a validated TLSA record s...

CVE-2026-46817

🚨 CVE-2026-46817 - Exécution de code à distance critique Oracle E-Business Suite – Oracle Payments Transmission de fichiers Vulnérabilité distante critique sans authentification affectant Oracle Payments Transmission de fichiers qui peut permettre une compromission totale de l'application via HTT...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid timing-related checks for WARNON. The soft/batadv interface for a queued OGM can be modified during the period in which the OGM is queued for transmission, as well as when the OGM is actually transmitted by the...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Slip: Make slhcremember more robust against malicious packets. syzbot found that slhcremember lacked checks against malicious packets 1. slhcremember only checks that the packet’s size is at least 20 bytes, which is...