TagTinker

TagTinker V2.1 Kit de investigación de ESL infrarrojo para Flipper Zero Estudio de protocolos • Análisis de señales • Arte digital → Lanza la aplicación web TagTinker Image Prep ← Resumen TagTinker es una aplicación para Flipper Zero que explora protocolos infrarrojos de etiquetas electrónicas de...

browsertunnel

browsertunnel Browsertunnel is a tool for exfiltrating data from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a feature intended to reduce the perceived latency of websites by doing DNS lookups in the background for specified domains. DNS traffic does not appear i...

masscan

MASSCAN: Escáner de puertos IP masivo Este es un escáner de puertos a escala de Internet. Puede escanear todo Internet en menos de 5 minutos, transmitiendo 10 millones de paquetes por segundo, desde una sola máquina. Su uso parámetros, salida es similar a nmap, el escáner de puertos más famoso. E...

CVE-2020-25748

CVE-2020-25748 Descripción sugerida Se descubrió un problema de transmisión en texto claro en las cámaras Rubetek RV-3406, RV-3409 y RV-3411 versiones de firmware v342, v339. Un atacante en el medio puede interceptar y modificar los datos de video de la cámara, que se transmiten sin cifrar. Tambi...

piraterf

🏴‍☠️ PIrateRF - Plataforma de Transmisión Radioeléctrica Definida por Software PIrateRF transforma tu Raspberry Pi Zero W en un generador de señales RF portátil que crea su propio punto de acceso WiFi. Controla desde emisiones FM hasta modos digitales a través de tu navegador: ¡hackea las ondas...

CVE-2013-4322_PoC

CVE-2013-4322PoC A simple python script PoC demonstrating the slow POST chunked transmission vulnerability...

etherify

Etherify - devolviendo el éter a ethernet c 2020 Jacek Lipkowski SQ5BPF [email protected] 2020 RC3 Conference talk: https://www.youtube.com/watch?v=7ek994-fwNE Etherify 1 and 2: https://lipkowski.com/etherify with RPI 4 Etherify 3: https://lipkowski.com/etherify3/ with no ethernet cable...

http-stalling-detector

HTTP Stalling Detector HTTP stalling DoS attacks take advantage of an inability for webservers to determine if a remote client is just connected over a slow link or if the remote client is deliberately sending data very slowly to avoid the webserver doing a timeout and shutting down the connectio...

wave-share

wave-share Una prueba de concepto para la señalización WebRTC mediante sonido. Funciona con todos los dispositivos que tengan micrófono + altavoces. Se ejecuta en el navegador. Los dispositivos cercanos negocian la conexión WebRTC intercambiando los datos necesarios del Protocolo de Descripción d...

CVE-2025-45620

Issue details Camera model PTC310UV2 running firmware version 0.1.0000.59. The vulnerability is found in the web interface that is used to access the camera. The vulnerability was found during a penetration test, thus, certain information in the PoC screenshots have been redacted. Description Thi...

CVE-2025-26199

🛡️ CVE-2025-26199 — Transmisión Insegura de Contraseñas en Texto Claro en CloudClassroom-PHP-Project v1.0 📄 Descripción CloudClassroom-PHP-Project v1.0 es vulnerable a la transmisión insegura de credenciales de usuario. Durante el proceso de autenticación, las contraseñas se envían a través de HTT...

Fujitsu IP Series - Hardcoded Credentials

Fujitsu Real-time Video Transmission Gear “IP series” use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. The credentials cannot be changed by the end-user and provide administrative...

CVE-2025-50110

CVE-2025-50110 Transmisión de información sensible en texto claro en la aplicación Android EagleEyes Lite 1. Resumen Nombre : EagleEyesLite Versión : 2.0.0 Proveedor : AVTECH CWE : CWE-319: Transmisión de información sensible en texto claro, CWE-598: Uso del método de solicitud GET con cadenas de...

CVE-2025-36421

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2026-86689

Bransys ELD (Electronic Logging Device) is shipped with hardcoded MQTT credentials , which grant read access to real-time data for every active device across a subset of carriers connected to the affected MQTT broker. The vulnerability is assessed at CVSS 3.1: 5.9 (MEDIUM) and CVSS 4.0: 8.2 (HIGH...

CVE-2026-86689 Cleartext Transmission of Sensitive Information in Bransys ELD

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

The vulnerability of the Tenda AC7 router’s microprogramming software, related to the transmission of data in an open manner, allows a hacker to disclose the protected information.

The vulnerability of the Tenda AC7 router’s microprogramming software is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

CVE-2026-30081

CVE-2026-30081 CVE-2026-30081 has been officially published by MITRE. Vulnerability Overview...

The vulnerability of the Linux operating system’s kernel, related to the disclosure of information during data transmission, allows a perpetrator to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to the exposure of information during data transmission. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-73174

Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a network-adjacent passive observer to intercept management traffic and recover sensitiv...