HTTP-Shell

HTTP-Shell HTTP-Shell is Multiplatform Reverse Shell. This tool helps you to obtain a shell-like interface on a reverse connection over HTTP. Unlike other reverse shells, the main goal of the tool is to use it in conjunction with Microsoft Dev Tunnels, in order to get a connection as close as...

mip22

mip22 mip22 v3.3 mip22 is a advanced phishing tool 83 default websites, clone any site with manual method, add any site with customize method, mask link with subdomains, url shortener, audio notice for view the credentials live, music in background etc... The program is made for educational...

vopono

vopono is a tool to run applications through VPN tunnels via temporary network namespaces. This allows you to run only a handful of applications through different VPNs simultaneously, whilst keeping your main connection as normal. vopono includes built-in killswitches for both Wireguard and...

CVE-2026-116184

OpenRemote before version 1.31.0 is vulnerable to an authorization bypass that allows realm admins to perform Cross-Realm Gateway Impersonation via Websocket. The root cause is that GatewayService only validates the gateway ID without verifying the associated realm . Consequently, an attacker wit...

amradio

AM Radio Break-in System A 12-channel AM radio broadcast system using Red Pitaya FPGA for emergency alert transmission in unmanned tunnels. Why AM radio in a tunnel? During construction and maintenance, vehicles with standard AM radios transit through tunnels that have no mobile coverage. AM...

ligolo

Ligolo : Reverse Tunneling made easy for pentesters, by pentesters Table of Contents Introduction Use case Quick Demo Performance Usage Setup / Compiling How to use? TL;DR Options Features To Do Licensing Credits Introduction Ligolo is a simple and lightweight tool for establishing SOCKS5 or TCP...

wireguard-tools

wireguard-tools — tools for configuring WireGuard This supplies the main userspace tooling for using and configuring WireGuard tunnels, including the wg8 and wg-quick8 utilities. This project supports Linux, OpenBSD, FreeBSD, macOS, Windows, and Android. More information may be found...

firezone

Blazing-fast remote access with identity-based policies, attested device trust, and detailed audit logs Documentation | Quickstart | Download Clients | Support Overview Firezone is a secure remote access platform built on WireGuard®. Connect users to private applications, databases, servers, and...

Malicious code in sitecard (PyPI)

Source: kam193 49be8995374d0e3d2bcb8f163675221e14bfb6d7d968a6fa5d8165e4f493997d The package provides code to create an SSH session exposed via tunnels. By default, created session is accessible without any auth and reported to a hardcoded location, exposing any user to be accessed by attacker. --...

Malicious code in sitecard (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 49be8995374d0e3d2bcb8f163675221e14bfb6d7d968a6fa5d8165e4f493997d The package provides code to create an SSH session exposed via tunnels. By default, created session is accessible without any auth and reported to a hardcoded...

CVE-2026-98692

A flaw was found in the Linux kernel's Thunderbolt subsystem. DisplayPort DP tunnels activated without a required completion callback fail to release object references during tunnel setup, such as when restoring from system hibernation. A local user or repeated hibernation cycles can cause kernel...

CVE-2026-98691

A flaw was found in the Linux kernel's Thunderbolt subsystem. This vulnerability can lead to a Denial of Service DoS or system instability when a Thunderbolt device is disconnected or unbound. When a Thunderbolt domain is stopped, inactive DisplayPort DP tunnels are not properly torn down, allowi...

CVE-2026-114661 OpenRemote 1.2.0 before 1.31.0 Missing Authorization in Gateway Tunnel Endpoints

OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any authenticated user to start, stop and query gateway tunnels without an administrative role. Attackers can send POST or DELETE requests to the gateway tunnel endpoint to open...

CVE-2026-114661

OpenRemote versions 1.2.0 before 1.31.0 are vulnerable to a missing authorization flaw in the GatewayServiceResource component. This vulnerability allows any authenticated user—regardless of whether they hold an administrative role—to perform unauthorized actions such as starting, stopping, or qu...

EUVD-2026-107903

OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any authenticated user to start, stop and query gateway tunnels without an administrative role. Attackers can send POST or DELETE requests to the gateway tunnel endpoint to open...

Linux Distros Unpatched Vulnerability : CVE-2026-98691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Tear down inactive DP tunnels when the domain is stopped tbstop only tears down DMA tunnels so a DP tunnel that is still waiting for dprxwork to...

CVE-2026-98691

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Tear down inactive DP tunnels when the domain is stopped tbstop only tears down DMA tunnels so a DP tunnel that is still waiting for dprxwork to complete keeps that work queued while the routers are removed and the...

DEBIAN-CVE-2026-98691

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Tear down inactive DP tunnels when the domain is stopped tbstop only tears down DMA tunnels so a DP tunnel that is still waiting for dprxwork to complete keeps that work queued while the routers are removed and the...

CVE-2026-98691

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Tear down inactive DP tunnels when the domain is stopped tbstop only tears down DMA tunnels so a DP tunnel that is still waiting for dprxwork to complete keeps that work queued while the routers are removed and the...

CVE-2026-98691

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Tear down inactive DP tunnels when the domain is stopped tbstop only tears down DMA tunnels so a DP tunnel that is still waiting for dprxwork to complete keeps that work queued while the routers are removed and the...