CVE-2022-27254

CVE-2022-27254 PoC de la vulnerabilidad en el sistema de llave remota de Honda CVE-2022-27254 Descargo de responsabilidad: Solo con fines educativos. Tenga en cuenta que los descubridores de esta vulnerabilidad son Ayyappan Rajesh, un estudiante de UMass Dartmouth y HackingIntoYourHeart. Otros...

kcmdump

KCM dumper Quick script to dump the KCM database used by SSSD and recover Kerberos tickets in the CCACHE format. Initially based on SSSDKCMExtractor and KCMTicketFormatter. Description Since version 2.0.0 2018-08-13, the back end storage of the KCM responder of SSSD does not encrypt the database...

CVE-2024-42657

CVE-2024-42657 CVE-2024-42657 An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of encryption during login process. CVE-2024-42657: Summary: A vulnerability in the wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0...

PetitPotam-notest

Detección de ataques de retransmisión NTLM PetitPotam Un paquete de Zeek para detectar algunos intentos de desencadenar ataques de retransmisión NTLM mediante el exploit Petit Potam. Este paquete detectará lo que parecen ser intentos de explotación exitosos y fallidos. Distingue entre ellos...

TYPO3-v7.6.15-Unencrypted-Login-Request

TYPO3-v7.6.15-Solicitud-de-Inicio-de-Sesión-No-Cifrada TYPO3 v7.6.15 Solicitud de inicio de sesión no cifrada con número CVE asignado: CVE-2017-6370...

iOSRestrictionBruteForce

Fuerza Bruta de Código de Restricción de iOS Resumen Esta versión de la aplicación está escrita en Python, que se utiliza para descifrar el código de restricción de un iPhone/iPad aprovechando una falla en las copias de seguridad no cifradas que permite descubrir el hash y la sal...

phonepe-sensitive-data-exposure-cve-2025-5154

-Almacenamiento local inseguro de datos sensibles de usuario en la aplicación Android de PhonePe sin parche- Descubierto porhc4 Fecha de reporte: abril de 2025 Estado del CVE: CVE solicitado pendiente Solicitud de CVE 1862785 para ID de CVE Reques 📌 Descripción general Se descubrió una...

gxdlmsdirector-cve

Multiple vulnerabilities in Gurux GXDLMS Director – remote code execution Gurux GXDLMS Director is an open-source Windows program for interacting with energy meters through the use of DLMS/COSEM protocol. The software has a remote update functionality for add-in DLLs as well as for files containi...

CVE-2024-48955_Overview

CVE-2024-48955Descripción general Descripción: Netadmin 4 IAM con fallos de control de acceso. Versión afectada: V4.030319 El sistema NetAdmin devuelve los datos con las funcionalidades en el endpoint que "monta" los menús de funcionalidades, el retorno de esta llamada no está cifrado y como el...

CVE-2025-56513-NiceHash-Update-Chain-Compromise

CVE-2025-56513 Vulnerabilidad Crítica en la Cadena de Suministro del Mecanismo de Actualización de NiceHash QuickMiner Autor: Prince T Philip Rol: Investigador de Seguridad Independiente Gravedad: CRÍTICO — CVSS 9.8 Impacto: Ejecución Remota de Código / Compromiso de la Cadena de Suministro Estad...

CVE-2025-45620

Issue details Camera model PTC310UV2 running firmware version 0.1.0000.59. The vulnerability is found in the web interface that is used to access the camera. The vulnerability was found during a penetration test, thus, certain information in the PoC screenshots have been redacted. Description Thi...

CVE-2020-11539

CVE-2020-11539: Improper Access Control in Tata Sonata Smartband Information Description: It has been identified that the smart band has no pairing mode 0 BLE security level The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't hav...

OST-C2-Spec

Draft: Request for Discussion Abstract This document provides an overview of Version 1 of the OST C&C Specification. It is intended to provide a detailed description of messages and the fields within those messages. Introduction The motivation behind this specification is to provide a C&C messagi...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

bd-alaris-firmware-analysis

BD Alaris 8015 Firmware Security Analysis Firmware Security Analysis of the BD Alaris 8015 PC Unit: Unencrypted Wi-Fi Credential Storage and Compound Vulnerabilities CVE-2016-9355 -orange Overview This project presents a firmware security analysis of the BD Alaris 8015 Point-of-Care PC infusion...

CVE-2026-81330

The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless ran...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

EUVD-2026-75051

The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless ran...

CVE-2026-81330

The Softish C6 Ear Camera transmits live video to the companion EarVision Android application over unencrypted UDP streams . The application manifest explicitly permits cleartext traffic, and the video payload consists of reconstructable JPEG or WEBP frames . An attacker within local wireless ran...