CVE-2022-27254

CVE-2022-27254 PoC de la vulnerabilidad en el sistema de llave remota de Honda CVE-2022-27254 Descargo de responsabilidad: Solo con fines educativos. Tenga en cuenta que los descubridores de esta vulnerabilidad son Ayyappan Rajesh, un estudiante de UMass Dartmouth y HackingIntoYourHeart. Otros...

gxdlmsdirector-cve

Gurux GXDLMS Director 多个漏洞 – 远程代码执行 Gurux GXDLMS Director 是一个开源的 Windows 程序，用于通过 DLMS/COSEM 协议与电能表交互。 该软件具有远程更新功能，可用于更新插件 DLL 以及包含 OBIS 代码的文件（与智能电表交互所需的设备特定定义）。 CVEID| 受影响产品及版本| 问题类型 ---|---|--- CVE-2020-8809| Gurux GXDLMS Director 8.5.1905.1301 之前的所有版本| CWE-494: 无完整性检查的代码下载 CVE-2020-8810| Gurux...

bd-alaris-firmware-analysis

BD Alaris 8015 固件安全分析 BD Alaris 8015 PC 单元的固件安全分析：未加密的 Wi-Fi 凭据存储与复合漏洞（CVE-2016-9355） -orange 概述 本项目对 BD Alaris 8015 床边（PC）输液泵进行了固件安全分析，重点关注 CVE-2016-9355 —— 该漏洞允许从设备的 NAND 闪存中提取未加密的 Wi-Fi 凭据。 课程： CY 7790 - 医疗设备网络安全 教授： Kevin Fu（前 FDA 医疗设备网络安全代理主任） 院校： 东北大学 团队： Kalyan、Varun、Abisath、Arafat 主要发现...

kcmdump

KCM dumper Script rápido para volcar la base de datos KCM utilizada por SSSD y recuperar tickets de Kerberos en formato CCACHE. Inicialmente basado en SSSDKCMExtractor y KCMTicketFormatter. Descripción Desde la versión 2.0.0 2018-08-13, el almacenamiento backend del respondedor KCM de SSSD ya no...

OST-C2-Spec

ドラフト: ディスカッション のリクエスト 概要 この文書は、OST C&C 仕様書バージョン 1 の概要を提供します。 また、メッセージとそれらのメッセージ内のフィールドの詳細な説明を提供することを目的としています。 はじめに この仕様書の背後にある動機は、逐語的に実装できる、または単にプロジェクト開発者へのインスピレーションとして役立つ C&C メッセージングプロトコル（タスキング、構造化出力、ピアツーピアルーティングを含む）を提供することです。 この文書は C&C が何であるかを説明することを意図したものではありません。 読者は C&C...

cve-2020-13777

Zeek test script para CVE-2020-13777 Este script realiza um teste simples para verificar se um servidor é potencialmente vulnerável ao CVE-2020-13777. O CVE-2020-13777 faz com que o GnuTLS crie tickets de sessão não criptografados. Isto parece ser detectável verificando se o gnutls define o keyna...

TYPO3-v7.6.15-Unencrypted-Login-Request

TYPO3-v7.6.15-Unencrypted-Login-Request TYPO3 v7.6.15 طلب تسجيل دخول غير مشفّر، رقم CVE المعين: CVE-2017-6370...

phonepe-sensitive-data-exposure-cve-2025-5154

-Unsichere-lokale-Speicherung-sensibler-Benutzerdaten-in-der-PhonePe-Android-App-ungepatcht- Entdeckt vonhc4 Meldedatum: April 2025 CVE-Status: CVE beantragt ausstehend CVE-Anfrage 1862785 für CVE-ID-Anfrage 📌 Überblick In der PhonePe-Android-App getestet mit v25.03.21.0 wurde eine kritische loka...

CVE-2025-45620

Dettagli dell'issue Il modello di telecamera PTC310UV2 con versione firmware 0.1.0000.59. La vulnerabilità è stata riscontrata nell'interfaccia web utilizzata per accedere alla telecamera. La vulnerabilità è stata individuata durante un penetration test, pertanto alcune informazioni negli...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

CVE-2024-27316

CVE-2024-27316 Decidi chamar essa vulnerabilidade especificamente de "CVE-2024-27316" pois a testei contra essa vulnerabilidade. A falha subjacente afeta outras CVEs, então pensei em mencioná-las na esperança de que outros possam testar e modificar este PoC : Este PoC atualmente funciona apenas...

iOSRestrictionBruteForce

iOS-Einschränkungscode-Bruteforce Übersicht Diese Version der Anwendung ist in Python geschrieben und wird verwendet, um den Einschränkungscode eines iPhone/iPad zu knacken, indem sie einen Fehler in unverschlüsselten Backups ausnutzt, der es ermöglicht, den Hash und Salt zu ermitteln...

CVE-2024-42657

CVE-2024-42657 CVE-2024-42657 Ein Problem im wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 ermöglicht es einem entfernten Angreifer, vertrauliche Informationen durch die fehlende Verschlüsselung während des Anmeldeprozesses zu erlangen. CVE-2024-42657: Zusammenfassung: Eine Schwachstelle im...

CVE-2024-48955_Overview

CVE-2024-48955Overview Descrizione: Netadmin 4 IAM con problemi di controllo degli accessi. Versione interessata: V4.030319 Il sistema NetAdmin restituisce i dati con le funzionalità nell'endpoint che "costruisce" i menu delle funzionalità, il ritorno di questa chiamata non è crittografato e poic...

CVE-2020-11539

CVE-2020-11539: Controllo di accesso improprio in Tata Sonata Smartband Informazioni Descrizione: È stato identificato che il smart band non ha pairing modalità 0 livello di sicurezza BLE. I dati trasmessi via etere non sono crittografati. Inoltre, i dati inviati al smart band non hanno alcuna...

PetitPotam-notest

Rilevamento attacchi NTLM Relay di PetitPotam Un pacchetto Zeek per rilevare alcuni tentativi di innescare attacchi NTLM relay tramite l'exploit Petit Potam. Questo pacchetto rileva quelli che sembrano essere tentativi di exploit riusciti e non riusciti. Distingue tra i due esaminando il codice d...

CVE-2025-56513-NiceHash-Update-Chain-Compromise

CVE-2025-56513 Vulnerabilidade Crítica na Cadeia de Suprimentos do Mecanismo de Atualização do NiceHash QuickMiner Author: Prince T Philip Role: Pesquisador de Segurança Independente Severity: CRÍTICA — CVSS 9.8 Impact: Execução Remota de Código / Comprometimento da Cadeia de Suprimentos Status:...

CVE-2026-77812

DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...

PT-2026-79388

Name of the Vulnerable Software and Affected Versions DJI Neo versions prior to 01.00.0400 DJI Neo 2 versions prior to 01.00.0500 DJI Flip versions prior to 01.00.1200 DJI Air 3 versions prior to 01.00.1600 DJI Air 3S versions prior to 01.00.1400 DJI Avata 2 versions prior to 01.00.0400 DJI Avata...