EUVD-2026-75055

An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose the live video stream, device services, status interfaces, and firmware-update functionality...

CVE-2026-81640

Softish C6 Ear Camera and its companion EarVision Android application are affected by a use of hard-coded credentials vulnerability (CVSS 3.1: 8.8 HIGH ). An attacker in an adjacent network position, with low complexity , no privileges required , and no user interaction , can derive the camera's ...

CVE-2026-81640 Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials

An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose the live video stream, device services, status interfaces, and firmware-update functionality...

wifi-cracking

Cracking de Wi-Fi Crackea routers Wi-Fi WPA/WPA2 con Airodump-ng y Aircrack-ng/Hashcat. Este es un breve tutorial que ilustra cómo crackear redes Wi-Fi aseguradas con contraseñas débiles. No es exhaustivo, pero debería ser información suficiente para que puedas probar la seguridad de tu propia re...

ESPTouchCatcher

eWeLink mobile Application - Incorrect Access Control Vulnerability CVE-2020-12702 Weak encryption in the Quick Pairing mode in the eWeLink mobile application Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier allows physically proximate attackers to eavesdrop on Wi-Fi...

eWeLink-QR-Code

eWeLink mobile Application - Incorrect Access Control Vulnerability CVE-2021-27941 Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application through 4.9.2 on Android and through 4.9.1 on iOS allows a physically proximate attacker...

mitm-router

☠ Router de Hombre-en-el-medio 🌐 Convierte cualquier computadora Linux en una red Wi-Fi pública que realiza MITM silenciosamente en todo el tráfico HTTP. Se ejecuta dentro de un contenedor Docker usando hostapd, dnsmasq, y mitmproxy para crear una red inalámbrica honeypot abierta llamada "Public"...

skylift

SkyLift SkyLift is an experimental Wi-Fi/BT geolocation spoofing device that uses the ESP8266 or ESP32 boards to broadcast Wi-Fi beacon frames or BT advertisements that emulate the wireless infrastructure from a remote/target location. The above example shows a successful georelocation to Peter...

kernel: wifi: nl80211: reject oversized EMA RNR lists

A flaw was found in the Linux kernel's nl80211 Wi-Fi subsystem. The nl80211parsernrelems function, responsible for parsing EMA RNR Enhanced Multiple Access Reduced Neighbor Report lists, does not properly handle an excessive number of nested NL80211ATTREMARNRELEMS inputs. This improper input...

kernel: wifi: mt76: mt7925: fix crash in reset link replay

A flaw was found in the MediaTek mt7925 Wi-Fi driver within the Linux kernel. During a reset recovery process, the driver can attempt to access a network configuration that no longer exists. This can lead to a null pointer dereference, causing the system to crash and resulting in a Denial of...

kernel: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses

A flaw was found in the Linux kernel. The mt7925 Wi-Fi driver incorrectly dispatches a memory-mapped I/O MMIO specific event to non-MMIO buses, such as USB. This improper handling leads to a NULL pointer dereference when attempting to clean up DMA transmit queues. A remote attacker could exploit...

rinhit

RinHit RinHit - macOS ecosystem reconnaissance framework. Collects artifacts from the Apple ecosystem to build timelines of network activity, cross-device identity, and physical location correlation. This is the open-source reconnaissance module. The closed-source Swift payload rinhit-agent is...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — MediaTek WLAN AP Heap Overflow PoC Proof of concept exploit for CVE-2026-20452, a heap-based buffer overflow in MediaTek's WLAN Access Point driver. Vulnerability CVE : CVE-2026-20452 CVSS : 8.0 HIGH CWE : CWE-122 — Heap-based Buffer Overflow Subcomponent : wlan AP driver Attack...

CVE-2025-29338

CVE-2025-29338 — Security Advisory Buffer Overflow in NXP moal.ko Wi-Fi Kernel Driver woalsetupmoduleparam / parsecfggetline Field| Value ---|--- CVE ID| CVE-2025-29338 Severity| High CVSS v3.1 Score| 7.8 CVSS v3.1 Vector| CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Vulnerability Type| Stack-Bas...

CVE-2025-63353

CVE-2025-63353: Vulnerabilidad de Contraseña Wi-Fi Predecible en Dispositivos FiberHome GPON ONT Referencias Basado en la investigación de Hanianis divulgación original de CVE en CVE-2025-63353 Gracias a los investigadores de seguridad que identificaron esta vulnerabilidad. Aviso Legal Esta...

nexmon

What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...

frameworks_opt_net_wifi_CVE-2021-0390

This repository does not have a README...

fragattacks

FragAttacks: Ataques de fragmentación y agregación 1. Introducción Este repositorio contiene la herramienta FragAttacks. Puede probar clientes Wi-Fi y puntos de acceso contra ataques de fr agmentación y ag regación. Estas vulnerabilidades afectan a todas las redes Wi-Fi protegidas. Para obtener...

macstealer

MacStealer: Bypass de Aislamiento de Clientes Wi-Fi 1. Introducción Este repositorio contiene MacStealer. Puede probar redes Wi-Fi para detectar bypasses de aislamiento de clientes CVE-2022-47522. Nuestro ataque puede interceptar robar tráfico hacia otros clientes en la capa MAC, incluso si los...

macstealer

MacStealer: Wi-Fi Client Isolation Bypass 1. Introduction This repo contains MacStealer. It can test Wi-Fi networks for client isolation bypasses CVE-2022-47522. Our attack can intercept steal traffic toward other clients at the MAC layer, even if clients are prevented from communicating with eac...