CVE-2026-80722

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211processrxtwtaction only partially validates a received S1G TWT setup frame before queueing it. An individual agreement can therefore reach...

CVE-2026-80641

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

EUVD-2026-67511

In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from short trigger BA firmware response The firmware response length is only checked against sizeofrsp 20 bytes, but when candidatecnt = 1, a 22-byte candidate struct is read at buf + 20 without...

CVE-2026-80635

CVE-2026-80635 is an out-of-bounds read vulnerability in the wcn36xx Wi-Fi driver of the Linux kernel. When processing a trigger BA (Block Acknowledgment) firmware response, the code checks the response length only against the base struct size (20 bytes). However, when candidate_cnt >= 1, a 22...

CVE-2026-80632 wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996_init_tx_queues()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996inittxqueues When MT76NPU and CONFIGNETMEDIATEKSOCWED are enabled and mt76 detects properly the Airoha NPU SoC, mt7996inittxqueues will dereference a NULL WED pointer. Fix...

KawaiiDeauther

KawaiiDeauther Kawaii Deauther è un toolkit di pentest il cui scopo è eseguire un jamming su client/router WiFi e spammare molti falsi AP per scopi di test. Dipendenze macchanger mdk3 nmcli Installazione Le dipendenze verranno installate automaticamente. root@kitploit: $ git clone...

lscript

The lazy script has not been updated for a while due to me being very busy with my life. I will try my best to upload an update when I find the time Welcome to the LAZY script v2.1.4 A video Hackersploit made : https://www.youtube.com/watch?v=oBpo5sElrMY A video sstec made:...

WiFi-Pumpkin-deprecated

Questo repository è ⛔️ DEPRECATO, wifipumpkin3 è stato rilasciato, dacci un'occhiata! WiFi-Pumpkin - Framework per attacchi Rogue Wi-Fi Access Point Descrizione WiFi-Pumpkin è un framework per creare facilmente falsi AP Rogue che inoltrano il traffico legittimo verso e dalla vittima ignara. È ricc...

Evil-M5Project

Evil-M5Project Evil-M5Project è uno strumento innovativo sviluppato per test etici ed esplorazione delle reti WiFi. Sfrutta la potenza del dispositivo M5Core2 per scansionare, monitorare e interagire con le reti WiFi in un ambiente controllato. Questo progetto è progettato a scopo educativo, per...

CVE-2017-9476

CVE-2017-9476 AP nascosto con credenziali deterministiche. Compilazione root@kitploit: cc xhscmmac2psk.c -o xhscmmac2psk Utilizzo root@kitploit: ./xhscmmac2psk L'algoritmo è stato anche aggiunto a PSKracker. Riferimenti CVE-2017-9476 Bastille-18.home-security-wifi-network.txt whitepaper del DEFCO...

esp_wifi_repeater

espwifirepeater Ein voll funktionsfähiger WiFi NAT-Router und jetzt auch ein WiFi-Repeater, auch L2-Bridge genannt NEU 2026: 10 Jahre nach der ersten Veröffentlichung ist es endlich geworden, was es immer vorgab zu sein:ein echter WiFi-Repeater. Um keine bestehenden Dokumentationen und Links zu...

ESP32Marauder

ESP32 Marauder Una suite di strumenti offensivi e difensivi WiFi/Bluetooth per l'ESP32...

frameworks_opt_net_wifi_CVE-2021-0466

Este repositorio nao tem um README...

EUVD-2026-67892

Incorrect access control in the getWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain advanced wireless settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51617

Incorrect access control in the getSysStatusCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain sensitive information such as operation mode, firmware version, serial number, WAN/LAN IP addresses, WiFi SSID, encryption keys, and connected client statistics...

CVE-2026-51632

Incorrect access control in the getWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain advanced wireless settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67896

Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to generate and retrieve a new WPS PIN via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67909

Incorrect access control in the getSysStatusCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain sensitive information such as operation mode, firmware version, serial number, WAN/LAN IP addresses, WiFi SSID, encryption keys, and connected client statistics...

CVE-2026-51641

Incorrect access control in the getWiFiMeshConfig function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain mesh configuration and runtime state information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

android-locdump

Dopo l'indignazione/reazione eccessiva su Internet degli ultimi giorni per la rivelazione che iPhone ha una cache per il suo servizio di localizzazione, ho deciso di dare un'occhiata a cosa mettono in cache i miei dispositivi Android per la stessa funzione. Questo è un piccolo dumper che ho messo...