pixiewps

概要 Pixiewps はC言語で書かれたツールで、一部のソフトウェア実装における低エントロピーまたはエントロピー欠如を利用してWPS PINをオフラインでブルートフォースする ためのものです。これは、2014年夏にDominique Bongardによって発見された、いわゆる「ピクシーダスト攻撃」です。教育目的のみを意図しています。 ReaverやBullyなどのツールで実装されている従来のオンラインブルートフォース攻撃（PINを数時間で回復することを目的とする）とは対照的に、この方法は、ターゲットによっては、脆弱な場合 、わずか数秒 または数分 でPINを取得できます。...

HT-WPS-Breaker

HT-WPS BREAKER 言語: English High Touch WPS Breaker HT-WB は、bashスクリプト言語をベースにした小さなツールです。脆弱な多くのルーターからWPSピンを抽出し、パスワードを取得するのに役立ちます。最後に、HT-WPS Breakerは処理過程で以下のツールを使用していることをお知らせします。 "Piexiewps" "Reaver" "Bully" "Aircrack Suite" "Wash" そして、自動的にジョブを実行するためのいくつかのコマンドを使用しています。このツールを気に入っていただければ幸いです。 プレビュー ビデオ...

CVE-2026-51628

Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to generate and retrieve a new WPS PIN via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51626

Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WPS configuration, including the current PIN, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51628

Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to generate and retrieve a new WPS PIN via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51628

CVE-2026-51628 is an incorrect access control vulnerability in the getGenerateWiFiWpsPin function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ). An unauthenticated network attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to generate and retrieve a new WPS PIN , enabl...

EUVD-2026-67896

Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to generate and retrieve a new WPS PIN via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51626

CVE-2026-51626 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . The root cause is an incorrect access control in the getWiFiWpsCfg function, allowing unauthenticated attackers to send a crafted POST request to /cgi-bin/cstecgi.cgi and retrieve the WPS configuration, includi...

EUVD-2026-67898

Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WPS configuration, including the current PIN, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51626

Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WPS configuration, including the current PIN, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2020-7151

Malware in sbrugna...

EUVD-2012-6226

Malware in sbrugna...

EUVD-2013-4879

Malware in sbrugna...

EUVD-2022-43040

Malicious code in bioql PyPI...

CVE-2025-9251

A security flaw has been discovered in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected is the function stawpspin of the file /goform/stawpspin. Performing manipulation of the argument Ssid results in stack-based buffer...

CVE-2025-5438

A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been declared as critical. Affected by this vulnerability is the function WPS of the file /goform/WPS. The manipulation of the argument PIN leads ...

CVE-2025-5438

A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been declared as critical. Affected by this vulnerability is the function WPS of the file /goform/WPS. The manipulation of the argument PIN leads ...

CVE-2024-33626

The LevelOne WBR-6012 router contains a vulnerability within its web application that allows unauthenticated disclosure of sensitive information, such as the WiFi WPS PIN, through a hidden page accessible by an HTTP request. Disclosure of this information could enable attackers to connect to the...

CVE-2023-21205

In startWpsPinDisplayInternal of staiface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-3681

A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range of the wireless network to successfully brute force the WPS pin, potentially allowing them unauthorized access to a wireless network...