Lucene search
+L

76 matches found

Kitploit
Kitploit
added 2026/09/04 4:38 a.m.5 views

pixiewps

개요 Pixiewps 는 C로 작성된 도구로, 일부 소프트웨어 구현의 낮거나 존재하지 않는 엔트로피를 악용하여 WPS PIN을 오프라인 무차별 대입 하는 데 사용됩니다. 이른바 "pixie-dust 공격"은 2014년 여름 Dominique Bongard에 의해 발견되었습니다. 교육 목적으로만 사용됩니다. Reaver나 Bully와 같은 도구에 구현된 기존의 온라인 무차별 대입 공격과 달리, 이 방법은 취약한 경우 대상에 따라 PIN을 몇 초 또는 몇 분 만에 얻을 수 있습니다. 버전 1.4부터는 일부 장치에 대해 완전한 수동...

5.9AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/03 12:53 p.m.16 views

HT-WPS-Breaker

HT-WPS BREAKER 언어: English High Touch WPS Breaker HT-WB는 bash 스크립트 언어를 기반으로 한 작은 도구로, 많은 취약한 라우터의 WPS 핀을 추출하고 비밀번호를 얻는 데 도움을 줍니다. 마지막으로, HT-WPS Breaker가 과정에서 다음 도구들을 사용한다는 점을 알려드립니다: "Piexiewps" "Reaver" "Bully" "Aircrack Suite" "Wash" 그리고 자동으로 작업을 수행하기 위한 몇 가지 명령어도 포함되어 있습니다. 제 도구가 마음에 드셨으면 좋겠습니...

5.9AI score
SaveExploits0References1
NVD
NVD
added 2026/08/28 8:18 p.m.8 views

CVE-2026-51628

Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to generate and retrieve a new WPS PIN via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

9.1CVSS0.00364EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/28 8:18 p.m.10 views

CVE-2026-51626

Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WPS configuration, including the current PIN, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

9.1CVSS0.00364EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/28 12:00 a.m.31 views

CVE-2026-51628

Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to generate and retrieve a new WPS PIN via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

0.00364EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/28 12:00 a.m.13 views

CVE-2026-51628

CVE-2026-51628 is an incorrect access control vulnerability in the getGenerateWiFiWpsPin function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ). An unauthenticated network attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to generate and retrieve a new WPS PIN , enabl...

9.1CVSS5.9AI score0.00364EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/28 12:00 a.m.8 views

EUVD-2026-67896

Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to generate and retrieve a new WPS PIN via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

5.9AI score0.00364EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/28 12:00 a.m.13 views

CVE-2026-51626

CVE-2026-51626 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . The root cause is an incorrect access control in the getWiFiWpsCfg function, allowing unauthenticated attackers to send a crafted POST request to /cgi-bin/cstecgi.cgi and retrieve the WPS configuration, includi...

9.1CVSS5.9AI score0.00364EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/28 12:00 a.m.30 views

CVE-2026-51626

Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WPS configuration, including the current PIN, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

0.00364EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/28 12:00 a.m.9 views

EUVD-2026-67898

Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WPS configuration, including the current PIN, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

5.9AI score0.00364EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-7151

Malware in sbrugna...

5.9CVSS6AI score0.0161EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2012-6226

Malware in sbrugna...

3.3CVSS6.4AI score0.0085EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2013-4879

Malware in sbrugna...

3.3CVSS6.2AI score0.02587EPSS
SaveExploits7References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2022-43040

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.0024EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/20 10:15 p.m.8 views

CVE-2025-9251

A security flaw has been discovered in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected is the function stawpspin of the file /goform/stawpspin. Performing manipulation of the argument Ssid results in stack-based buffer...

8.7CVSS6.5AI score0.0094EPSS
SaveExploits1References5
OSV
OSV
added 2025/06/02 9:15 a.m.7 views

CVE-2025-5438

A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been declared as critical. Affected by this vulnerability is the function WPS of the file /goform/WPS. The manipulation of the argument PIN leads ...

8.8CVSS5.6AI score0.26102EPSS
SaveExploits1References5
NVD
NVD
added 2025/06/02 9:15 a.m.18 views

CVE-2025-5438

A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been declared as critical. Affected by this vulnerability is the function WPS of the file /goform/WPS. The manipulation of the argument PIN leads ...

8.8CVSS0.26102EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/05/23 6:19 a.m.18 views

CVE-2024-33626

The LevelOne WBR-6012 router contains a vulnerability within its web application that allows unauthenticated disclosure of sensitive information, such as the WiFi WPS PIN, through a hidden page accessible by an HTTP request. Disclosure of this information could enable attackers to connect to the...

5.3CVSS6.5AI score0.00417EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:09 a.m.10 views

CVE-2023-21205

In startWpsPinDisplayInternal of staiface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

5.5CVSS5.4AI score0.00103EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:55 a.m.14 views

CVE-2022-3681

A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range of the wireless network to successfully brute force the WPS pin, potentially allowing them unauthorized access to a wireless network...

6.5CVSS6.8AI score0.0024EPSS
SaveExploits0References1
Rows per page
Query Builder