CVE-2024-42657

CVE-2024-42657 CVE-2024-42657 An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of encryption during login process. CVE-2024-42657: Summary: A vulnerability in the wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0...

CVE-2026-8793

CVE-2026-8793 — Missing Brute-Force Protection on PaperCut NG Login Form Field| Details ---|--- CVE ID| CVE-2026-8793 Product| PaperCut NG Affected Version| 25.0.11 Build 75758 and earlier CWE| CWE-307 — Improper Restriction of Excessive Authentication Attempts CVSS Score| 5.3 Medium — standalone...

lxancephisher

A beginners friendly, Automated phishing tool with 30+ templates. Disclaimer Any actions and or activities related tolxancephisher is solely your responsibility. The misuse of this toolkit can result in criminal charges brought against the persons in question. The contributors will not be held...

fb-phisher-python

Facebook Phishing Original Author : Arslan Mughal BY : arjunindia original repository : https://github.com/arslanmughal5566/facebookphishing About Script : With this script you can perform Facebook login credentials stealing with some social engineering skills. requirements : 1 : Python3.x 2 :...

CVE-2024-9106

CVE-2024-9106 Wechat Social login = 1.3.0 - Authentication Bypass Description: The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verification on the user being supplied during the social login...

django-defender

django-defender .. image:: https://jazzband.co/static/img/badge.svg :target: https://jazzband.co/ :alt: Jazzband .. image:: https://img.shields.io/pypi/pyversions/django-defender.svg :alt: Supported Python versions :target: https://pypi.org/project/django-defender/ .. image::...

domdig

DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...

moodle-login-csrf

This repository contains the files used in finding and exploiting two moodle bugs, MSA-18-0020 CVE-2018-16854 and MSA-19-0004 CVE-2019-3847, which leverage the ability for users to add JavaScript to their own dashboards. MSA-18-0020 relies on CSRF on the login form, whereas MSA-19-0004 requires a...

mysql_dos

This tool crashes vulnerable MySQL servers using CVE-2017-3599, a remote integer overflow when parsing login credentials. It can be downloaded here you will need to run it from the command line Usage: mysqldos target port...

evilginx2

Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...

Red-Planet-Laundry-Management-System-1.0-is-vulnerable-to-SQL

Red-Planet-Laundry-Management-System-1.0-is-vulnerable-to-SQL https://vulners.com/cve/CVE-2022-28452 https://nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-28452 https://laundry.redplanetcomputers.com/ 1-Description: Red Planet Laundry Management System 1.0 is vulnerable to SQL Injection via...

device-pharmer

device-pharmer Concurrently open either Shodan search results, a specified IP, IP range, domain, or list of IPs from a text file and print the status and title of the page if applicable. Add the -u and -p options to attempt to login to the page first looking for a form login and failing that,...

CVE-2022-23131

Zabbix SAML SSO Login Bypass Vulnerability CVE-2022-23131 Enviroment and Poc of CVE-2022-23131 Enviroment You can create a Zabbix with SAML SSO follow the step in Zabbix Enviroment for CVE-2022-23131. Poc The Poc was modified from jweny Usage: go run poc.go check -t http://localhost:8080 -u Admin...

CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated

CVE-2022-40032: Simple Task Managing System - 'login' and 'password' SQL Injection Unauthenticated Exploit Title: Simple Task Managing System - 'login' and 'password' SQL Injection Unauthenticated Date: 2022-01-09 Exploit Author: Hamdi Sevben Vendor Homepage:...

CVE-2023-0860

CVE-2023-0860 Brute Force on Modoboa Mail Hosting and Management application v2.0.3 Open-source Mail Hosting and Management application, Modoboa = v2.0.3, does not restrict unauthenticated login attempts allowing for brute force attacks at the login page. https://vulners.com/cve/CVE-2023-0860...

UhOh365

UhOh365 A script that can see if an email address is valid in Office365. This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't. Microsoft does not consider "email enumeration" a vulnerabilit...

MacPersistenceChecker

MacPersistenceChecker See EVERYTHING that runs on your Mac. Understand WHY it runs. Decide WHAT stays. TL;DR MacPersistenceChecker shows you everything that runs automatically on your Mac , explains why it matters , and helps you decide what to keep or remove. → Find malware → Detect hidden...

CVE-2022-4539

Usage Considerations: Adaptability: You can easily modify the payloads, IP generation logic, and proxies to match different scenarios or environments. Ethical Use: Ensure you have explicit permission before testing any system with this code. Scalability: This code is designed to be scalable and...

CVE-2019-25137-RCE

CVE-2019-25137-RCE CVE-2019-25137 is an Umbraco RCE vulnerability, the script within this repo is slightly altered This exploit script is based on script by Alexandre ZANNI EDB-ID 49488. It is slightly altered, changed the flow to skip token extraction before login, performed the login first...

cve-2020-1764-poc

CVE-2020-1764 PoC Auth bypass PoC for Kiali 0.4.0 to 1.15.0 using login auth strategy Security Bulletin check version: curl 'http:///api check auth strategy: curl 'http:///api/auth/info' go run ./poc.go curl 'http:///api/status' -H "Authorization: Bearer $JWT"...