awind-research

Awind Research This repository holds interesting bits and pieces related to research I performed on wireless presentation devices manufactured by Awindinc and OEM'ed to multiple manufacturers. The repository is split into these subsections: hardware - hardware hacking stuff, mostly for MMC dumpin...

AI-PASSWORD-TESTING-AGENT

Orquestador de Ataques de Contraseñas con IA - Repositorio de Investigación Defensiva ⚠️ AVISO LEGAL Y PROPÓSITO DE INVESTIGACIÓN ESTE REPOSITORIO ES ÚNICAMENTE PARA INVESTIGACIÓN DEFENSIVA DE CIBERSEGURIDAD Y PROPÓSITOS EDUCATIVOS SIN CÓDIGO EXPLOTABLE - Este repositorio contiene solo...

CVE-2019-9053

Lo arreglé gracias a https://tryhackme.com/room/easyctf : disfruta Problemas críticos corregidos 1. Compatibilidad de Python 2 a Python 3 Antes: print "string" Ahora: print"string" Se cambiaron todas las sentencias print a funciones print Se actualizó el formato de cadenas para usar f-strings 2...

CVE-2025-10658

Exploit: Fuerza Bruta OTP de Invitado de SupportCandy → Toma de Control de Cuenta 1 Iniciar el flujo de inicio de sesión con OTP navegador Abrir: root@kitploit: /support/ Seleccionar inicio de sesión como invitado / OTP Ingresar el correo electrónico objetivo ej. [email protected] Enviar 2...

CVE-2026-88770

A flaw was found in the Device Authorization Grant flow of Keycloak, an identity and access management solution. The issue occurs because the token redemption process fails to check if a user account is currently locked due to brute-force protection. If an attacker has an active session for a...

EUVD-2026-75289

A flaw was found in the Device Authorization Grant flow of Keycloak, an identity and access management solution. The issue occurs because the token redemption process fails to check if a user account is currently locked due to brute-force protection. If an attacker has an active session for a...

CVE-2026-88770

Keycloak 's Device Authorization Grant flow contains a flaw where the token redemption process does not verify whether a user account is currently locked due to brute-force protection . An attacker holding an active session for a locked account can complete the device login flow and obtain new se...

CVE-2026-88770 Keycloak-services: keycloak-services: device authorization grant issues tokens to brute-force-locked accounts

A flaw was found in the Device Authorization Grant flow of Keycloak, an identity and access management solution. The issue occurs because the token redemption process fails to check if a user account is currently locked due to brute-force protection. If an attacker has an active session for a...

CVE-2026-88770

A flaw was found in the Device Authorization Grant flow of Keycloak, an identity and access management solution. The issue occurs because the token redemption process fails to check if a user account is currently locked due to brute-force protection. If an attacker has an active session for a...

PNGboomer-CVE-2026-77622

PNGboomer — CVE-2026-77622 Denial-of-service exploit for Sliver C2's HTTPS listener. Brute-forces the per-session PNG encoding nonce and delivers a decompression bomb that exhausts server memory. Published as GHSA-663m-7x7m-g4fw. Summary Sliver's HTTPS C2 channel wraps messages inside PNG images...

CVE-2026-77771

The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not scope its second-factor attempt limit to the account being attacked, keying it instead to an identifier the client supplies and can change at will, allowing an attacker who already knows a...

FTPBuster

FTPBuster FTPBuster es una potente herramienta de línea de comandos para fuerza bruta diseñada para atacar servidores FTP, SFTP y FTPS explícito mediante ataques basados en diccionario. Está destinada para hacking ético y pruebas de penetración Características Soporte de fuerza bruta para FTP ,...

EUVD-2026-75264

The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not scope its second-factor attempt limit to the account being attacked, keying it instead to an identifier the client supplies and can change at will, allowing an attacker who already knows a...

SecureOps-Lab

SecureOps Lab - Evaluación de Ciberseguridad en Vivo Resumen Se realizó una evaluación de ciberseguridad en vivo en un servidor Linux universitario. Durante el análisis, se identificó actividad de ataque activa, incluyendo intentos de autenticación por fuerza bruta e intentos de explotación...

CVE-2026-44596

CVE-2026-44596 — YAMCS Sin Límite de Tasa en el Endpoint de Autenticación Resumen El endpoint de autenticación POST /auth/token en yamcs-core carece de cualquier forma de limitación de tasa, bloqueo de cuenta o estrangulamiento de intentos fallidos. Un atacante remoto no autenticado puede realiza...

ZipRarHunter

ZipRarHunter ZipRarHunter es una potente herramienta de hacking ético de línea de comandos diseñada para descifrar contraseñas de archivos ZIP y RAR utilizando una lista de palabras. Automatiza el proceso de recuperación de contraseñas de archivos cifrados. Características Descifrado de archivos...

CVE-2026-7671

CVE-2026-7671 - Tornet Scooter OTP Brute Force Summary Improper restriction of excessive authentication attempts CWE-307 in Tornet Scooter Mobile App 4.75 on Android. Details The /TwoFactor endpoint does not implement rate limiting or lockout. A 4-digit OTP 0000-9999 can be brute-forced remotely...

CVE-2025-56224

CVE-2025-56224 OTP verification Bypass Description an attacker can impersonate another user mobile number and use this vulnerability to verify the number without knowing the OTP code. CVSS Score: 8.1 High Attack Type Remote Authenticated Affected Versions Versions before 8.6.8 Discovered By: Yaza...

CVE-2025-56221

CVE-2025-56221 Improper Restriction of Excessive Authentication Attempts Description An attacker can make unlimited authentication attempts, increasing the risk of compromising targeted user accounts through password guessing. CVSS Score: 7.5 High Attack Type Remote Authenticated Affected Version...

CVE-2025-56132-Liquidfiles

CVE-2025-56132 - LiquidFiles User Enumeration POC Vulnerability Description This vulnerability was identified in LiquidFiles version 4.1 and below. When initiating a password reset via the “POST /passwordreset” endpoint, the application responds differently depending on whether the supplied email...