iDictPy

iDictPy 一个暴躁的、100%正宗黑客状态的Python脚本，能把苹果ID变成苹果脆片 nicememe 我最初制作此脚本是为了替代这个垃圾：https://github.com/Pr0x13/iDict/ 但后来我忘了自己有点醉，然后就这样了。 前置条件为"requests"和"threadpool"。使用pip或easyinstall安装。 这些家伙有时很好，除非他们认为你错了：http://reddit.com/r/netsec 我真的很孤独：http://twitter.com/BinaryGoblin 强制性警告...

keimpx

简介 keimpx 是一款开源工具，在 Apache License 2.0 下发布。 它可用于通过网络上的 SMB 快速检查有效凭据。凭据可以是： 用户 / 明文密码 的组合。 用户 / NTLM 哈希 的组合。 用户 / NTLM 登录会话令牌 的组合。 如果在攻击阶段后，网络中发现任何有效凭据，系统会要求用户选择要连接的主机以及要使用的有效凭据。然后，用户将获得一个交互式 SMB shell ，在其中可以： 启动交互式命令提示符。 浏览远程 SMB 共享：列出、上传、下载文件，创建、删除文件等。 部署和取消部署自己的服务，例如，监听 TCP 端口以接收传入连接的后门。...

CVE-2026-91923

KubeSphere through 4.1.3 contains a server-side request forgery vulnerability in the git credential verification endpoint that accepts unvalidated caller-supplied URLs without allowlist restrictions. Authenticated attackers can supply arbitrary URLs to reach internal services and exfiltrate...

CVE-2026-91923

KubeSphere through 4.1.3 is affected by a server-side request forgery (SSRF) vulnerability in its git credential verification endpoint . The endpoint accepts caller-supplied URLs without allowlist restrictions, allowing authenticated attackers to direct requests to internal services and exfiltrat...

CVE-2026-91923: Server-Side Request Forgery (SSRF)

KubeSphere through 4.1.3 contains a server-side request forgery vulnerability in the git credential verification endpoint that accepts unvalidated caller-supplied URLs without allowlist restrictions. Authenticated attackers can supply arbitrary URLs to reach internal services and exfiltrate...

Astra Linux – Vulnerability in Munge

MUNGE is an authentication service for creating and validating user credentials. From version 0.5 to 0.5.17, local attackers could exploit a buffer overflow vulnerability in MUNGE the authentication daemon to leak cryptographic key material from process memory. With the leaked key material,...

CVE-2026-65107

Fix sbcast shared objects skipping credential verification, Fix possible slurmd crash on invalid sbcast filenames...

UBUNTU-CVE-2026-65107

Fix sbcast shared objects skipping credential verification, Fix possible slurmd crash on invalid sbcast filenames...

PT-2026-90772

Fix sbcast shared objects skipping credential verification, Fix possible slurmd crash on invalid sbcast filenames...

dovecot: Doveadm: Full access via timing oracle attack in credential verification

A flaw was found in Doveadm, a component of Dovecot. An attacker can exploit a timing oracle vulnerability during the direct comparison of credentials. This allows the attacker to determine the configured credentials, potentially leading to full unauthorized access to the affected component...

Palo Alto Networks Cortex XSIAM CommvaultSecurityIQ Marketplace和Palo Alto Networks Cortex XSOAR CommvaultSecurityIQ Marketplace 安全漏洞

Palo Alto Networks Cortex XSIAM CommvaultSecurityIQ Marketplace and Palo Alto Networks Cortex XSOAR CommvaultSecurityIQ Marketplace are both products of Palo Alto Networks. The Palo Alto Networks Cortex XSIAM CommvaultSecurityIQ Marketplace is a security operations integration extension package...

Malicious Package

Overview credential-verification-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in credential-verification-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebec51669e1875ebdcbe28040480db123cd5b42e4dbd4229b534a6e07e41b593 [email protected] is a thin wrapper whose only behavior is to download and execute whatever code is currently published at the latest...

MAL-2026-4235 Malicious code in credential-verification-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebec51669e1875ebdcbe28040480db123cd5b42e4dbd4229b534a6e07e41b593 [email protected] is a thin wrapper whose only behavior is to download and execute whatever code is currently published at the latest...

CVE-2026-37526

AGL app-framework-binder afb-daemon through v19.90.0 allows any local process to execute privileged supervision commands Exit, Do, Sclose, Config, Trace, Debug, Token, slist without authentication via the abstract Unix socket @urn:AGL:afs:supervision:socket. The onsupervisioncall function in...

EUVD-2025-209499

Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication...

CVE-2025-15621

CVE-2025-15621 affects the Sparx Systems Sparx Enterprise Architect client. The issue is that the client does not verify the receiver of OAuth2 credentials during OpenID authentication, indicating a flaw in credential handling that could allow credential misdirection or leakage within the OAuth/O...

CVE-2025-15621

Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication...

CVE-2025-15621 Sparx Enterprise Architect Client does not verify the receiver of OAuth2 credentials during OpenID authentication

Insufficiently Protected Credentials in Sparx Systems Pty Ltd. Sparx Enterprise Architect. Client does not verify the receiver of OAuth2 credentials during OpenID authentication...

Sparx Enterprise Architect 安全漏洞

Sparx Enterprise Architect is a modeling and design tool developed by the Australian company Sparx. There is a security vulnerability in Sparx Enterprise Architect, which stems from the failure to verify the recipient of OAuth2 credentials during OpenID authentication...