VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS

Pentest Tools — /network Repository of scripts for auditing and penetration testing of networks. Use only on devices with formal authorization. CVE-2018-14847 — MikroTik Winbox Credential Extractor Description Exploits the unauthenticated file read vulnerability in the MikroTik RouterOS Winbox...

CVE-2020-25078

CVE-2020-25078 Instructions instructions Place the attack URLs in the same directory as ip.txt The attack IP is placed in the same directory as ip.txt Terminal log root@localhost:/CVE-2020-25078ls CVE-2020-25078.py ip.txt root@localhost:/CVE-2020-25078cat ./ip.txt https://xxx.xxx.xxx.xxx:3128...

CVE-2019-9053-port-py3

CVE-2019-9053 Exploit - Python 3 This is a Python 3 port of the CVE-2019-9053 exploit, which targets CMS Made Simple CMSMS versions before 2.2.10. The vulnerability allows for SQL injection through the News module interface. Example Output Tested on the TryHackMe Simple CTF Challenge. Description...

shai-hulud-scan

shai-hulud-scan A Claude Code skill that scans machines for indicators of compromise IOCs from the Mini Shai-Hulud supply chain worm CVE-2026-45321, CVSS 9.6. What is Mini Shai-Hulud? A self-propagating supply chain worm that compromised 170+ npm/PyPI packages on May 11, 2026 - including...

CVE-2024-27198

CVE-2024-27198 Auth bypass for TeamCity Server version 2023.11.3 and below. NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-27198 Rapid7 blog post:...

scan-shai-hulud

scan-shai-hulud A fast, zero-dependency Bash scanner to detect whether your machine is affected by the CVE-2026-45321 "Mini Shai-Hulud" supply chain attack. On May 11, 2026, over 170 npm packages and 2 PyPI packages across TanStack, Mistral AI, UiPath, OpenSearch, and Guardrails AI were...

CVE-2017-13872-Patch

CVE-2017-13872-Patch Download this software and execute it then it request you new password for root user. The password could be different, but i think, in the default option, is equal to Admin password. Update You can correct the bug upgrading your OS...

CVE-2025-44203

CVE-2025-44203: HotelDruid 3.0.0 / 3.0.7 Sensitive Information Disclosure and DoS Summary HotelDruid 3.0.0 and 3.0.7 contain a race condition on the creadb.php setup endpoint, reachable before the setup is finished. It has two impacts, and both come from the same lost race: a sensitive informatio...

CVE-2026-15911-Confluent_Kafka

CVE-2026-15911: Disabled TLS Certificate Verification for HashiCorp Vault KMS in confluent-kafka Severity: High, CVSS 3.1 7.4 Vector v3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected: confluent-kafka = 2.8.0, = 2.14.2 Fixed in: 2.15.0 CWE: CWE-295 Improper Certificate Validation...

pmp-exploit

pmp-exploit This exploit takes advantage of the Privilege Escalation vulnerability found within Password Manager Pro to elevate a regular user to SuperAdmin and then download the passwords and files stored within the application. Systems Affected Product : ManageEngine Password Manager Pro Compan...

SideWinder-Exploit

🛡️ CVE-2021-3560 Privilege Escalation Exercise 📚 Overview This repository contains materials for a hands-on cybersecurity exercise centered on CVE-2021-3560 , a privilege escalation vulnerability in polkit. Discovered by GitHub Security Lab in 2021, this flaw allowed unprivileged Linux users to...

Multi-threaded-mass-exploiter-CVE-2018-13379-POC

CVE-2018-13379 — Mass Exploit for Fortinet FortiOS SSL VPN A tool for mass exploitation of the CVE-2018-13379 path traversal vulnerability in Fortinet FortiOS SSL VPN. Allows reading session files and extracting logins and passwords in cleartext. Features Exploitation of CVE-2018-13379 via the...

mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 High | Unauthenticated Memory Disclosure CVE-2025-14847 , dubbed MongoBleed , allows unauthenticated remote attackers to exfiltrate uninitialised heap memory by exploiting MongoDB's zlib decompression logic. This...

curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

A flaw was found in libcurl. When configured to use a .netrc file for credentials and follow HTTP redirects, libcurl can inadvertently send the password from the initial connection to the redirected host. This sensitive information disclosure occurs when both the original and redirect URLs use...

curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

A flaw was found in curl. When curl is configured to use distinct proxies for different URL schemes, a redirect from a URL using an authenticated proxy to one using an unauthenticated proxy can inadvertently expose the initial proxy's credentials. This improper credential management CWE-522 may...

Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2025-63353

CVE-2025-63353: Predictable Wi-Fi Password Vulnerability in FiberHome GPON ONT Devices References Based on research by Hanianis original CVE disclosure at CVE-2025-63353 Thanks to the security researchers who identified this vulnerability. Legal Disclaimer This information is provided for...

DeadMatter

DeadMatter DeadMatter is a specialized tool written in C, designed to extract sensitive information, such as password hashes of active logon sessions, from memory dumps. It employs carving techniques to retrieve credentials from various file types, such as process or full memory dumps, either in...

cve-2026-46391

CVE-2026-46391 - Credential Exposure via SSRF in @haxtheweb/open-apis Proof of concept for CVE-2026-46391. Triggers the SSRF vulnerability in the cacheAddress endpoint of @haxtheweb/open-apis and captures the service account credentials sent in the callback. Build go build -o cve-2026-46391 . Tes...

PT-2026-110670

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.9.0 through 3.31.0 Description An out-of-bounds read exists in the RDPEAR NDR scalar readers, which occur when value length is checked before consuming alignment padding. A malicious or compromised RDP server can send crafte...