url-tracker

URL Tracker v0.5.0 URL Tracker è una web application robusta e scalabile progettata per monitorare e tracciare URL, registrare modifiche e fornire approfondimenti dettagliati sullo stato e il comportamento di varie risorse web. Costruita su Sails.js, questa applicazione è perfetta per tracciare U...

DefaultCreds-cheat-sheet

Cheat Sheet delle Credenziali Predefinite Un unico posto per tutte le credenziali predefinite per assistere pentester/Blue Team durante gli impegni, con dettagli di login/password predefiniti per vari prodotti provenienti da più fonti. P.S : La maggior parte delle credenziali sono state estratte...

phishlulz

PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...

bunkerweb

Das Allgemein-Plugin stellt das zentrale Konfigurations-Framework für BunkerWeb bereit und ermöglicht es Ihnen, wesentliche Einstellungen zu definieren, die steuern, wie Ihre Webdienste geschützt und bereitgestellt werden. Dieses grundlegende Plugin verwaltet fundamentale Aspekte wie...

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 critica vulnerabilità di Remote Code Execution RCE scoperta in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Le versioni di Tomcat precedenti a 9.0.1 Beta,...

dcsgonefwbsp

dcsgonefwbsp Per iniziare Per semplificare l'inizio con GitLab, ecco un elenco di passaggi successivi consigliati. Sei già un professionista? Modifica questo README.md e rendilo tuo. Vuoi semplificare? Usa il template in fondo! Aggiungi i tuoi file Crea o carica file Aggiungi file usando la riga ...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

caddy

un progetto Ogni sito in HTTPS Caddy è una piattaforma server estensibile che utilizza TLS per impostazione predefinita. Release · Documentazione · Ottieni aiuto Powered by Un ringraziamento speciale a: Warp, creato per programmare con più agenti AI Disponibile per MacOS, Linux e Windows Menu...

CVE-2019-6693

CVE-2019-6693 Hast du deine standardmäßigen FortiGate-Verschlüsselungsschlüssel geändert? Führe dieses Skript aus und finde es heraus! Du kannst den gesamten Konfigurationsdatei-Dump oder einzelne verschlüsselte Werte bereitstellen. Wenn die entschlüsselten Werte nicht völliger Unsinn sind oder e...

Passhunt

Passhunt Passhunt è uno strumento semplice per la ricerca di credenziali predefinite per dispositivi di rete, applicazioni web e altro ancora. Cerca tra 523 fornitori e le loro 2084 password predefinite. Screenshot Prerequisiti Assicurati di aver installato quanto segue: - Python 3.0 o successivo...

changeme

changeme A default credential scanner. About changeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It's default mode is to scan HTTP default credentials, but has support for other credentials. change...

changeme

changeme Uno scanner di credenziali predefinite. Informazioni changeme riprende da dove gli scanner commerciali si fermano. Si concentra sul rilevamento di credenziali predefinite e backdoor, non necessariamente credenziali comuni. La sua modalità predefinita è quella di scansionare le credenzial...

Mage AI - Insecure Default Authentication Setup

A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability i...

Tieline IP Audio Gateway <=2.6.4.8 - Unauthorized Remote Admin Panel Access

Tieline IP Audio Gateway 2.6.4.8 and below is affected by a vulnerability in the web administrative interface that could allow an unauthenticated user to access a sensitive part of the system with a high privileged account. id: CVE-2021-35336 info: name: Tieline IP Audio Gateway =2.6.4.8 -...

Apache HertzBeat < 1.6.0 - SnakeYAML Deserialization Remote Code Execution

Apache HertzBeat versions before 1.6.0 use a vulnerable version of the SnakeYAML library to parse YAML files imported through the /api/monitors/import and /api/alert/defines/import endpoints. An authenticated user can submit a YAML file that constructs an org.h2.jdbc.JdbcConnection with a malicio...

FatPipe WARP/IPVPN/MPVPN - Backdoor Account

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 contain an account named "cmuser" with administrative privileges and no password, letting attackers gain unauthorized admin access, exploit requires no authentication. id: CVE-2021-27856 info: name: FatPipe...

Paperclip - Remote Code Execution

Paperclip 2026.416.0 contains a remote code execution caused by a chain of six unauthenticated API calls in authenticated mode with default configuration, letting unauthenticated attackers execute arbitrary code remotely, exploit requires network access to the target. id: CVE-2026-41679 info: nam...

Brother Printers – Authentication Bypass via Default Admin Password

By leaking a target device's serial number, a remote attacker can generate the target device's default administrator password. The target device may leak its serial number via unauthenticated HTTP, HTTPS, IPP, SNMP, or PJL requests. id: CVE-2024-51978 info: name: Brother Printers – Authentication...

HyperComments <= 1.2.2 - Arbitrary Options Update

The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hcrequesthandler function in all versions up to, and including, 1.2.2. This makes it possible for unauthenticated attackers to...

Vue Vben Admin - Default Credentials

Vue Vben Admin 2.10.1 contains a broken authentication caused by hardcoded credentials in the backend, letting attackers log in without proper authorization, exploit requires access to the login interface. id: CVE-2025-25570 info: name: Vue Vben Admin - Default Credentials author: 0xAkoko severit...