Lucene search
+L

79 matches found

Kitploit
Kitploit
added 2026/09/22 3:52 p.m.11 views

ios_Restriction_PassCode_Crack---Python-version

ios 접근 제한 암호 크랙 -Python 버전 개요 ios Restriction PassCode Cracker - 이 버전의 애플리케이션은 Python 프로그래밍 언어로 작성되었으며, iphone/ipad의 접근 제한 암호Restriction PassCode를 크랙하는 데 사용됩니다. iphone/ipad 접근 제한 암호 크랙 방법C 버전과 동일 무차별 대입 크랙brute-force crack 1 .컴퓨터에 있는 백업 파일에서 Base64 키와 salt를 가져옵니다. 2 .Base64 키와 salt를 디코딩합니다. 3...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/22 1:38 p.m.112 views

pmkidcracker

PMKID WPA2 Cracker This program is a tool written in Python to recover the pre-shared key of a WPA2 WiFi network without any de-authentication or requiring any clients to be on the network. It targets the weakness of certain access points advertising the PMKID value in EAPOL message 1. Program...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/22 11:07 a.m.20 views

dbd

d8888b. d8888b. d8888b. 88 8D 88 8D 88 8D 88 88 88oooY' 88 88 88 88 88b. 88 88 88 .8D 88 8D 88 .8D Y8888D' Y8888P' Y8888D' Durandal的后门 版权所有 C 2013 Kyle Barnthouse [email protected] dbd 遵循 GNU GPL 协议发布 Mipsbe 二进制由 Darkerego 添加 https://github.com/darkerego mailto:[email protected] 简介 dbd...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 11:40 a.m.12 views

CVE-2026-15013

CVE-2026-15013 — miniOrange SAML SSO = 5.4.3 認証バイパス PoC CVE-2026-15013 の概念実証(PoC): miniOrange 製 WordPress プラグイン SAML Single Sign On – SSO Login (バージョン 5.4.3 以下 )における、SAML の 署名アルゴリズム混同 (HMAC-SHA1)を利用した未認証の認証バイパス。 許可されたテストのみ。 このコードは、自分が所有するシステム、または明示的な許可を得たシステムに対してのみ使用してください。コンピュータシステムへの不正アクセスは違法です...

9.8CVSS5.9AI score0.01504EPSS
SaveExploits2
NVD
NVD
added 2026/09/15 5:17 p.m.7 views

CVE-2026-58200

Payload Plugins is a collection of plugins designed to enhance Payload CMS. From 0.3.0 until 0.4.0, @jhb.software/payload-cloudinary-plugin deployments with clientUploads enabled expose POST /api/cloudinary-generate-signature, whose handler in cloudinary/src/getGenerateSignature.ts passes...

7.1CVSS0.00185EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/15 4:27 p.m.6 views

CVE-2026-58200 @jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signing

Payload Plugins is a collection of plugins designed to enhance Payload CMS. From 0.3.0 until 0.4.0, @jhb.software/payload-cloudinary-plugin deployments with clientUploads enabled expose POST /api/cloudinary-generate-signature, whose handler in cloudinary/src/getGenerateSignature.ts passes...

7.1CVSS5.8AI score
SaveExploits0References6
CVE
CVE
added 2026/09/15 4:27 p.m.11 views

CVE-2026-58200

@jhb.software/payload-cloudinary-plugin (Payload CMS Cloudinary storage adapter), versions 0.3.0 through 0.4.0 , is affected by an Improper Verification of Cryptographic Signature (CWE-347) when clientUploads: true is enabled. The POST /api/cloudinary-generate-signature endpoint in cloudinary/src...

7.1CVSS5.8AI score0.00185EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/15 4:27 p.m.8 views

EUVD-2026-78825

Payload Plugins is a collection of plugins designed to enhance Payload CMS. From 0.3.0 until 0.4.0, @jhb.software/payload-cloudinary-plugin deployments with clientUploads enabled expose POST /api/cloudinary-generate-signature, whose handler in cloudinary/src/getGenerateSignature.ts passes...

7.1CVSS5.8AI score0.00185EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/09 5:17 p.m.13 views

CVE-2026-87929

MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application/config/config.php that is never changed during installation, allowing unauthenticated attackers to forge administrator session cookies. Attackers can mint a malicious cisession cookie with administrator...

9.8CVSS0.00288EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/09 4:45 p.m.38 views

CVE-2026-87929 MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key

MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application/config/config.php that is never changed during installation, allowing unauthenticated attackers to forge administrator session cookies. Attackers can mint a malicious cisession cookie with administrator...

9.8CVSS0.00288EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/09 4:45 p.m.23 views

CVE-2026-87929

MaxSite CMS through version 109.6 contains a hardcoded session encryption key in application/config/config.php that is never rotated during installation. Because the key is publicly known, an unauthenticated attacker can compute an HMAC-SHA1 signature to mint a malicious ci_session cookie with ad...

9.8CVSS5.7AI score0.00288EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/09 12:00 a.m.9 views

PT-2026-89109

MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application/config/config.php that is never changed during installation, allowing unauthenticated attackers to forge administrator session cookies. Attackers can mint a malicious ci session cookie with administrator...

9.8CVSS5.7AI score0.00288EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/19 8:17 a.m.16 views

CVE-2026-75589

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. Each of the three compares the signature carried in the message against the locally computed one with the eq operator, which returns as soon as the two...

7.5CVSS0.00409EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/19 8:17 a.m.8 views

UBUNTU-CVE-2026-72889

Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method class from the signaturemethod parameter of the incoming message. signaturemethod is required on every request, so the algorithm used to check a signature is...

9.8CVSS5.5AI score0.00347EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/19 7:20 a.m.36 views

CVE-2026-75589 Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. Each of the three compares the signature carried in the message against the locally computed one with the eq operator, which returns as soon as the two...

0.00409EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/19 7:20 a.m.13 views

EUVD-2026-62350

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. Each of the three compares the signature carried in the message against the locally computed one with the eq operator, which returns as soon as the two...

5.4AI score0.00409EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/19 7:20 a.m.29 views

CVE-2026-75589 Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. Each of the three compares the signature carried in the message against the locally computed one with the eq operator, which returns as soon as the two...

7.5CVSS5.5AI score
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/19 7:20 a.m.40 views

CVE-2026-72889 Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify

Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method class from the signaturemethod parameter of the incoming message. signaturemethod is required on every request, so the algorithm used to check a signature is...

0.00347EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/19 7:20 a.m.14 views

EUVD-2026-62347

Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method class from the signaturemethod parameter of the incoming message. signaturemethod is required on every request, so the algorithm used to check a signature is...

5.5AI score0.00347EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/08/19 7:20 a.m.12 views

CVE-2026-72889

Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method class from the signaturemethod parameter of the incoming message. signaturemethod is required on every request, so the algorithm used to check a signature is...

9.8CVSS5.5AI score0.00347EPSS
SaveExploits0
Rows per page
Query Builder