rust_syscalls

RUSTSYSCALLS Einzelner Stub für direkte und indirekte Syscalls mit Laufzeit-SSN-Auflösung für Windows. Funktionen: Eine einzige Zeile für all deine Syscalls Hash der Funktionsnamen zur Kompilierzeit Direkte oder indirekte Syscalls Unterstützung für x8664, WOW64 und natives x86 Entwickelt, um die...

InfraHunter

InfraHunter Caccia attivamente alle infrastrutture degli attaccanti filtrando i risultati di Shodan con i dati di URLScan. Requisiti Chiave API di Shodan Chiave API di URLScan python3 -m pip install -r requirements.txt Esempi di utilizzo python3 .\hunter.py -q "http.html:'titan stealer'" -s Shoda...

nimvoke

nimvoke Syscall indiretti + DInvoke resi semplici. Progettato per essere importato direttamente nei tuoi progetti Nim, nimvoke usa macro per astrarre i dettagli delle chiamate di sistema indirette e delle dichiarazioni di delegati in stile DInvoke. Questa libreria è pensata per essere facile da...

AtlasLdr

Atlas é um carregador reflexivo x64 que possui os seguintes recursos: Recursos Recuperação de DLL e PE de um servidor remoto Manual Mapping em um processo remoto Apagamento do cabeçalho DOS e dos bytes mágicos do NTHeader Código independente de posição Uso de Syscalls indiretas ZwOpenProcess...

binwally

binwally Strumento di confronto di alberi di directory e binari che utilizza il concetto di hashing fuzzy ssdeep Per maggiori informazioni: http://w00tsec.blogspot.com/2013/12/binwally-directory-tree-diff-tool-using.html Prerequisiti: Python 2.7+ gcc e strumenti di compilazione essenziali libffi...

passera

Note: I no longer have the time to continue development of Passera, but pull requests are more than welcome! The number one requested item would be an updated Firefox extension, since the latest API change broke the current release. Passera A simple tool that allows users to have strong unique...

CVE-2026-19611

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

EUVD-2026-63478

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

CVE-2026-19611 Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

CVE-2026-19611

The vulnerable component is org.wildfly.security/wildfly-elytron-password-impl in WildFly Elytron. Password hashing/verification applies Unicode NFKC normalization, collapsing fullwidth characters to ASCII equivalents, which reduces the effective password keyspace. This allows a remote attacker t...

CVE-2026-19611 Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

CVE-2026-19611

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

PT-2026-79049

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...

CVE-2026-75112

OTTO® Fleet Manager uses an insufficient bcrypt work factor, lowering the computational cost for offline brute-force attacks on stored password hashes if an attacker obtains an unencrypted system backup. CVSS 6.9 (Medium), ADJACENT vector. No exploitation reported; Rockwell advisory SD1791 refere...

EUVD-2026-62694

A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password...

CVE-2026-75112 OTTO® Fleet Manager – Weak Password Hashing Configuration

A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password...

CVE-2026-75112 OTTO® Fleet Manager – Weak Password Hashing Configuration

A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password...

UBUNTU-CVE-2026-53525

GHSA-vhv8-g2r9-cwcc: Non-Constant-Time Password Hash Comparison in Relay Authentication...

CVE-2026-74892

opensslencrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication...

CVE-2026-74892

The openssl_encrypt package (versions before 1.4.0) ships a hardcoded default secret key in its standalone telemetry server configuration, used for API key hashing. Attackers who know this key can forge API key hashes to bypass telemetry API authentication. CVSS 3.1 rates this HIGH (7.5) due to r...