CVE-2024-2473

CVE-2024-2473 — Identificador de la página de inicio de sesión de WPS Hide Login Un escáner profesional en Python para detectar la divulgación de la página de inicio de sesión en sitios WordPress que ejecutan WPS Hide Login ≤ 1.9.15.2 Programado porVenexy Tabla de contenidos Resumen Detalles de l...

CVE-2026-52824

CVE-2026-52824: Falsificación del enlace de inicio de sesión por el APPSECRET predeterminado de Kimai...

Alibab-Nacos-Unauthorized-Login

Vuln Impact An issue has been discovered in Nacos affecting Nacos = 2.1.0.Nacos users use the default JWT key to cause an unauthorized access vulnerability. Through this vulnerability, attackers can bypass user name and password authentication and directly log in to the Nacos user Vuln Product...

Extracter

Extracter Extracter is a nice tool to find login panels on a website, it will gather information on a robots file or other areas that the site mitgh have. This tool is only made for fun and should not be used to abuse other sites without any permission...

wordpress-bf

wordpress-bf This is a tool to enumerate the authors of a wordpress blog website and try bruteforce the logins. Its not complete but it does work. If you spot any horiffic code please submit a PR to fix it! It will write the url and and user and password to a text file called found.txt It will...

grafana-bruteforce

grafana-bruteforce A tool that takes a combo username and password list and will attempt to bruteforce grafana login page. Grafana will lock you out after 5 attempts so you need to ensure your proxy has multiple external ip's. How to Run Use supplied combo list root@kitploit: python3...

CVE-2024-12594

CVE-2024-12594 ALL In One Custom Login Page...

DEBIAN-CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

CVE-2026-97764

The django-allauth library, in versions before 65.19.4 , contains a vulnerability where failed login attempt limits are not properly enforced. In certain common configurations, an attacker can exploit the way the system handles diacritics (such as accents) to bypass these limits, allowing for a h...

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

EUVD-2026-86517

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

nexphisher

Proyecto ya no mantenido. UsaZPhisher Instalación : apt update apt install git -y git clone git://github.com/htr-tech/nexphisher.git cd nexphisher CONFIGURACIÓN : bash setup CONFIGURACIÓN TERMUX : bash tmuxsetup Ejecutar : bash nexphisher Comando Único : root@kitploit: apt update ; apt install gi...

CVE-2017-14980

🐞 CVE-2017-14980: Sync Breeze Enterprise 10.0.28 - Desbordamiento de búfer basado en pila Desbordamiento de búfer basado en pila en Sync Breeze Enterprise 10.0.28 accesible a través del manejador /login, que demuestra cómo una longitud de entrada sin verificar puede corromper la memoria de la pil...

QNAP HBS 3 - Broken Access Control

An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to...

Wing FTP Server <= 7.4.3 - Remote Code Execution

Wing FTP Server versions prior to 7.4.4 are vulnerable to an unauthenticated remote code execution RCE flaw CVE-2025-47812. The vulnerability arises from improper NULL byte handling in the 'username' parameter during login, which allows Lua code injection into session files. These injected sessio...

WordPress Ultimate Member 2.1.3 - 2.8.2 – SQL Injection

The Ultimate Member - User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the ‘sorting’ parameter in versions 2.1.3 to 2.8.2 due to insufficient escaping on the user supplied parameter and lack of...

Atlassian Questions For Confluence - Hardcoded Credentials

Atlassian Questions For Confluence contains a hardcoded credentials vulnerability. When installing versions 2.7.34, 2.7.35, and 3.0.2, a Confluence user account is created in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attack...

Apache Axis2 Default Login

Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service. id: CVE-2010-02...

Linux Distros Unpatched Vulnerability : CVE-2026-67236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, a successful POST /login caused isauthorized/2 to set an auth cookie containing...