MSF_PassSpray_Wordlist_Generator

مولد قائمة كلمات مرور للرش بكلمات المرور أداة مفيدة تساعدك في إنشاء قائمة كلمات المرور الخاصة بك لإطار عمل Metasploit، بهدف تنفيذ هجوم رش بكلمات المرور ضد بروتوكولات الشبكة المختلفة في نطاق ضحاياك، مثل SMB : الوصف يحتوي Metasploit على وحدات متعددة يمكن استخدامها لتنفيذ هجوم القوة العمياء ضد خدمات...

buffalo

Buffalo Un script Python 3 pour exécuter des attaques par dictionnaire/liste de mots sur un serveur SSH cible en utilisant deux fichiers texte en entrée. Écrit dans le cadre de mon évaluation technique Intel. Installation Ce script dépend de Paramiko et de Colorama. Installez les dépendances via...

CVE-2019-17240

CVE-2019-17240 Exploit Les versions antérieures et y compris la 3.9.2 du CMS Bludit sont vulnérables à un contournement du mécanisme anti-force brute qui est en place pour bloquer les utilisateurs qui ont tenté de se connecter incorrectement 10 fois ou plus. La vulnérabilité a été découverte par...

EUVD-2026-93512

Payload: Unauthenticated account-lockout denial of service...

Payload: Unauthenticated account-lockout denial of service

Impact An unauthenticated attacker who knows an account’s email address or username could trigger Payload’s account lockout mechanism and prevent that user from signing in. You are affected if: Using an affected Payload version with an auth-enabled collection that uses local authentication and...

GHSA-V5GF-VPJC-PC7W Payload: Unauthenticated account-lockout denial of service

Impact An unauthenticated attacker who knows an account’s email address or username could trigger Payload’s account lockout mechanism and prevent that user from signing in. You are affected if: Using an affected Payload version with an auth-enabled collection that uses local authentication and...

NPM: Payload: Unauthenticated account-lockout denial of service

NPM: Payload: Unauthenticated account-lockout denial of service vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...

CVE-2021-3156-Mitigation-ShellScript-Build

CVE-2021-3156-Mitigation-ShellScript-Build Considérant la vulnérabilité centrée sur SUDO 2021 dans CVE-2021-3156 il s'agit d'une tentative de création d'un script de vérification de processus et si le processus désigné existe alors il invoque l'authentification et verrouille le système...

2FA-Bypass-using-a-Brute-Force-Attack-CVE-2025-60424

Contournement de la 2FA par attaque par force brute Aperçu L'application Nagios Fusion versions 2024R1.2 et 2024R2 est vulnérable à une attaque par force brute sur son mécanisme d'authentification à deux facteurs 2FA. Plus précisément, l'implémentation de la 2FA n'applique pas correctement de...

CVE-2026-105866

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an unauthenticated attacker who knows an account email address or username can abuse the account lockout mechanism of a local-authentication collection to...

CVE-2026-105866 Payload: Unauthenticated account-lockout denial of service

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an unauthenticated attacker who knows an account email address or username can abuse the account lockout mechanism of a local-authentication collection to...

CVE-2026-105866

The headless content management system Payload is vulnerable in versions prior to 3.90.0 and canary versions before 4.0.0-canary.34 . An unauthenticated attacker who possesses an account email address or username can exploit the account lockout mechanism within a local-authentication collection ....

CVE-2026-105866 Payload: Unauthenticated account-lockout denial of service

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an unauthenticated attacker who knows an account email address or username can abuse the account lockout mechanism of a local-authentication collection to...

CVE-2026-105866 Payload: Unauthenticated account-lockout denial of service

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an unauthenticated attacker who knows an account email address or username can abuse the account lockout mechanism of a local-authentication collection to...

onedrive_user_enum

onedriveuserenum v2.10 enumerate valid onedrive users For a full rundown of the enumeration technique and OneDrive enum, check out the blog here: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ If you are looking for the old, non-database vesion of OneDrive Enum, you can find it here:...

PT-2026-106799

Name of the Vulnerable Software and Affected Versions Payload versions prior to 3.90.0 Payload canary versions prior to 4.0.0-canary.34 Description An unauthenticated attacker who knows a user's email address or username can abuse the account lockout mechanism of a local-authentication collection...

EUVD-2026-91055

Filament: Multi-factor authentication app management actions do not require password reauthentication...

grafana: grafana: Dashboard modification lockout via forged file-provisioning metadata

A flaw was found in Grafana. An authenticated user with Editor permissions can set file-provisioning metadata when creating a dashboard through the dashboard API due to a missing authorization check. Consequently, the dashboard is treated as externally managed by configuration files, preventing...

grafana: grafana: Dashboard modification lockout via forged file-provisioning metadata

A flaw was found in Grafana. An authenticated user with Editor permissions can set file-provisioning metadata when creating a dashboard through the dashboard API due to a missing authorization check. Consequently, the dashboard is treated as externally managed by configuration files, preventing...

CVE-2026-105687

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-team-member RPC allows a team administrator to remove any member other than themselves but does not protect the team owner. A non-owner administrator can delete the owner's team-profile-rel membership and lock t...