ff-password-exporter

FF Password Exporter मोज़िला फ़ायरफ़ॉक्स से अपने पासवर्ड निर्यात करना मुश्किल हो सकता है। फ़ायरफ़ॉक्स के संस्करण 57 क्वांटम से, मौजूदा पासवर्ड निर्यात ऐड-ऑन काम नहीं करते हैं। मोज़िला कोई अन्य आधिकारिक विकल्प प्रदान नहीं करता है। FF Password Exporter फ़ायरफ़ॉक्स से आपके सभी पासवर्ड को जल्दी और...

glimmer

Glimmer Adversary emulation framework for offensive security research and purple team operations. Glimmer is a custom C2 framework built from scratch to explore persistence, evasion, and detection engineering across workstation, cloud, and embedded environments. This is a research and portfolio...

lsPass

lsPass — local, encrypted password manager GTK4 / gtkmm-4 · C++23 · CMake · SQLite · libsodium lsPass stores logins, secure notes and API keys in a local encrypted vault. No network, no cloud, no telemetry. Nothing secret is ever written to disk in plaintext. Build & test sudo apt install...

zerologon

ZeroLogon शोषण स्क्रिप्ट शोषण कोड https://www.secura.com/blog/zero-logon और https://github.com/SecuraBV/CVE-2020-1472 पर आधारित है। मूल शोध और स्कैनर Secura द्वारा, संशोधन RiskSense Inc. द्वारा। शोषण करने के लिए, आपके पास मौजूद किसी भी पिछले Impacket इंस्टॉलेशन को हटा दें और...

CVE-2025-4094

CVE-2025-4094 – WordPress Digits Plugin This method is useful for vi...

cve-2022-22976-bcrypt-skips-salt

BCrypt Hash Check To assist with the mitigation steps for CVE-2022-xxxx, you can use this tool to check your database for hashes that need updating. After you've integrated the application with your database, the tool works in two steps. To demonstrate this a in-memory sample application is used...

TendaSpill

TendaSpill An exploitation tool to extract passwords using CVE-2015-5995. CVE-2015-5995 Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via a certain admin substring in an HTTP Cookie header...

EUVD-2026-94927

Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. MyRezzta allows Password Recovery Exploitation. This issue affects MyRezzta: from 2.06.03 before 2.07.01...

CVE-2026-19218

The MyRezzta software, developed by AKIN Software Computer Import-Export Industry and Trade Co. Ltd., contains a Weak Password Recovery Mechanism for forgotten passwords. This vulnerability, identified as CWE-640 , allows for password recovery exploitation, which can lead to account takeover. The...

CVE-2026-19218 Password Reset Code Brute Force Leading to Account Takeover in AKIN Software's MyRezzta

Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. MyRezzta allows Password Recovery Exploitation. This issue affects MyRezzta: from 2.06.03 before 2.07.01...

CVE-2025-54321

CVE-2025-54321 Reset Password Email Bombing Description The reset password function does not implement rate limiting for the target email address. This allows for an Email Bombing attack CVSS Score: 7.1 High Attack Type Remote Authenticated Affected Versions Versions before 8.6.8 Discoverer Yazan...

wifi-cracking

वाई-फाई क्रैकिंग WPA/WPA2 वाई-फाई राउटर को Airodump-ng और Aircrack-ng/Hashcat से क्रैक करें। यह एक संक्षिप्त वॉक-थ्रू ट्यूटोरियल है जो दर्शाता है कि कमजोर पासवर्ड वाले वाई-फाई नेटवर्क को कैसे क्रैक किया जाए। यह विस्तृत नहीं है, लेकिन यह आपके अपने नेटवर्क की सुरक्षा का परीक्षण करने या आस-पास के कि...

sudo-cve-2019-18634

CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 Credit to Joe Vennix from Apple Information Security for finding the bug...

CVE-2021-31159

Zoho ManageEngine ServiceDesk Plus MSP - Active Directory User Enumeration CVE-2021-31159 This script takes advantage of ServiceDesk Plus before build 10519 having different output in the password recovery functionality: if the user exists it returns a message claiming an email has been sent but ...

CVE-2023-27372-PoC

This is a proof of concept CVE-2023-27372 SPIP RCE vulnerability. It's a deserilzation flaw which exploits the dangerous use of ENV tag during the reset password feature spip.php?page=spippass within /ecrire/balise/formulaire.php Specifically this line: 1. Syntax: python3 exploit.py -u...

CVE-2003-0264-SLmail-5.5

CVE-2003-0264 - Seattle Lab Mail 5.5 POP3 Buffer Overflow References https://vulners.com/cve/CVE-2003-0264 Vulnerability SLMail has no bounds checking when submitting a POP3 password. As a result, you can execute arbitrary code by submitting a long, malformed POP3 PASS to the SLMail server...

CVE-2026-107573

Progressive Robot hMailServer versions 6.0.0 through 6.3.5 on Windows suffer from incorrect default permissions in the installer. The installer creates data, log, temp, database, and event folders, along with the hMailServer.INI configuration file, using permissions inherited from the installatio...

CVE-2026-104659

Missing Host header validation and missing throttling of failed administrator sign-ins in the REST API listener of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a remote attacker to brute-force the server administrator's password through the administrator's own browser by DNS rebinding...

EUVD-2026-94834

Missing Host header validation and missing throttling of failed administrator sign-ins in the REST API listener of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a remote attacker to brute-force the server administrator's password through the administrator's own browser by DNS rebinding...

Exploit_CVE-2021-24762

exploitcve-2021-24762 This repo shows an exploit to CVE-2021-24762. This is an Blind SQLi exploit that, on default config, greps the admin password. While doing a lab, based on Wordpress with PerfectSurvey plugin, I stucked on a sql vulnerability. The only available PoC I found were based on sqlm...