-CVE-2019-18634-sudo-pwfeedback

-CVE-2019-18634-sudo-pwfeedback...

D-Link DCS-2530L/DCS-2670L - Administrator Password Disclosure

D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices are vulnerable to password disclosures vulnerabilities because the /config/getuser endpoint allows for remote administrator password disclosure. id: CVE-2020-25078 info: name: D-Link DCS-2530L/DCS-2670L - Administrator...

CVE-2019-12889

CVE-2019-12889 概要 SailPoint Desktop Password Reset 7.2 には、認証されていない権限昇格の脆弱性が存在します。Windows のログオン画面へのローカルアクセスのみを持つユーザーは、自分の権限を NT AUTHORITY\System に昇格させることができます。攻撃者がこの脆弱性を悪用するには、マシンへのローカルアクセスが必要です。攻撃者は、コンピューターをローカルネットワーク / WAN から切断し、インターネットに接続されたアクセスポイント /...

reyee_decrypt

reyeedecrypt 自适应解密锐捷 Ruijie ReyeeOS 的固件与配置备份，并从配置中恢复明文口令。 用法 python3 reyeedecrypt.py 输出目录 自动识别，支持以下几种： 输入| 例子 ---|--- 固件 tar 包| AP3.01...withbootencryptov1.tar.gz 固件解压目录| ...withbootencryptov1/ 加密 install bin| ...installencryptov1.bin / ...installencryptov2.bin 加密 u-boot| u-boot-encryptov2 配置备份|...

zerologon-lab

zerologon-lab 用于演示 Zerologon（CVE-2020-1472）漏洞的实验环境脚本。 用法 zerologon.py zerologon.py -h --reset --restore HEX dcname dcip 尝试利用 Zerologon 漏洞攻击域控制器。参数： dcname: 目标域控制器的 NetBIOS 名称。 dcip: 目标域控制器的 IP 地址。 --reset: 可选标志，将机器账户密码重置为空字符串。默认情况下，脚本仅测试漏洞。 --restore HEX: 可选参数，从后渗透导出的十六进制密码还原机器账户密码。 -h, --help:...

Seecret.it

📦 Seecret.it — 通过一次性链接安全分享 Seecret.it 是一个在线服务，允许通过加密的一次性链接共享密码、文档或敏感信息。您的数据保持不可见、安全，并在查看后自动销毁。非常适合 IT 团队、企业、自由职业者以及任何希望保密传输信息的人。 🔐 主要功能 服务器端加密和读取后自动删除 一次性或自定义时效链接 安全共享密码、笔记、消息或文件 可选的二级密码保护 访问统计（日期、IP、浏览器、国家——如果启用） 专用页面生成 Wi-Fi 二维码 内置密码生成器 简单的 API，可发送文本并获取唯一链接 正在开发的扩展和工具（Thunderbird、浏览器等） 🚀 为什么使用...

PT-2026-107404

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

PT-2026-107575

Gophish through 0.12.1 contains a rate limit bypass vulnerability that allows unauthenticated attackers to evade /login throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can send a different forwarded address per request so the limiter keyed on rewritten RemoteAddr never...

PT-2026-107587

Name of the Vulnerable Software and Affected Versions Cisco License On-Prem affected versions not specified Description An issue in the web-based management interface of Cisco License On-Prem, previously known as Cisco Smart Software Manager On-Prem, allows an unauthenticated remote attacker to...

PT-2026-107407

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

PT-2026-107717

Name of the Vulnerable Software and Affected Versions pgjdbc versions 42.7.11 through 42.7.13 Description The PostgreSQL JDBC Driver fails to enforce restrictions when the requireAuth connection property excludes all six known authentication methods e.g.,...

Security Bulletin: Due to the use of IBM Db2, IBM Cloud Pak System is affected by multiple vulnerabilities

Summary Vulnerabilities found in IBM Db2 LUW that affect Foundation and IBM Tivoli Monitoring ITM pattern Types pTypes shipped with IBM Cloud Pak System. Vulnerabilities were addressed in IBM Cloud Pak System v2.3.5.1. IBM Cloud Pak System provides IBM Db2 with BLU Acceleration Pattern 1.2.26.0...

CVE-2020-1472

CVE-2020-1472 POC netlogon 構造が追加された最新の impacket を GitHub から入手する必要があります。 デフォルトでは、これによりドメインコントローラアカウントのパスワードが変更されることに注意してください。確かにこれにより DCSync が可能になりますが、他のドメインコントローラとの通信も断ち切ってしまうため、取り扱いには十分注意してください！ 詳細情報とオリジナルの研究はこちら エクスプロイトの手順 上記のブログ/ホワイトペーパーを読んで、何をしているのかを理解する DC の IP アドレスと NetBIOS 名を指定して...

CVE-2000-0979

CVE-2000-0979 CVE-2000-0979.rb — это автономный инструмент для эксплуатации CVE-2000-0979 против службы SMB Windows 95. msf20000979.rb — это модуль Metasploit. Вы можете скопировать его в ⁨metasploit-framework⁩ ▸ ⁨modules⁩ ▸ ⁨auxiliary⁩ ▸ scanner⁩ ▸ ⁨smb⁩ Более подробная документация появится в...

EUVD-2026-93923

When Gitea's web installer is reachable against a database that already contains users, such as after INSTALLLOCK has been reset to false, submitting the install form with an administrator username matching an existing account issued an authenticated session for that account without verifying its...

CVE-2026-70414

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

Credential Exposure

Overview Affected versions of this package are vulnerable to Credential Exposure in ConnectionFactoryConfigurator.loadConnectionFactory, Map, String, which concatenates the raw AMQP URI, username and password included, into three IllegalArgumentException messages. A user with read access to the...

CVE-2026-70414

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-70414

Dell Command | Configure (DCC) versions prior to 5.2.3.35 are affected by a Plaintext Storage of Password vulnerability (CWE-256). A low privileged attacker with local access could exploit this flaw to cause Information Disclosure . No specific exploit details are provided in the documentation. R...

CVE-2026-70414

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...