CVE-2019-18818_CVE-2019-19609

Эксплойты для CVE-2019-18818 и CVE-2019-19609 Этот репозиторий содержит Python-скрипт для эксплуатации двух уязвимостей: CVE-2019-18818 и CVE-2019-19609. CVE-2019-18818 Данная уязвимость позволяет атакующему сбросить пароль администратора в Strapi CMS. Использование 1. Измените переменные target ...

unknownpwn.github.io

Tecnovision LED 비디오 월 취약점 및 익스플로잇. SQLi에서 전체 루트 액세스까지. 소개: Tecnovision은 경기장예: Twickenham Stadium, 콘서트홀, 쇼핑몰, 도로 표지판 등에 사용되는 LED 비디오 월 제조업체입니다. DlxSpot Player 4는 이러한 일부 LED 월을 제어하는 소프트웨어 컨트롤러입니다. 아래는 제가 발견한 패치되지 않은 익스플로잇으로, SQLi에서 전체 루트 액세스로 이어졌습니다하하!. 하드코딩된 비밀번호가 마지막 발견 항목이라는 점에 유의하세요. 단지 할당된 CVE...

saleemrashid-sudo-cve-2019-18634

CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 이 버그를 발견한 Apple Information Security의 Joe Vennix에게 감사를 표합니다...

CVE-2026-105179

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

cve-2026-34474-zte-h298a-h108n-sensitive-data-exposure

CVE-2026-34474: утечка секретных данных ZTE H298A / H108N через ETHCheat Технический разбор CVE-2026-34474, при котором неаутентифицированный запрос ETHCheat=1 приводит к тому, что затронутые маршрутизаторы ZTE ZXHN H298A 1.1 и H108N 2.6 возвращают актуальный пароль администратора, ESSID и WLAN P...

CVE-2026-105179 SourceCodester Drug Recommendation System Password add_user.php missing encryption

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

CVE-2026-105179 SourceCodester Drug Recommendation System Password add_user.php missing encryption

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

EUVD-2026-92179

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

CVE-2026-105179

The SourceCodester Drug Recommendation System 1.0 is affected by a vulnerability in the Password Handler component, specifically within the Admin/add_user.php file. A manipulation of the Password argument leads to the missing encryption of sensitive data . This vulnerability is exploitable via re...

sudo-cve-2019-18634

CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 Благодарность Джо Венниксу из Apple Information Security за обнаружение ошибки...

CVE-2018-5767-AC9

CVE-2018-5767-AC9 Реализация доказательства концепции для CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 Ниже приведена актуализация CVE-2018-5767 — уязвимости, которая использует незащищённый вызов sscanf при разборе заголовка 'Cookie' для пароля. Уязвимость была первоначально обнаружена и...

Flowise-CVE-2025-58434-Chain-59528

Цепочка CVE FlowiseAI - ATO CVE-2025-58434 и RCE CVE-2025-59528 ⚠️ Только для образовательных целей и авторизованных исследований безопасности. Запуск этого инструмента против систем, которыми вы не владеете или на тестирование которых у вас нет письменного разрешения, незаконен. Содержание Этот...

CVE-2025-2304-CamaleonCMS-PoC

PoC: CVE-2025-2304 - Повышение привилегий в Camaleon CMS Технический обзор Этот репозиторий содержит функциональное доказательство концепции PoC для уязвимости Mass Assignment в Camaleon CMS версии до 2.8.1. Уязвимость находится в конечной точке updatedajax модуля управления пользователями, где...

rules

Hashcat ルールコレクション 複雑なパスワードをクラックするための、更新・厳選された Hashcat ルールのコレクション。 !NOTE Hashcat ベータ版では The Table Attack が導入されました。テーブルのコレクションはこちらにあります。コントリビューター募集中。 🤝 コントリビューション リポジトリをフォークし、変更をコミットして、PR を作成するだけです。 ⭐ スペシャルサンクス n0kovo: このコレクションのオリジナル作成者 リポジトリ cakesec: n0kovo コレクションの更新 + fordy のルールの追加 リポジトリ...

CVE-2024-40617

CVE-2024-40617 Эксплойт PoC для CVE-2024-40617 Описание Подробное описание см. в публикации на Medium Fujitsu M2M GW1500 : From M2M to M2M2P0wn Использование | / | \ | | \ / \ | |/| | | ' \ | | | | | \ \ /\ / / ' \ | | | |/ /| | | | | |/ /| /| || |\ V V /| | | | || |||| || |||| / // || ||...

CVE-2026-105179: Missing Encryption of Sensitive Data

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

PT-2026-106256

Name of the Vulnerable Software and Affected Versions openSIS Classic version 9.3 Description An authenticated user with the teacher role can reset the password of any staff account. This is achieved by selecting an arbitrary staff record via the staff id variable within the School Information...

EUVD-2026-92783

Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password of the built-in super administrator account. The server does not enforce protection for this account, and the update scenario does not...

CVE-2026-95263: Undefined Security Weakness

Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password of the built-in super administrator account. The server does not enforce protection for this account, and the update scenario does not...

PT-2026-106280

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without a purpose, and...