13590 matches found
XWiki < 4.10.15 - Sensitive Information Disclosure
XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the password hashes of all users to anyone with view right on the respective user profiles. By default, all user profiles are...
rConfig <=3.9.4 - SQL Injection
rConfig 3.9.4 and prior has unauthenticated snippets.inc.php SQL injection. Because nodes' passwords are stored in cleartext by default, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10549 info: name: rConfig 3.9.4 or apply th...
SuperWebMailer 9.00.0.01710 - Cross-Site Scripting
An issue was discovered in SuperWebMailer 9.00.0.01710 allowing XSS via crafted incorrect passwords. id: CVE-2023-38192 info: name: SuperWebMailer 9.00.0.01710 - Cross-Site Scripting author: ritikchaddha severity: medium description: | An issue was discovered in SuperWebMailer 9.00.0.01710 allowi...
pantagrule
Pantagrule 从泄露密码生成的海量 hashcat 规则集 项目维护警告 ：该项目被视为已完成 。除非是实际错误或为使其能适配更新版 hashcat 的迁移，未来将不会对此项目进行任何拉取请求或更改。 Pantagrule 是一系列为 hashcat 密码破解器生成的规则，这些规则源自大量真实世界的密码泄露数据。尽管 Pantagrule 规则文件可能很大，但规则既可调优，且性能优于许多现有规则集。 Pantagrule 使用 PACK 的 Levenshtein 反向路径算法进行自动规则生成（Kacherginsky, 2013）。随后，根据 PACK...
CVE-2025-29557
CVE-2025-29557 – ExaGrid MailConfiguration API Credential Disclosure 📝 Overview Vulnerability Title : SMTP Credential Disclosure via MailConfiguration API Product : ExaGrid EX10 Backup Appliance Versions Affected : 6.3 – 7.0.1.P08 CVE ID : CVE-2025-29557 Severity : High Attack Vector : Remote...
vx-underground-wordlist
vx-underground-wordlist Wordlist altamente optimizada para descifrar la contraseña de archivos .zip de vx-underground en un santiamén...
crackerjack
!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...
Pwdb-Public
PWDB - Nuova generazione di analisi di massa delle password Obiettivo Lasciando alle spalle la roba di red team vecchia di 20 anni. Le cose funzionano bene e nessuno si preoccupa di controllarle/sostituirle per decenni. Dump inclusi Puoi controllare il file status.txt in questo repository per...
Chromium: CVE-2026-79212 Missing authorization in Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-79049 Incorrect reference resolution in Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-79058 Missing authorization in Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2022-46484
CVE-2022-46484 La divulgazione di informazioni nei sondaggi protetti da password in Data Illusion Survey Software Solutions NGSurvey v2.4.28 e versioni precedenti consente agli aggressori di visualizzare la password per accedere e inviare sondaggi in modo arbitrario...
DumpsterDiver
DumpsterDiver von @Rzepsky DumpsterDiver ist ein Werkzeug, das große Datenmengen nach fest codierten Geheimnissen wie Schlüsseln z.B. AWS Access Key, Azure Share Key oder SSH-Schlüssel oder Passwörtern durchsuchen kann. Zusätzlich ermöglicht es die Erstellung einfacher Suchregeln mit grundlegende...
ssh-mitm
SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...
ssh-mitm
SSH MITM v2.3-dev Autor: Joe Testa @therealjoetesta Übersicht Dieses Penetrationstest-Werkzeug ermöglicht es einem Auditor, SSH-Verbindungen abzufangen. Ein Patch auf den OpenSSH v7.5p1-Quellcode bewirkt, dass dieser als Proxy zwischen dem Opfer und dessen beabsichtigtem SSH-Server fungiert; alle...
WinboxPoC
WinboxExploit Dies ist ein Proof-of-Concept der kritischen WinBox-Sicherheitslücke CVE-2018-14847, die das Auslesen von Klartext-Passwörtern aus beliebigen Dateien ermöglicht. Die Sicherheitslücke wurde bereits vor langer Zeit behoben, daher ist dieses Projekt beendet und wird nicht mehr...
OneLogicalMyth_Shell
OneLogicalMythShell यह HTA शेल ब्रेकआउट मूल्यांकन में सहायता के लिए बनाया गया था। मैंने इसे शुरू में एक वर्ष से अधिक समय पहले बनाया था और सोचा कि दूसरों को यह उपयोगी लग सकता है, इसलिए अब इसे सार्वजनिक कर दिया है। कृपया बेझिझक पुल रिक्वेस्ट सबमिट करें। विशेषताएँ फ़ाइल एक्सप्लोरर ड्राइव्स सूचीबद्ध...
passgen
🔐 passgen — Passwörter vom Terminal aus generieren Ein kleines Go-CLI, das sichere zufällige Passwörter mit flexiblen Zeichensätzen und Ausschlüssen generiert. Verwendet crypto/rand für kryptografisch sichere Zufälligkeit. Wenn keine Zeichensatz-Flags angegeben werden, sind standardmäßig alle...
CVE-2025-58443
CVE-2025-58443 Exploit POC für https://github.com/FOGProject/fogproject, welches einen Authentifizierungs-Bypass darstellt, der zu einem vollständigen DB-Dump führt, der Klartext-Passwörter und Benutzer- sowie Admin-Passwort-Hashes enthält. Anfällige Version : 1.5.10.1673 Nachfolgend ein Skript,...
