whatsapp-census

Hey there! You are using WhatsApp This is the github repository for the extended version of the paper Hey there! You are using WhatsApp: Enumerating Three Billion Accounts for Security and Privacy. Abstract WhatsApp, with 3.5 billion active accounts as of early 2025, is the world's largest instan...

rover

rover Proof of Concept code for CVE-2016-5696 Rover is a small python program to discover abitrary client source ports as shown in CVE-2016-569. Once the source port is known, the 4 tuple of information needed to confirm that two host are communicating can be completed. When run, rover establishe...

lua-resty-limit-traffic

Name lua-resty-limit-traffic - Lua library for limiting and controlling traffic in OpenResty/ngxlua Table of Contents Name Status Synopsis Description Installation Community English Mailing List Chinese Mailing List Bugs and Patches Author Copyright and License See Also Status This library is...

fb_friend_list_scraper

Facebook Friend List Scraper OSINT tool to scrape names and usernames from large friend lists on Facebook, without being rate limited. hmu on Mastodon: @[email protected] Getting started: Install using pip: python -m pip install fb-friend-list-scraper Script is now installed as...

CVE-2019-19633

CVE-2019-19633 lib/G/functions.php in Chevereto 1.0.0 through 1.1.4 Free, and through 3.13.5 Core, allows an attacker to perform bruteforce attacks without triggering the implemented protection mechanism by manipulating the X-Forwarded-For header in the request. The IP in the header has to be...

EUVD-2026-125817

IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to bypass security restrictions due to improper rate limiting on TOTP verification...

Zen

Find email addresses of Github users Find email address of a user python zen.py username or python zen.py https://github.com/username Find email addressess of contributors of a repository python zen.py https://github.com/username/repository Find email addresses of members of an organization pytho...

CVE-2025-66838

CVE-2025-66838 Lack of Rate Limiting - File Upload Description An attacker can rapidly upload a large volume of files to cause denial of service CVSS Score: 6.5 Medium Attack Type Remote Authenticated Affected Versions Versions before 10.0.23.0.3587512 Discovered By: Yazan Abu-Nadi...

zappzarapp-php-security

⚡ zappzarapp/security Comprehensive PHP security library providing CSP, Security Headers, CSRF protection, Secure Cookies, Password Validation, Input Sanitization, Rate Limiting, SRI, Secrets Loading, Encryption, Session Security, TOTP two-factor authentication, Signed URLs, and Security Event...

subbrute

subdomain-bruteforcer SubBrute SubBrute is a community driven project with the goal of creating the fastest, and most accurate subdomain enumeration tool. Some of the magic behind SubBrute is that it uses open resolvers as a kind of proxy to circumvent DNS rate-limiting...

CVE-2026-91869

IBM Security QRadar EDR versions 3.12 through 3.12.26 are vulnerable to a security restriction bypass. The root cause is improper rate limiting on TOTP verification (CWE-307), which could allow a remote authenticated attacker to bypass security controls. This vulnerability has a CVSS base score o...

net-Shield

net-Shield An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices based on iptables/ipsets Requirements Linux System with golang, iptables/ipsets Nginx Quickstart Run the bash script install.sh to install all the required dependencies. bash install.sh You will be prompted...

CVE-2025-4094

CVE-2025-4094 – WordPress Digits Plugin This method is useful for vi...

limitrr-php

Light rate limting within PHP using Redis. Limitrr PHP is very heavily inspired by my other library, Limitrr which was created for NodeJS. Check it out here Limitrr PHP allows users to easily integrate rate limiting within their application. Unlike other similar packages, this utility allows the...

radar

Radar Radar is a small but efficient network scanner written in Rust heavily inspired by masscan. These are the main features: Userspace TCP, UDP, DHCP and ARP implementations, thanks to pnet Being asynchronous Randomized IP/ports scanning with no pre-allocation/shuffling Rate limiting Monitor mo...

CVE-2026-105622

Improper restriction of excessive authentication attempts in the WAMP-CRA challenge-response authentication path in Zenitel Connect before 1.11.0 allows remote attackers to guess user passwords via unlimited authentication attempts, because the path, in which the broker issues a challenge and the...

CVE-2026-105622

Zenitel Connect versions before 1.11.0 are vulnerable to an improper restriction of excessive authentication attempts (CWE-307) within the WAMP-CRA (challenge-response) authentication path. The underlying cause is the lack of account lockout or rate limiting when a broker issues a challenge and t...

CVE-2026-105622 Zenitel Connect missing lockout and rate limiting on the WAMP-CRA authentication channel

Improper restriction of excessive authentication attempts in the WAMP-CRA challenge-response authentication path in Zenitel Connect before 1.11.0 allows remote attackers to guess user passwords via unlimited authentication attempts, because the path, in which the broker issues a challenge and the...

CVE-2026-71205-PoC

CVE-2026-71205 — changedetection.io: No Rate Limiting on /login Enables Unlimited Password Brute-Force Product: dgtlmoon/changedetection.io — v0.55.7 File: changedetectionio/flaskapp.py CWE: CWE-307 — Improper Restriction of Excessive Authentication Attempts CVSS 3.1:...

CVE-2020-35590

Exploit Information Exploit Title: WordPress Plugin Limit Login Attempts Reloaded 2.13.0 - Login Limit Bypass CVE: CVE-2020-35590 Date: 2020-06-09 Exploit Author: N4nj0 Software Link: https://wordpress.org/plugins/limit-login-attempts-reloaded/ Version: 2.13.0 Tested on: WordPress 5.4.1, 5.4.2...