propox

Propox 🛡️🚀 Propox est un proxy HTTP/HTTPS haute performance, sécurisé et observable, écrit en Rust. Il est conçu pour gérer un trafic à haut débit tout en défendant activement contre les clients abusifs grâce à des mécanismes de sécurité avancés. ✨ Fonctionnalités clés 🚀 Performance extrême...

limitrr-php

PHP में Redis का उपयोग करके हल्की दर सीमित करना। Limitrr PHP मेरी दूसरी लाइब्रेरी, Limitrr से बहुत अधिक प्रेरित है, जिसे NodeJS के लिए बनाया गया था। इसे यहाँ देखें। Limitrr PHP उपयोगकर्ताओं को अपने एप्लिकेशन में आसानी से दर सीमा रेट लिमिटिंग एकीकृत करने की अनुमति देता है। अन्य समान पैकेजों के...

CVE-2024-57610

Sylius v2.0.2 में दर सीमा का अभाव विक्रेता होमपेज: https://sylius.com/ पुनरुत्पादन के चरण 1. https://store.sylius.com/login पर जाएँ 2. स्वचालित उपकरणों या स्क्रिप्ट जैसे, Burp Suite, cURL का उपयोग करके कई लॉगिन अनुरोधों का प्रयास करें। 3. ध्यान दें कि कोई दर सीमा लागू नहीं है, और अनुरोध बिना किसी...

CVE-2026-8793

CVE-2026-8793 — Protezione brute-force mancante nel modulo di accesso di PaperCut NG Campo| Dettagli ---|--- ID CVE| CVE-2026-8793 Prodotto| PaperCut NG Versione interessata| 25.0.11 Build 75758 e precedenti CWE| CWE-307 — Limitazione impropria dei tentativi di autenticazione eccessivi Punteggio...

CVE-2025-4094

CVE-2025-4094 – Plugin Digits WordPress 8.4.6.1 - Bypass de Autenticação OTP Autor: Saleh Tarawneh ID CVE: CVE-2025-4094 Gravidade: Crítica CVSS 9.8 Status: Corrigido na versão 8.4.6.1 Descrição da Vulnerabilidade O plugin Digits WordPress anterior à versão 8.4.6.1 é vulnerável a ataques de força...

CVE-2020-35590

Exploit-Informationen Exploit-Titel: WordPress Plugin Limit Login Attempts Reloaded 2.13.0 - Umgehung der Anmeldebeschränkung CVE: CVE-2020-35590 Datum: 2020-06-09 Exploit-Autor: N4nj0 Software-Link: https://wordpress.org/plugins/limit-login-attempts-reloaded/ Version: 2.13.0 Getestet auf:...

PT-2026-82792

The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lockout mechanisms. This could allow an attacker to perform automated authentication attacks against deployments that rely on password based authentication...

cve-2019-17240

Bludit = 3.9.22 - تجاوز تخفيف القوة العمياء هذا مشروع صغير قمت فيه بإعادة كتابة هذا السكربت بلغة بايثون إلى لغة غو. كان الغرض من هذا المشروع هو تعلّم لغة غو وفهم كيفية عمل هذا الاستغلال. الاستخدام root@kitploit: $ ./brutepass -sdasds flag provided but not defined: -sdasds Usage of ./brutepass: -c...

CVE-2026-31283

CVE-2026-31283 Descrição O recurso "Forgot password" pode ser usado para lançar um ataque de bombardeio de e-mail contra o e-mail da vítima. Pontuação CVSS 3: 7.5 Alta Tipo de ataque Remoto Não autenticado Versões afetadas Versões anteriores a 19.1.5 Descoberto por: Yazan Abu-Nadi...

2FA-Bypass-using-a-Brute-Force-Attack-CVE-2025-60424

Bypass della 2FA tramite attacco di forza bruta Panoramica L'applicazione Nagios Fusion versioni 2024R1.2 e 2024R2 è vulnerabile a un attacco di forza bruta sul meccanismo di autenticazione a due fattori 2FA. In particolare, l'implementazione della 2FA non applica adeguatamente meccanismi di...

whatsapp-census

Hey! Du nutzt WhatsApp Dies ist das GitHub-Repository für die erweiterte Version des Papers Hey there! You are using WhatsApp: Enumerating Three Billion Accounts for Security and Privacy. Zusammenfassung WhatsApp ist mit 3,5 Milliarden aktiven Konten Stand Anfang 2025 die größte...

filtron

Filtron Proxy HTTP inverso per filtrare le richieste tramite diverse regole. Può essere utilizzato tra il webserver di produzione e il server applicativo per prevenire abusi del backend dell'applicazione. Lo scopo originale di questo programma era difendere searx, ma può essere usato per protegge...

CVE-2025-65427

CVE-2025-65427: Authentifizierungs-Rate-Limiting-Problem im Dbit N300 T1 Pro CVE-ID: CVE-2025-65427 Datum: 2025-12-16 Entdecker: Kirubel Produkt: Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router Firmware-Version: V1.0.0 Beschreibung Ein Problem wurde im Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi...

CVE-2026-81033

Automatisch (through v0.15.0 ) exposes a user enumeration vulnerability through its forgot-password endpoint. The controller at packages/backend/src/controllers/internal/api/v1/users/forgot-password.js returns a not-found status for unregistered addresses but a no-content status for registered on...

radar

Radar Radar è uno scanner di rete piccolo ma efficiente scritto in Rust, fortemente ispirato a masscan. Queste sono le caratteristiche principali: Implementazioni in userspace di TCP, UDP, DHCP e ARP, grazie a pnet Asincrono Scansione randomizzata di IP/porte senza pre-allocazione/shuffling...

zappzarapp-php-security

⚡ zappzarapp/security Comprehensive PHP security library providing CSP, Security Headers, CSRF protection, Secure Cookies, Password Validation, Input Sanitization, Rate Limiting, SRI, Secrets Loading, Encryption, Session Security, TOTP two-factor authentication, Signed URLs, and Security Event...

grill

grill grill, noto anche come limitazione globale della velocità in Linux, è uno scanner per CVE-2016-5696 pure TCP off-path. Installazione root@kitploit: $ go get github.com/nogoegst/grill Avvertenze Non utilizzare mai collegamenti wireless nel percorso verso gli host. La perdita costante di...

CVE-2026-62862

Typebot (open-source chatbot builder), self-hosted versions ≤ 3.17.1 , is vulnerable to account takeover via brute-forcing of the passwordless email magic-link login code. The root cause is a 6-digit code generated with Math.random() (only 900,000 combinations) with a 10-minute expiry, no attempt...

CVE-2026-62862 TypeBot: Account takeover via brute-forceable 6-digit magic-link code

Typebot is an open-source chatbot builder. In self-hosted versions up to and including 3.17.1, the default passwordless email magic-link authentication is vulnerable to login-code brute forcing that leads to account takeover. The email provider overrides NextAuth's default cryptographically secur...

CVE-2026-79661

Ech0 through 4.5.6 registers the PUT /api/echo/like/:id endpoint on the public router group without authentication or rate limiting. Unauthenticated attackers can increment the favcount counter of any echo including private echoes by supplying its UUID, which can be harvested from the public GET...