difuze

difuze: Fuzzer for Linux Kernel Drivers This repo contains all the sources including setup scripts, you need to get difuze up and running. Tested on Ubuntu = 14.04.5 LTS 0. Running difuze from Docker Refer the readme As explained in our paper, There are two main components of difuze: Interface...

AnythingLLM - Username Enumeration via Password Recovery

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to commit e287fab56089cf8fcea9ba579a3ecdeca0daa313, the password recovery endpoint returns different error messages depending on whether a username exists, so enabling...

PSW Front-end Login & Registration 1.13 - Weak Password Recovery

PSW Front-end Login & Registration plugin for WordPress contains a weak password recovery mechanism that can be exploited by unauthenticated attackers. This vulnerability affects versions through 1.13 and allows attackers to potentially gain unauthorized access. id: CVE-2025-47646 info: name: PSW...

CVE-2024-9441

Nortek Linear eMerge E3 Pre-Auth RCE PoC CVE-2024-9441 Description: This repository contains a Proof of Concept PoC exploit for Nortek Linear eMerge E3 CVE-2024-9441, which is vulnerable to Remote Code Execution RCE in a pre-authentication state. The vulnerability is triggered via a flaw in the...

legion

Legion ZK Auth 🛡️ True Zero-Knowledge Authentication with Hardware-Bound Device Ring Signatures 🎯 What is Legion? Legion is a passwordless zero-knowledge authentication system that proves you're authorized without revealing who you are. Authenticate using only your fingerprint + 24-word recovery...

wifi-passview

WiFi Passview WiFi Passview is an open-source batch script-based program that can recover your WiFi Password easily in seconds. This is for Windows OS only. Basically, this scripted program has the same function as other passview software such as webpassview and mailpassview. Disclaimer : WiFi...

CVE-2026-56706 Adminer before 5.4.3 CSRF Token Secret Recovery via XOR Masking

Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token format rand XOR secret:rand, allowing anyone who observes a single CSRF token e.g., via network sniffing, log files, Referrer header, or XSS to recover the session secret with a sing...

CVE-2026-56706

Adminer before 5.4.3 contains a CSRF token design flaw: each token transmits both the XOR mask and the masked value in the format (rand XOR secret):rand, so a single observed token (via network sniffing, log files, Referrer header, or XSS) lets an attacker recover the session secret with one XOR ...

Exploit for CVE-2026-18963

CVE-2026-18963 — Keycloak Reset-Credentials Bypass → Account T...

drs-malware-scan

Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...

CVE-2026-77567

CVE-2026-77567 affects Filament , a full-stack component library for Laravel development. Prior to versions 4.12.0 and 5.7.0 , incorrect challenge-form required-field handling allows app-based multi-factor authentication (MFA) to be bypassed when recovery codes are enabled. Email-based MFA is not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099440)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099440 advisory. Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. Th...

CVE-2026-55765 CloudNativePG: Cleartext role passwords recorded in pg_stat_statements allow privileged tenant roles to recover the PostgreSQL superuser credential and achieve RCE in the database pod

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG embedded cleartext role passwords in ALTER ROLE and CREATE ROLE statements generated by SetUserPassword in pkg/management/postgres/utils/roles.go and...

EUVD-2026-63466

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The...

EUVD-2026-63117

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the associated search job dispatch archive, recover session material, and use it to access all relevant data available to the report owner and affect...

CVE-2026-75986

A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recovery. Such manipulation of the argument txtUserName leads to sql injection. The attack may be launched remotely. The...

EUVD-2026-62220

A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recovery. Such manipulation of the argument txtUserName leads to sql injection. The attack may be launched remotely. The...

CVE-2026-75986

SQL injection in code-projects Online Job Portal System 1.0 via the txtUserName argument in /ForPass.php (Password Recovery). No authentication required; CVSS 7.3 (HIGH). Proof-of-concept exploit disclosed. No patch version is mentioned in the provided documents.

CVE-2026-75986 code-projects Online Job Portal System Password Recovery ForPass.php sql injection

A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recovery. Such manipulation of the argument txtUserName leads to sql injection. The attack may be launched remotely. The...

MiracleLinux 8 : pam-1.3.1-40.el8_10 (AXSA:2026-1577:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1577:02 advisory. linux-pam: Plaintext password recovery via timing discrepancy in pamuserdb module CVE-2026-54411 Tenable has extracted the preceding description block direct...