tookie-osint

Нам пришлось провести ребрендинг 🔎 Обзор Tookie-osint имеет простой в использовании пользовательский интерфейс и очень прост. Основная идея Tookie-osint - находить имена пользователей, которые запрашиваются из ввода. Tookie-osint похож на инструмент под названием Sherlock. Он обнаруживает все...

o365enum

Office 365 ユーザー列挙 ActiveSync、Autodiscover、または office.com のログインページを使用して、Office 365 から有効なユーザー名を列挙します。 使用方法 o365enum は、最初のパラメーターとして指定されたファイルからユーザー名を読み取ります。ファイルには1行に1つのユーザー名を記述します。出力はCSV形式で、解析が容易です。有効ステータスは、0（無効なユーザー）、1（有効なユーザー）、2（有効なユーザーかつ有効なパスワード）です。 root@kitploit: python3.6 o365enum.py -h usage:...

PoC-CVE-2018-15473

PoC-CVE-2018-15473 OpenSSH 7.7까지의 버전은 유효하지 않은 인증 사용자에 대해 패킷이 완전히 파싱될 때까지 탈출bailout을 지연시키지 않아서 사용자 열거 취약점에 취약합니다. 이는 auth2-gss.c, auth2-hostbased.c, auth2-pubkey.c와 관련됩니다. CVE: CVE-2018-15473 출처: https://www.openwall.com/lists/oss-security/2018/08/15/5 패치되지 않은 현재 버전에서, 원격 공격자는 대상 OpenSSH 서버에서 특정...

CVE-2018-15473_exploit

CVE-2018-15473 - OPENSSH 7.7 사용자 열거 의존성: https://github.com/pyperanger/crypt-curve25519 수정 패치 https://metacpan.org/pod/Net::SSH::Perl 참고자료 https://seclists.org/oss-sec/2018/q3/125 http://www.openwall.com/lists/oss-security/2018/08/15/5 https://isc.sans.edu/diary/24004...

Wordell

Wordell 🌐 Wordell è un potente script di enumerazione di WordPress progettato per rendere le tue valutazioni di sicurezza su WordPress più efficienti e complete. Ti consente di enumerare le sitemap, scoprire nomi utente, raccogliere i login di WordPress, acquisire screenshot e generare indirizzi ...

ssh_user_enum

sshenumv0.3.py Verwendung: sshenumv0.3.py Optionen Optionen: root@kitploit: -h, --help Diese Hilfe anzeigen und beenden -u --userlist Eine Datei mit Benutzernamen angeben eine Zeile pro Benutzer -i --ip Das Ziel angeben -m --multiplier Den Multiplikator für das Passwort angeben wird verwendet, um...

EUVD-2024-16187

The check user account lock states feature within the email OTP flow fails to validate user input, allowing an attacker to infer the existence of registered user accounts. The discovery of valid usernames can increase the risk of brute-force and social engineering attacks. Attackers can leverage...

CVE-2024-0391

The CVE-2024-0391 issue affects WSO2 products with the email OTP flow, where the check user account lock states validation fails, enabling attacker enumeration of registered usernames. This disclosure indicates that valid usernames can be inferred, which could facilitate targeted brute-force or s...

PT-2026-39580

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The check user account lock states feature within the email OTP flow fails to validate user input. This allows an attacker to infer whether specific user account...

RHCOS 3 : Red Hat OpenShift Enterprise 3.1.1 update (Important) (RHSA-2016:0070)

The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0070 advisory. - commons-fileupload: Arbitrary file upload via deserialization CVE-2013-2186 - stapler-adjunct-zeroclipboard: multiple cross-site...

ZKTeco ZKBioSecurity 安全漏洞

ZKTeco ZKBioSecurity is a web-based integrated platform developed by ZKTeco Corporation in China. Version 3.0 of ZKTeco ZKBioSecurity contains security vulnerabilities. These vulnerabilities stem from user enumeration, and could allow unverified attackers to discover valid usernames by submitting...

CVE-2005-1650

The web mail service in Woppoware PostMaster 4.2.2 build 3.2.5 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...

BIT-DISCOURSE-2025-64528 Users are able to find users by name even when `enable_names` is off

Discourse is an open source discussion platform. Prior to versions 3.5.3, 2025.11.1, and 2025.12.0, an attacker who knows part of a username can find the user and their full name via UI or API, even when enablenames is disabled. Versions 3.5.3, 2025.11.1, and 2025.12.0 contain a fix...

PT-2025-48802

Name of the Vulnerable Software and Affected Versions Nagvis Checkmk MultisiteAuth versions prior to 1.9.48 Description An unauthenticated attacker can enumerate Checkmk usernames. This issue affects the user enumeration functionality within the software. Recommendations Update to version 1.9.48 ...

EUVD-2010-0247

Malware in sbrugna...

EUVD-2021-25561

Malware in sbrugna...

EUVD-2009-2664

Malware in sbrugna...

EUVD-2013-4311

Malware in sbrugna...

EUVD-2022-52826

Malicious code in bioql PyPI...

Advisory ROSA-SA-2025-3023

software: kanboard 1.2.47 WASP: ROSA-CHROME unaffected versions = kanboard-1.2.47-0.gitb57deb.4 affected versions kanboard-1.2.47-0.gitb57deb.4 CVE-ID: CVE-2025-52576 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in Kanboard before version 1.2.46 allows existing usernames to be...