437 matches found
iPwn
iPwn A Framework meant for the exploitation of iOS devices. REMEMBER: THE IPHONE YOU ARE ATTEMPTING TO GET INTO USING THIS TOOL MUST BE JAILBROKEN Status - ❌ This project is still being worked on. I'm adding more extensions and options for post-exploitation for harvesting Device information and...
LabS4U2Self
Lab S4U2Self Abuse Ce laboratoire vise à fournir un environnement sûr pour tester l'exploit S4U2Self abuse Déploiement Le projet déploiera : 1 DC avec un seul domain admin hpotter 1 MSSQL avec un mot de passe sa faible Le déploiement est effectué via terraform et ansible sur AWS ; ces deux...
t14m4t
t14m4t t14m4t هي أداة هجوم تخمين آلي، غلاف لـ THC-Hydra و Nmap Security Scanner. t14m4t تقوم بمسح هدف محدد من قبل المستخدم أو ملف يحتوي على أهداف للبحث عن المنافذ المفتوحة للخدمات التي تدعمها t14m4t ، ثم تبدأ هجوم تخمين ضد الخدمات العاملة على المنافذ المكتشفة، باستخدام قوائم من بيانات الاعتماد...
cve-2025-9933
🔒 بيانات تسجيل الدخول للوحة التحكم اسم المستخدم: admin كلمة المرور: Test@123 اسم المستخدم: [email protected] كلمة المرور: Test@123 أو قم بتسجيل مستخدم جديد. الوصف تم العثور على ثغرة أمنية في PHPGurukul Beauty Parlour Management System الإصدار 1.1. يتعلق هذا المشكلة بوظيفة غير معروفة في الملف...
opac-fast-automation
CVE-2025-65862 — توثيق، تحليل، وأداة أتمتة لأغراض البحث فقط ⚠️ تحذير أخلاقي وقانوني جميع المواد الموجودة في هذا المستودع مقدمة فقط من أجل: البحث الأمني، التعلم، تحليل الثغرات، والاختبار في بيئات مملوكة أو بإذن صريح. القيام بالاستغلال، أو إساءة استخدام الثغرات، أو رفع ملفات ضارة إلى خوادم طرف ثالث...
sunset-noontide-pentesting
Sunset: Noontide — Test d'intrusion Une évaluation professionnelle de test d'intrusion et un walkthrough CTF de Sunset: Noontide , une machine intentionnellement vulnérable de VulnHub. Ce projet documente le cycle complet de test d'intrusion, incluant la reconnaissance, l'énumération des services...
CVE-2026-100299
Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 is vulnerable due to the inclusion of a legacy password hash on the serial console . This hash relies on weak DES-based encryption , which may allow for unauthorized access via physical means. No specific exploit information or remediation steps are...
CVE-2026-100299 Use of Weak Credentials in Anjvision YSSD-RTMP-H5
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based encryption...
CVE-2026-100299 Use of Weak Credentials in Anjvision YSSD-RTMP-H5
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based encryption...
CVE-2026-22094: Use of Weak Credentials
The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network...
CVE-2026-100299: Use of Weak Credentials
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based encryption...
metasploitable-nmap-recon
Metasploitable2 — Nmap Intensive Scan: 6-Port Vulnerability As...
CVE-2026-88761 Botslab G980H Dashcams Use of Weak Credentials
The Botslab G980H dash camera firmware generates the default WiFi password using predictable device information, portions of which are advertised by the product. An unauthenticated attacker within WiFi range could potentially determine the remaining password characters through limited guessing an...
CVE-2026-88761 Botslab G980H Dashcams Use of Weak Credentials
The Botslab G980H dash camera firmware generates the default WiFi password using predictable device information, portions of which are advertised by the product. An unauthenticated attacker within WiFi range could potentially determine the remaining password characters through limited guessing an...
CVE-2026-88761
The Botslab G980H dash camera firmware contains a vulnerability where the default WiFi password is generated using predictable device information . Portions of this information are advertised by the product, potentially allowing an unauthenticated attacker within WiFi range to determine the remai...
CVE-2026-88761: Use of Weak Credentials
The Botslab G980H dash camera firmware generates the default WiFi password using predictable device information, portions of which are advertised by the product. An unauthenticated attacker within WiFi range could potentially determine the remaining password characters through limited guessing an...
Vulnerabilty-Assessment-Detection-Lab
Vulnerability Assessment & Detection Lab End-to-end vulnerabi...
Security Bulletin: Langflow is affected by improper authentication due to missing password verification in the password reset endpoint
Summary Langflow provides a password reset capability through its user management API. The password reset endpoint accepts a current password field in the request body but does not verify it against the stored credential before applying the password change, and enforces no password complexity...
