405 matches found
Pwdlyser
Pwdlyser New repo for Public release Pwdlyser P assw ord -Analyser is a multi-functional analysis tool created to provide security professionals and organisations aiming to improve their security posture with the ability to easily review and analyse passwords from Active Directory domain accounts...
autocrack
AUTOCRACK.py This python script is a Hashcat https://hashcat.net wrapper to help automate the cracking process. The script includes multiple functions to select a set of wordlists and rules, as well as the ability to run a bruteforce attack, with custom masks, before the wordlist/rule attacks...
Chef Automate < 4.13.295 — SQL Injection
In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token. id: CVE-2025-8868 info...
CVE-2021-21973-Automateme
CVE-2021-21973-Automateme automate me!...
CVE-2022-30190
CVE-2022-30190 Mitigation for CVE-2022-30190 Script requires to be run as Adminstrator. This script has been tested with Connectwise Automate RMM tool for deployment. I found this solution cleaner than backup up and deleting anything from the registry, as this can simply update the DWORD key valu...
CVE-2026-104742
The AI Puffer – Chat. Create. Automate. formerly AI Power plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
CVE-2026-104741
The AI Puffer – Chat. Create. Automate. formerly AI Power plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
EUVD-2026-96091
The AI Puffer – Chat. Create. Automate. formerly AI Power plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
EUVD-2026-96089
The AI Puffer – Chat. Create. Automate. formerly AI Power plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
connectwise-automate-AiTM-rce
ConnectWise Automate Adversary-in-the-Middle Remote Code Execution Table of Contents Background Timeline Thoughts and Learnings Responsible Disclosure PoC Code Report Provided to ConnectWise Summary Vulnerable Configuration Impact Technical Details 1. HTTP Transport 2. Insufficient Protocol...
Microsoft Power Automate for Desktop < 2.71.115.26224 Elevation of Privilege (September 2026)
The version of Microsoft Power Automate for desktop installed on the remote Windows host is prior to 2.71.115.26224. It is, therefore, affected by an elevation of privilege vulnerability. Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally. Note...
CVE-2026-80462
A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions...
CVE-2026-80462 Privilege Escalation in Progress Chef Automate
A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions...
CVE-2026-80462
Progress Chef Automate is affected by a privilege escalation vulnerability in its API gateway and identity validation path , allowing an unauthenticated network actor to gain elevated access to protected functionality under specific conditions. The vulnerability is rated CVSS 3.1 10.0 (Critical) ...
EUVD-2026-76099
A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions...
CVE-2026-80462 Privilege Escalation in Progress Chef Automate
A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions...
PT-2026-89866
👨🍳 Progress Chef Automate: CVSS 10 critical. CVE-2026-80462 lets unauthenticated actors escalate privileges via the API gateway identity validation path under specific conditions. Patch immediately. cybersecurity ciso vulnerabilities mssp https://t.co/oK7C8H5CtZ https://t.co/JFDGm3roK7...
CVE-2026-80462: Missing Authentication for Critical Function
A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions...
Vulnerabilities in Microsoft Dynamics
Microsoft has patched 2 vulnerabilities in Dynamics, both for online and on-premise environments. These vulnerabilities allow malicious actors to gain elevated privileges, execute arbitrary code, and/or access sensitive data. Microsoft Dynamics 365: | CVE-ID | CVSS | Impact |...