2779 matches found
Pyrit
Por favor, lea Pyrit es antiguo, estΓ‘ desactualizado y sigue siendo Python2. Actualmente estoy intentando reescribirlo desde cero, asΓ que gracias por todas las estrellas, pero recuerden estar atentos a la versiΓ³n de Python3. Pyrit Pyrit permite crear grandes bases de datos de la fase de...
CVE-2021-29156
CVE-2021-29156 Prueba de Concepto c 2021 GuidePoint Security Charlton Trezevant [email protected] Antecedentes Hoy GuidePoint se complace en publicar una herramienta funcional de Prueba de Concepto para CVE-2021-29156, una vulnerabilidad de inyecciΓ³n LDAP en ForgeRock OpenAM v13.0.0. Esta...
grafana-bruteforce
grafana-bruteforce Una herramienta que toma una lista combinada de nombres de usuario y contraseΓ±as e intenta realizar fuerza bruta en la pΓ‘gina de inicio de sesiΓ³n de Grafana. Grafana te bloquearΓ‘ despuΓ©s de 5 intentos, por lo que debes asegurarte de que tu proxy tenga mΓΊltiples IP externas. CΓ³m...
CVE-2026-36959
CVE-2026-36959: Falta de LimitaciΓ³n de Velocidad en el Endpoint de Inicio de SesiΓ³n ID CVE: CVE-2026-36959 Fecha: 2026-04-29 Descubridor: Kirubel Solomne Proveedor: U-SPEED Producto: Router U-SPEED VersiΓ³n de Firmware: V1.0.0 CWE: CWE-307 - RestricciΓ³n Inadecuada de Intentos de AutenticaciΓ³n...
CVE-2024-11318
CVE-2024-11318 IDOR - AbsysNet 2.3.1 Secuestro de Usuario AVISO LEGAL Esta herramienta estΓ‘ diseΓ±ada para ayudar a identificar y explotar si una aplicaciΓ³n es vulnerable a este CVE-2024-11318 en particular. EstΓ‘ destinada a ser utilizada por profesionales de ciberseguridad, investigadores y teste...
CVE-2026-86729
WWBN AVideo through commit e01e41ecc (no patched version available) exposes get_api_preauthorize in plugin/API/API.php as an undocumented login path. Unlike get_api_signIn , which enforces a rate limit of 10 attempts per 5 minutes via checkRateLimit(), this endpoint performs the same credential c...
EUVD-2026-72008
WWBN AVideo generates passwords for external-login accounts using rand instead of a cryptographic generator, producing only 31-bit integers. Attackers with access to password hashes can recover plaintext passwords in minutes through offline brute-force attacks due to unsalted MD5-based hashing...
CVE-2026-86187
WWBN AVideo is vulnerable to password recovery via weak PRNG in its external-login account creation process. Passwords are generated using rand() rather than a cryptographically secure generator, yielding only 31-bit integers that are further weakened by unsalted MD5 hashing. An attacker with acc...
CVE-2026-82644
WWBN AVideo current e01e41ecc and earlier contains a brute-force rate limiting bypass in enforceRateLimit, which protects login.json.php and 13 other endpoints. The function stores its attempt counter via a cache layer ObjectYPT::setCacheGlobal that silently discards writes for any client...
EUVD-2026-68230
WWBN AVideo current e01e41ecc and earlier contains a brute-force rate limiting bypass in enforceRateLimit, which protects login.json.php and 13 other endpoints. The function stores its attempt counter via a cache layer ObjectYPT::setCacheGlobal that silently discards writes for any client...
CVE-2026-81697
The openssl-encrypt PyPI package (versions β€ 1.4.8) contains a CWD-relative configuration file resolution flaw in crypt_settings.py, where CONFIG_FILEβoriginally set to the absolute per-user path ~/.crypt_settings.jsonβis reassigned at line 84 to the bare relative name crypt_settings.json. The le...
EUVD-2026-67053
opensslencrypt pip package openssl-encrypt versions = 1.4.8 contain a CWD-relative configuration file resolution flaw in cryptsettings.py, where CONFIGFILE originally the absolute per-user path /.cryptsettings.json is reassigned at line 84 to the bare relative name 'cryptsettings.json'. As a...
Astra Linux β Vulnerability in Chromium
A cryptographic flaw in PDFium in Google Chrome prior to version 147.0.7727.55 allowed an attacker to read potentially sensitive information from encrypted PDFs through a brute-force attack. Chromium security severity: Medium...
Linux Distros Unpatched Vulnerability : CVE-2026-1199
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent...
CVE-2024-6832
The account locking mechanism fails to trigger when secondary user stores are inaccessible. The software does not maintain a consistent state for account locking if it cannot reach all configured user stores, allowing an attacker to repeatedly attempt authentication with invalid credentials witho...
CVE-2024-6832
CVE-2024-6832 describes an account locking failure in multiple WSO2 products where the lockout is not triggered if secondary user stores are inaccessible. The root cause is that the system does not maintain a consistent lockout state across all configured stores, enabling an attacker to perform r...
CVE-2026-38447
osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with predictable inputs such as the current timestamp and client IP address, significantly reduces entropy. An attacker can approximate the key generation time and brute-force the ke...
Inadequate Encryption Strength
Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength in the BcKeyStoreSpi.engineLoad method, which for legacy BKS keystore versions 0 and 1 passes hMac.getMacSize 20 bytes for SHA-1 to generateDerivedMacParameters, where PKCS12ParametersGenerator divides it ...
PT-2026-66447
The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks...
CVE-2026-65894 Improper Authentication Vulnerability in CP PLUS EZ-P21 IP Camera
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation of this vulnerability could allow an...