Rockstar Games: Brute Force against VMware Horizon

In this report, the researcher discovered a VMWare Horizon admin remote access login portal that was publicly accessible and not sufficiently protected against credential stuffing/brute force attacks. No user accounts were breached; all employees are required to use MFA to login through such...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 PoC Introdução Este é um exploit para o CV...

in kestasjk/webdiplomacy

✍️ Description According to previous explanation about weak cryptographic tokens, you also send the same weak token to users that forgot their passwords. here an attacker can also do Bruteforce attacks to take control of users accounts. 🕵️‍♂️ Proof of Concept...

None in firefly-iii/firefly-iii

Improper Restriction of Excessive Authentication Attempts. The software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more susceptible to brute force attacks. STEPS FOR REPRODUCTION: 1Go to...

CVE-2020-23283

Information disclosure in Logon Page in MV's mConnect application v02.001.00 allows an attacker to know valid users from the application's database via brute force...

CVE-2020-23283

Information disclosure in Logon Page in MV's mConnect application v02.001.00 allows an attacker to know valid users from the application's database via brute force...

Information disclosure

Information disclosure in Logon Page in MV's mConnect application v02.001.00 allows an attacker to know valid users from the application's database via brute force...

CVE-2020-23283

Information disclosure in Logon Page in MV's mConnect application v02.001.00 allows an attacker to know valid users from the application's database via brute force...

CVE-2020-23283

CVE-2020-23283 affects MV mConnect application v02.001.00 and enables information disclosure on the login page, allowing an attacker to determine valid users from the application’s database via brute force. Red Hat and other connected records corroborate the logon-page information disclosure; CNN...

MV mConnect application SQL注入漏洞

MV mConnect application is a software application. A SQL injection vulnerability exists in the MV mConnect application, which can be exploited to brute-force obtain user information due to a failure to restrict user actions on the product's login page. The following products and versions are...

MV mConnect application SQL注入漏洞

MV mConnect application is a software application. A SQL injection vulnerability exists in the MV mConnect application, which can be exploited to brute-force obtain user information due to a failure to restrict user actions on the product's login page. The following products and versions are...

Dolibarr ERP/CRM 10.0.6 Login Brute Forcer

Exploit Title: Dolibarr ERP/CRM 10.0.6 - Login Brute Force Date:2020-01-18 Exploit Author: Creamy Chicken Soup Vendor Homepage: https://www.dolibarr.org Software Link: https://sourceforge.net/projects/dolibarr/ Version: 10.0.6 Tested on: Windows 10 - 64bit CVE: CVE-2020-7995 function...

Dolibarr ERP/CRM 10.0.6 - Login Brute Force Exploit

Exploit Title: Dolibarr ERP/CRM 10.0.6 - Login Brute Force Exploit Author: Creamy Chicken Soup Vendor Homepage: https://www.dolibarr.org Software Link: https://sourceforge.net/projects/dolibarr/ Version: 10.0.6 Tested on: Windows 10 - 64bit CVE: CVE-2020-7995 function brute$url,$username,$passwd...

Dolibarr ERP/CRM 10.0.6 - Login Brute Force

Exploit Title: Dolibarr ERP/CRM 10.0.6 - Login Brute Force Date:2020-01-18 Exploit Author: Creamy Chicken Soup Vendor Homepage: https://www.dolibarr.org Software Link: https://sourceforge.net/projects/dolibarr/ Version: 10.0.6 Tested on: Windows 10 - 64bit CVE: CVE-2020-7995 function...

pikachu

It is an offensive tool for web application security training. The primary CVE ID is not explicitly mentioned, but the tool is designed to simulate various web application vulnerabilities, including Burt Force 暴力破解漏洞, XSS 跨站脚本漏洞, CSRF 跨站请求伪造, SQL-Inject SQL注入漏洞, RCE 远程命令/代码执行, Files Inclusion...

Nextcloud: Missing brute force protection on OAuth2 API controller

Vulnerability description not provided...

CVE-2021-20414

IBM Guardium Data Encryption GDE 3.0.0.2 could allow a user to bruce force sensitive information due to not properly limiting the number of interactions. IBM X-Force ID: 196216...

CVE-2021-20414

IBM Guardium Data Encryption GDE 3.0.0.2 could allow a user to bruce force sensitive information due to not properly limiting the number of interactions. IBM X-Force ID: 196216...

Design/Logic Flaw

IBM Guardium Data Encryption GDE 3.0.0.2 could allow a user to bruce force sensitive information due to not properly limiting the number of interactions. IBM X-Force ID: 196216...

CVE-2021-20414

CVE-2021-20414 affects IBM Guardium Data Encryption (GDE) 3.0.0.2. The vulnerability allows a user to brute-force sensitive information due to not properly limiting the number of interactions. IBM’s security bulletin fixes this by upgrading to GDE 5.0.0.x (fixes are listed in the bulletin). No ex...