Lucene search
+L

111 matches found

Kitploit
Kitploit
•added 2026/10/04 5:56 a.m.•154 views

wpscan

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin INSTALL Prerequisites Optional but highly recommended: rbenv Ruby = 3.3 - Recommended: latest stable Curl = 7.72 - Recommended: latest stable The 7.29 has a segfault The 7.72 could result in...

6AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/10/03 10:23 p.m.•51 views

dymerge

A simple, yet powerful tool - written purely in python - which takes given wordlists and merges them into one dynamic dictionary that can then be used as ammunition for a successful dictionary based or bruteforce attack. Compatible with Python 2.6 & 2.7. Author: Nikolaos Kamarinakis nikolaskama.m...

6.2AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/03 8:59 p.m.•11 views

SocialBox

SocialBox SocialBox es un marco de ataque de fuerza bruta Facebook, Gmail, Instagram, Twitter, codificado por Belahsan Ouerghi Instalación sudo apt-get install git git clone https://github.com/TunisianEagles/SocialBox.git cd SocialBox chmod +x SocialBox.sh chmod +x install-sb.sh ./install-sb.sh...

6.2AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•4 views

CVE-2026-79575: Use of Insufficiently Random Values

The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making the secret key easily obtainable via a bruteforce attack...

7.5CVSS5.8AI score0.00416EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/08 12:00 a.m.•37 views

CVE-2026-79575

The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making the secret key easily obtainable via a bruteforce attack...

0.00416EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 12:00 a.m.•12 views

EUVD-2026-72912

The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making the secret key easily obtainable via a bruteforce attack...

5.7AI score0.00416EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/27 8:16 a.m.•19 views

CVE-2026-65894

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation of this vulnerability could allow an...

8.7CVSS0.00662EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/04 12:00 a.m.•2 views

CVE-2026-36182: Use of Weak Hash

GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack...

9.8CVSS5.8AI score0.00325EPSS
SaveExploits0References2
OSV
OSV
•added 2026/04/09 9:27 p.m.•21 views

CVE-2026-35628 OpenClaw < 2026.3.25 - Brute-Force Attack via Missing Telegram Webhook Rate Limiting

OpenClaw before 2026.3.25 contains a missing rate limiting vulnerability in Telegram webhook authentication that allows attackers to brute-force weak webhook secrets. The vulnerability enables repeated authentication guesses without throttling, permitting attackers to systematically guess webhook...

6.3CVSS6AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/01/09 10:50 a.m.•19 views

CVE-2022-37144

The PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission attempts. An unauthenticated remote attacker in possession of a valid username and password can bruteforce their way past MFA protections to login as the targeted user...

8.8CVSS7.2AI score0.00937EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:49 a.m.•18 views

CVE-2022-37145

The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configured to use the PlexTrac authentication provider. An unauthenticated remote attacker could perform a bruteforce attack on the login page with no time or attempt limitation in an...

7.5CVSS7.2AI score0.01027EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:37 a.m.•17 views

CVE-2024-34914

php-censor v2.1.4 and fixed in v.2.1.5 was discovered to utilize a weak hashing algorithm for its rememberkey value. This allows attackers to bruteforce to bruteforce the rememberkey value to gain access to accounts that have checked "remember me" when logging in...

5.3CVSS7.2AI score0.00283EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/19 6:31 p.m.•14 views

EUVD-2025-204542

AVideo versions 14.3.1 prior to 20.1 contain an unauthenticated remote code execution vulnerability caused by predictable generation of an installation salt using PHP uniqid. The installation timestamp is exposed via a public endpoint, and a derived hash identifier is accessible through...

9.3CVSS8AI score0.0148EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•2 views

CVE-2025-60424: Improper Authentication

A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to bypass authentication via a bruteforce attack...

7.6CVSS5.8AI score0.00715EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-9336

Malware in sbrugna...

9.1CVSS9AI score0.00773EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2019-4367

Malware in sbrugna...

8.8CVSS6.8AI score0.00685EPSS
SaveExploits2References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2023-53407

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00815EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2023-41632

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01449EPSS
SaveExploits2References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-1606

Malicious code in bioql PyPI...

5.3CVSS5.6AI score0.00283EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2022-47354

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00464EPSS
SaveExploits1References1
Rows per page
Query Builder