18 matches found
Instagram-Brute-Force-2024
Instagram-Brute-Force-2024 Instagram Brute Force CPU/GPU Supported 2024 Use option 2 while running the script. Option 1 is on development Chrome should be downloaded in device. Compatible and Tested GUI Supported Operating Systems Only Python 3.13 x64 bit Unix / Linux / Mac / Windows 8.1 and high...
spraygen
Spraygen Password list generator for password spraying - prebaked with goodies Version 1.7 Generates permutations of Months, Seasons, Years, Sports Teams NFL, NBA, MLB, NHL, Sports Scores, "Password", and even Iterable Keyspaces of a specified size. All permutations are generated with common...
PassGAN
PassGAN This repository contains code for the PassGAN: A Deep Learning Approach for Password Guessing paper. The model from PassGAN is taken from Improved Training of Wasserstein GANs and it is assumed that the authors of PassGAN used the improvedwgantraining tensorflow implementation in their...
joombrute
JoomBrute 现代 Joomla 认证攻击工具包 J3 / J4 / J5 - CVE-2023-23752 · CVE-2023-23755 · CVE-2025-25227 描述 Joomla 凭证攻击工具包,覆盖 CMS 版本 3、4 和 5。六个子命令处理完整的端到端攻击链: detect - 版本指纹识别(manifest XML → generator meta → admin 标记) enum - CVE-2023-23752 未认证 API 数据收集:用户名、数据库主机/用户/密码、SMTP 凭证、应用密钥 brute -...
EUVD-2026-62847
Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, Lemmy's login endpoint in crates/api/api/src/localuser/login.rs returns different errors depending on whether the usernameoremail value exists. LocalUserView::findbyemailorname propagates a NotFound respons...
CVE-2026-40263
Note Mark is an open-source note-taking application. In versions 0.19.1 and prior, the login endpoint performs bcrypt password verification only when the supplied username exists, returning immediately for nonexistent usernames. This timing discrepancy allows unauthenticated attackers to enumerat...
EUVD-2026-9045
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability that allows attackers to forge authenticated sessions by computing predictable MD5-based cookies. Attackers who know or guess valid credentials can calculate the session identifie...
EUVD-2021-11047
Malware in sbrugna...
EUVD-2015-1497
Malware in sbrugna...
EUVD-2024-0435
Malicious code in bioql PyPI...
EUVD-2024-0079
Malicious code in bioql PyPI...
IBM Sterling Connect:Express for Microsoft Windows 安全漏洞
IBM Sterling Connect:Express for Microsoft Windows is a secure file transfer gateway software from International Business Machines IBM. A security vulnerability exists in IBM Sterling Connect:Express for Microsoft Windows versions 3.1.0.0 through 3.1.0.22, which stems from an insufficient account...
PT-2025-11206 · Unknown +1 · Sante Pacs Server.Exe +1
Name of the Vulnerable Software and Affected Versions: Sante PACS Server affected versions not specified Description: The issue is related to a stack-based buffer overflow in the OpenSSL function EVP DecryptUpdate, which is called during login to the web server in Sante PACS Server.exe. This...
Elenos ETG150 Security Vulnerability
The Elenos ETG150 is an FM transmitter from Elenos. A security vulnerability exists in the Elenos ETG150 FM Transmitter version v3.12, which stems from a lack of rate limiting and allows an attacker to brute-force user credentials and have other unspecified effects...
Midnight Blizzard conducts targeted social engineering over Microsoft Teams
Microsoft Threat Intelligence has identified highly targeted social engineering attacks using credential theft phishing lures sent as Microsoft Teams chats by the threat actor that Microsoft tracks as Midnight Blizzard previously tracked as NOBELIUM. This latest attack, combined with past activit...
CVE-2019-6964
CVE-2019-6964 involves a heap-based buffer over-read in the function Service_SetParamStringValue of cosa_x_cisco_com_ddns_dml.c within the RDK RDKB-20181217-1 CcspPandM module. The vulnerability arises when processing a DDNS AJAX configuration request containing exactly 64-byte username, password...
Foscam camera lacks multiple login restriction vulnerability
Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. Foscam camera lacks a multiple login restriction vulnerability, which can be exploited by an attacker to perform a strong attack on login credentials since the software...
Visale 1.0 pbpgst.cgi keyval Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17598/info Visale is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...