aws-enumerator

AWS Service Enumeration Disclaimer The tool is in beta stage testing in progress, no destructive API Calls used read only actions . I hope, there will be no issues with the tool. If any issues encountered, please submit the ticket. Description The AWS Enumerator was created for service enumeratio...

Wordpress-XMLRPC-Brute-Force-Exploit

Wordpress XMLRPC System Multicall Brute Force Exploit by 1N3 Last Updated: 20170215 https://crowdshield.com ABOUT: This is an exploit for Wordpress xmlrpc.php System Multicall function affecting the most current version of Wordpress 3.5.1. The exploit works by sending 1,000+ auth attempts per...

BruteX

BruteX ABOUT: Automatically brute force all services running on a target Open ports Usernames Passwords INSTALL: ./install.sh USAGE: brutex target DOCKER: docker build -t brutex . docker run -it brutex target LICENSE: You may modify and re-distribute this software as long as the project name...

ibrute

UPDATE If you are concerned about cloud storage security, please read What if I was a cloud? and leave your feedback please. Thank you. The end of fun, Apple have just patched Here is appleID password bruteforce pOc. It's only p0c, so there is no MultiThreading feature Save-State-On-Exception...

flowise-arbitrary-file-read-getFileFromStorage

Flowise unauthenticated arbitrary file READ getFileFromStorage — proposed NEW CVE A separate vulnerability from CVE-2025-71338 which is the write sink. This is an unauthenticated arbitrary file read in the Flowise document-store loader "rehydrate" path, affected 1.7.1 – 2.2.3 , fixed in 2.2.4...

CVE-2026-94456

Postiz generates security-sensitive credentials using Math.random instead of a cryptographically secure source. The same helper is used for OAuth access tokens, authorization codes, client secrets, organization API keys, and PKCE verifiers, meaning these credentials depend entirely on V8’s...

CVE-2026-94379

The login function in MISP's UsersController.php contained insufficient HTTP method validation for several security-critical code paths. The original code used an allowlist approach, checking only for specific HTTP methods POST and PUT before enforcing bruteforce protection, email one-time-passwo...

Toward an Empirical Probabilistic Risk Manifestation Model of Organizational Cybersecurity in SMEs

In this paper, we present a cross-layer empirical study of organizational cybersecurity risk in Small and medium-sized enterprises SMEs, analyzing 281 validated security findings from 22 real-world SME cybersecurity assessments conducted over two years through a pro bono university cybersecurity...

CVE-2026-73839 Ebyte NE2-D11 Insufficiently Protected Credentials

Administrative credentials may be exposed in plaintext within the Ebyte device's management interface, increasing the risk of credential compromise through visual or remote observation. This undermines the confidentiality of device access...

How to Investigate GitHub PAT Compromise: Lessons From a Multi-Organization Campaign

A practical playbook for investigating GitHub token compromise, drawn from Wiz CIRT's response to a coordinated multi-organization campaign...

CVE-2026-48158

use-context-selector is a React useContextSelector hook in userland Between 2026-05-18 15:57:18 and 2026-05-19 15:24:34, the default branch contained malicious commits 9d8481a513b7b0d1c0941b220c69b25de748641b through 6f2dae054ca014068bdbbb4db96006424d674124 that executed remote attacker-controlle...

PT-2026-69885

Name of the Vulnerable Software and Affected Versions use-reducer-async affected versions not specified Description Malicious commits were introduced into the default branch of the repository, which executed remote attacker-controlled code on developer workstations during the npm install process...

Malicious code in @or-sdk/identifiers (npm)

npm/@or-sdk/identifiers is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished...

CVE-2026-16347

MikroTik RouterOS contains a weakness in its API authentication handling that lacks effective safeguards against excessive login attempts. The system does not enforce meaningful rate-limiting, account lockout, or source-based restrictions, allowing repeated authentication failures to proceed...

SUSE CVE-2026-53632

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the...

NTLM Hash Disclosure

launch-editor library is vulnerable to NTLM hash disclosure. The vulnerability is due to Windows automatically initiating NTLM authentication when a UNC path is opened, which allows an attacker to capture a user's NTLMv2 password hash through a malicious SMB server and potentially compromise...

PT-2026-52691

A vulnerability exists in the netclient and factory services of Reolink Home Hub versions prior to v3.3.0.456 26031911 due to the possibility of brute-force cracking the credentials. This issue could allow attackers on the same local network to intercept traffic between the Hub and associated...

EUVD-2026-38299

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the...

CVE-2026-53632

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the...

CVE-2026-53632: External Control of File Name or Path

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the...