CVE-2023-23397-POC-Powershell

CVE-2023-23397-POC-Powershell Funciones de script para enviar o guardar fuga NTLM de calendario usando la opción ReminderSoundFile. Ejecute el script para cargar las funciones en Powershell, luego puede usar los ejemplos a continuación como punto de partida para usar las funciones. Requiere...

mikrotik0dayScanner

Mikrotik 0day Scanner di Divulgazione Credenziali Descrizione: La vulnerabilità consente a un attaccante remoto di eseguire codice arbitrario sul sistema di destinazione. La debolezza esiste a causa di un'autenticazione impropria nell'interfaccia Winbox esposta di default sulla porta 8291/TCP. Un...

CVE-2018-9995

Ferramenta mostrar Credenciais DVR root@kitploit: Título do Exploit: "Obtém Credenciais DVR" CVE: CVE-2018-9995 Pontuação Base CVSS v3: 7.3 / 10 Cadeia de Vector CVSS: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Data: 09/04/2018 Autor do Exploit: Fernandez Ezequiel optimizado do CodeHolic Exploi...

PhaseHack

PhaseHack Anmeldeinformationen des Phase-Botnets per Blind-SQL-Injection abrufen...

D-Link DIR-803 - Authentication Bypass

An authentication bypass vulnerability exists in D-Link DIR-803 routers firmware A1 1.04 and earlier. By manipulating the AUTHORIZEDGROUP parameter in /getcfg.php via newline injection, an attacker can retrieve XML configuration containing administrator credentials without authentication. id:...

Kaseya VSA < 9.5.7 - Credential Disclosure via Windows Agent

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...

Crestron Device - Credentials Disclosure

An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, aj.html sends a JSON document with uname...

DVR_Sploit

DVRSploit Script python3 simples para automatizar o CVE-2018-9995 Requisitos: requests pip install requests Uso: root@fuckmachine: python3 dvrsploit.py Digite o host do DVR: 192.168.69.69 Digite a porta do DVR: 88 Lista de dispositivos:...

CVE-2020-15931

CVE-2020-15931 Vulnerabilità di divulgazione delle credenziali dell'account amministratore di dominio in Netwrix Account Lockout Examiner 4.1 Panoramica della vulnerabilità Netwrix Account Lockout Examiner ALE precedente alla versione 5.1 consente a un avversario remoto non autenticato di attivar...

CVE-2026-55860

MariaDB Connector/R2DBC (org.mariadb:r2dbc-mariadb), a non-blocking Java R2DBC client for MariaDB/MySQL, is affected by a cleartext password disclosure vulnerability prior to version 1.4.1. The AuthenticationPlugin interface lacks the ability to require a secure connection, so clear-text password...

CVE-2018-9995_dvr_credentials

Strumento mostra credenziali DVR root@kitploit: Titolo Exploit: "Ottiene le credenziali DVR" CVE: CVE-2018-9995 Punteggio Base CVSS v3: 7.3 / 10 Stringa Vettore CVSS: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Data: 09/04/2018 Autore Exploit: Fernandez Ezequiel twitter:@capitanalfa Exploit:...

MoxaPass

Это пример эксплойта для CVE-2016-9361. Он извлекает SNMP community string и пароль 'admin' для многих видов устройств Moxa. В нём используется проприетарный протокол управления Moxa по UDP/4800. Протокол не имеет защиты, и использование кода функции 'unlock' не требует пароля. Известно, что этот...

CVE-2026-82288

Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradioauth and apiauth values in cleartext. Unauthenticated attackers can access this endpoint to retrieve configured...

CVE-2017-7921

Exploit CVE-2017-7921 Este script permite interagir com uma câmera vulnerável ao CVE-2017-7921 para realizar as seguintes operações: 1. Baixar e descriptografar um arquivo de configuração, contendo a senha do administrador da câmera. 2. Baixar imagens continuamente a cada segundo. 3. Converter um...

EUVD-2026-67819

Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradioauth and apiauth values in cleartext. Unauthenticated attackers can access this endpoint to retrieve configured...

CVE-2026-82288 Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags

Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradioauth and apiauth values in cleartext. Unauthenticated attackers can access this endpoint to retrieve configured...

CVE-2026-82288

Stable Diffusion WebUI through version 1.10.1 is affected by a credential disclosure vulnerability in the /sdapi/v1/cmd-flags API endpoint. The endpoint returns parsed command-line arguments—including gradio_auth and api_auth values—in cleartext, allowing unauthenticated network attackers to retr...

CVE-2018-9995_dvr_credentials

Strumento mostra credenziali DVR root@kitploit: Titolo Exploit: "Gets DVR Credentials" CVE: CVE-2018-9995 Punteggio Base CVSS v3: 7.3 / 10 Stringa del Vettore CVSS: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Data: 09/04/2018 Autore dell'Exploit: Fernandez Ezequiel twitter:@capitanalfa Exploit:...

cve-2026-34472-auth-bypass-zte-h188a-router

CVE-2026-34472 Analisi tecnica di CVE-2026-34472, un bypass dell'autenticazione tramite credenziali divulgate che interessa il firmware ZTE ZXHN H188A V6. Riepilogo Nelle build H188A V6 testate, richieste non autenticate al percorso root possono raggiungere handler della procedura guidata pre-log...

Tool_Exploit_Password_Camera_CVE-2018-9995

ToolExploitPasswordCameraCVE-2018-9995 CVE-2018-9995: https://vulners.com/cve/CVE-2018-9995 1. Cerchiamo i dispositivi vulnerabili su Google con la parola chiave: intitle:"DVR login". 2. Proviamo ad accedere a un dispositivo qualsiasi: Vediamo che il dispositivo richiede l'inserimento di Username...