CVE-2026-65087

NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might lead to information disclosure and data tampering...

EUVD-2026-66105

NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might lead to information disclosure and data tampering...

Outpacket

📦 Outpacket क्या आप impacket से तंग आ चुके हैं? यह चीटशीट सामान्य impacket वर्कफ़्लो को उनके आधुनिक विकल्पों से मैप करती है अनुक्रमणिका प्रमाणीकरण त्वरित संदर्भ 1. रिमोट निष्पादन WMI निष्पादन · wmiexec.py DCOM निष्पादन · dcomexec.py सेवा-आधारित निष्पादन · smbexec.py · psexec.py अनुसूचित कार्य...

CVE-2026-29971

CVE-2026-29971 Um atacante pode executar JavaScript arbitrário no navegador da vítima, potencialmente levando ao sequestro de sessão ou escalação de privilégios. CVE-2026-29971 Vulnerabilidade Cross-Site Scripting Refletido XSS Produto Afetado WebFileSys Versão Afetada 2.31.1 Descrição Existe uma...

teamview

teamview L'esecuzione di TVV2.exe sul target genererà 3 file nella directory corrente Quindi eseguire il file gps.exe generato: successivamente verrà generato vtr.txt contenente ID e pass Per la connessione, utilizzare Windows Server e poi installare il file TeamViewerSetup.exe contenuto...

CVE-2025-65899

CVE-2025-65899: Kalmia CMS v0.2.0 - é vulnerável a Discrepância de Resposta Observável Visão Geral da Vulnerabilidade ID do CVE: CVE-2025-65899 Produto: DifuseHQ Kalmia CMS Versão Afetada: 0.2.0 Tipo de Vulnerabilidade: Discrepância de Resposta Observável Privilégios Necessários: Nenhum Impacto...

keyguard

keyguard Scansiona codebase, progetti GCP e pipeline CI per credenziali API di Google esposte — prima che vengano sfruttate. Il problema: Google ha abilitato retroattivamente l'accesso all'API Gemini su chiavi API esistenti Maps, Places, ecc. progettate per essere pubbliche e incorporate nel codi...

CVE-2018-9995-ModifiedByGwolfs

वक्तव्य यह टूल gwolfs द्वारा लिखे गए CVE-2018-9995 का बेहतर संस्करण है, और केवल सीखने के उपयोग के लिए है। अवैध उद्देश्यों के लिए उपयोग न करें, इससे उत्पन्न होने वाले सभी परिणाम आपके अपने हैं। मूल संस्करण ezelf द्वारा लिखा गया है और https://github.com/ezelf/CVE-2018-9995dvrcredentials पर है। ezelf...

SecureOps-Lab

SecureOps Lab - Live-Cybersicherheitsbewertung Übersicht Es wurde eine Live-Cybersicherheitsbewertung auf einem Linux-Server einer Universität durchgeführt. Während der Analyse wurden aktive Angriffsaktivitäten identifiziert, darunter Brute-Force-Authentifizierungsversuche und Exploit-Versuche...

spraygen

Spraygen पासवर्ड स्प्रेइंग के लिए पासवर्ड सूची जनरेटर - अच्छाइयों से पहले से तैयार संस्करण 1.7 महीनों, ऋतुओं, वर्षों, खेल टीमों NFL, NBA, MLB, NHL, खेल स्कोर, "पासवर्ड" और एक निर्दिष्ट आकार के पुनरावृत्त कीस्पेस के क्रमपरिवर्तन उत्पन्न करता है। सभी क्रमपरिवर्तन सामान्य विशेषताओं के साथ उत्पन्न हो...

CVE-2026-55553

urllib is an HTTP client for Node.js that supports authentication, redirects, timeouts, and other request features. Prior to 4.9.1 and 2.44.1, urllib follows redirects through followRedirect but reuses caller-supplied options across origins. In src/HttpClient.ts, requestInternal recursively calls...

iDictPy

iDictPy Uno script python con status hacker verificato al 100% e parecchio incazzoso per trasformare gli apple id in apple crisp nicememe Inizialmente l'ho creato come alternativa migliore a questo pezzo di merda: https://github.com/Pr0x13/iDict/ ma poi mi sono dimenticato di essere un po' ubriac...

RunAs-Stealer

RunAs-Stealer Stealer de credenciais do utilitário RunAs que implementa 3 técnicas: Hooking de CreateProcessWithLogonW, Keylogging Inteligente, Depuração Remota Uso Os stealers são executados em um loop while o injetor também no caso de Hooking em segundo plano. Para encerrá-los, use o Gerenciado...

NativeBypassCredGuard

NativeBypassCredGuard NativeBypassCredGuard هي أداة مصممة لتجاوز Credential Guard عن طريق تصحيح patching WDigest.dll باستخدام دوال NTAPI فقط التي يصدرها ntdll.dll. وهي متوفرة بنسختين: C وC++. تحدد الأداة النمط "39 ?? ?? ?? ?? 00 8b ?? ?? ?? ?? 00" في ملف WDigest.dll الموجود على القرص كما هو موضح ...

urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage

Summary urllib supports redirect-following through followRedirect, which is expected behavior for an HTTP client. The issue is that, when following a redirect to a different origin, urllib preserves the caller-supplied request headers verbatim, including credential-bearing headers such as...

CVE-2026-55553 urllib: Cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage

urllib is an HTTP client for Node.js that supports authentication, redirects, timeouts, and other request features. Prior to 4.9.1 and 2.44.1, urllib follows redirects through followRedirect but reuses caller-supplied options across origins. In src/HttpClient.ts, requestInternal recursively calls...

EUVD-2026-65613

urllib is an HTTP client for Node.js that supports authentication, redirects, timeouts, and other request features. Prior to 4.9.1 and 2.44.1, urllib follows redirects through followRedirect but reuses caller-supplied options across origins. In src/HttpClient.ts, requestInternal recursively calls...

CVE-2026-55553

urllib is an HTTP client for Node.js. Prior to versions 2.44.1 and 4.9.1 , its redirect-following logic in src/HttpClient.ts reuses caller-supplied options across origin boundaries. When #requestInternal recursively processes a redirect to a different scheme, host, or port, headers such as Author...

CVE-2026-55553 urllib: Cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage

urllib is an HTTP client for Node.js that supports authentication, redirects, timeouts, and other request features. Prior to 4.9.1 and 2.44.1, urllib follows redirects through followRedirect but reuses caller-supplied options across origins. In src/HttpClient.ts, requestInternal recursively calls...

CVE-2026-79776

rclone before 1.75.0 mounts the pprof debug handler as its own router route, bypassing the fail-closed authentication rule in the main handler. Attackers can access the /debug/pprof/cmdline endpoint unauthenticated to retrieve the full process argv including backend credentials...