Tool_Exploit_Password_Camera_CVE-2018-9995

ToolExploitPasswordCameraCVE-2018-9995 CVE-2018-9995: https://vulners.com/cve/CVE-2018-9995 1. Search for vulnerable devices on Google with the keyword: intitle:"DVR login". 2. Try to access any device: We see the device requires a Username and Password to access. 3. Check if we can retrieve the...

CVE-2013-1081

This script takes advantage of a local file inclusion lfi tht exists in the Novell zenworks mobile device management. Metasploit Modules - msf use auxiliary/scanner/http/novellmdmcreds msf auxiliarynovellmdmcreds show options Module options auxiliary/scanner/http/novellmdmcreds: Name Current...

CVE-2018-10933

Recreate & improve scenario of CVE-2018-10933 Explaination This is educational purpose for CVE-2018-10933, which is libSSH bypass authentication! libssh versions 0.6 and above have an authentication bypass vulnerability in the server code. By presenting the server an SSH2MSGUSERAUTHSUCCESS messag...

CVE-2018-17240_exploit

CVE-2018-17240exploit Bash exploit for the CVE-2018-17240 Netwave Cameras Memory Leak Run this exploit on a vulnerable Netwave Camera in order to dump the camera's network configuration and credentials. The credentials "Possible Username" and "Possible Password" can be used to login onto the web...

CVE-2026-11960

The software FacturaScripts version 2025.61 contains vulnerabilities that allow for the enumeration of unauthenticated users . The application provides inconsistent responses—such as varying HTTP status codes , error messages , or response times —when processing login attempts with valid versus i...

CVE-2026-11960 Multiple vulnerabilities in FacturaScripts

Enumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns different responses when attempting to log in with a valid username compared to an invalid one. An unauthenticated attacker could systematically identify valid usernames by examining variations in the...

CVE-2024-4573-Mitigation-Script

CVE-2024-4573-Mitigation-Script CVE-2024-43451 is a vulnerability in systems that allow NTLM authentication, a legacy protocol that can be exploited for credential relay attacks or brute force attacks. This vulnerability arises when NTLM is enabled, leaving systems susceptible to unauthorized...

CVE-2021-46366

CVE-2021-46366: Credential Bruteforce Attack via CSRF + Open Redirect in Magnolia CMS An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery CSRF in order to brute force and exfiltrate users'...

keycloak-cve-2026-18963-hunt

CVE-2026-18963: Keycloak account takeover, exploitation trace hunt A psql script that searches a Keycloak PostgreSQL database for traces of CVE-2026-18963 exploitation unauthenticated account takeover through the reset-credentials flow. Published by KYOS. We wrote it while patching the Keycloak...

CVE-2025-23040

CVE-2025-23040 - Credential Leak in GitHub Desktop GitHub Desktop 3.4.12 is vulnerable to an attack that allows exfiltration of credentials via malicious remote URLs. An attacker can convince a user to clone a manipulated repository to obtain username and OAuth token...

CVE-2024-41290

CVE-2024-41290 FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data Additional Information: FlatPress CMS version 1.3.1 insecurely stores authentication-related data, including usernames and hashed passwords, directly in client-side cookies. This practice...

CVE-2026-109444

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shellrun commands without confirmation because the headless presenter's executionallowed always returns True. Attackers can inject instructions into alerts or Slack messages triaged by t...

CVE-2026-109444 OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shellrun commands without confirmation because the headless presenter's executionallowed always returns True. Attackers can inject instructions into alerts or Slack messages triaged by t...

CVE-2026-109444 OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shellrun commands without confirmation because the headless presenter's executionallowed always returns True. Attackers can inject instructions into alerts or Slack messages triaged by t...

EUVD-2026-104684

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shellrun commands without confirmation because the headless presenter's executionallowed always returns True. Attackers can inject instructions into alerts or Slack messages triaged by t...

CVE-2026-109444

Versions of OpenSRE through 0.1.2026.10.19 are vulnerable to an approval gate bypass caused by the headless presenter's execution_allowed() function consistently returning True. This flaw allows attackers to bypass confirmation requirements for shell_run commands. By injecting instructions into a...

CVE-2026-109444 OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shellrun commands without confirmation because the headless presenter's executionallowed always returns True. Attackers can inject instructions into alerts or Slack messages triaged by t...

sickrageWTF

Sickrage cleartext github credentials CVE-2018-9160 1. About Exploit Title: SickRage Clear-Text Credentials in HTTP Response Date: 2018-04-01 Exploit Author: Sven Fassbender Contact: https://twitter.com/mezdanak Vendor Homepage: https://sickrage.github.io Software Link:...

Linux Distros Unpatched Vulnerability : CVE-2026-113496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cockpit-machines. When saving Virtual Network Computing VNC console settings, the configured password is passed directly as a command-line...

Linux Distros Unpatched Vulnerability : CVE-2026-111755

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.1, escapeRegex leaves valid header-name...