cisco7crack

cisco7crack crypt and decrypt the cisco enable 7 passwords...

CVE-2024-53691

CVE-2024-53691 https://www.qnap.com/en/security-advisory/qsa-24-28 https://vulners.com/cve/CVE-2024-53691 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 8.7 "If exploited, the link following vulnerability could allow remote attackers who have gained user access to traverse the fi...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

CVE-2026-124679

Authentication bypass by spoofing vulnerability in Apache APISIX. On routes using jwe-decrypt with strict: false and a forwardheader distinct from the token header an unauthenticated client can supply the value the upstream treats as gateway-decrypted plaintext. Similar can happen when forward-au...

CVE-2026-124679 Apache APISIX: jwe-decrypt and forward-auth may pass a client-supplied identity header

Authentication bypass by spoofing vulnerability in Apache APISIX. On routes using jwe-decrypt with strict: false and a forwardheader distinct from the token header an unauthenticated client can supply the value the upstream treats as gateway-decrypted plaintext. Similar can happen when forward-au...

EUVD-2026-125682

Authentication bypass by spoofing vulnerability in Apache APISIX. On routes using jwe-decrypt with strict: false and a forwardheader distinct from the token header an unauthenticated client can supply the value the upstream treats as gateway-decrypted plaintext. Similar can happen when forward-au...

CVE-2026-124679

Apache APISIX versions 3.18.0 through 3.19.0 are vulnerable to an authentication bypass by spoofing vulnerability. The root cause occurs when routes use jwe-decrypt with strict: false and a forward_header distinct from the token header, allowing unauthenticated clients to supply values treated as...

CVE-2017-13253

CVE-2017-13253 PoC code for CVE-2017-13253. The full write-up is available here. Note that the numbers are a little bit different from the blog post, as I've found that there's a higher chance for a crash with a heap of 0x2000 of course if you run it enough times it should crash anyway. For...

cypher

🌹 CYPHER TOOLS 🌹 Written by TMRSWRR Version 1.0.0 All in one tools for CRYPTOLOGY. Instagram: Capture the Root 🖼️ Screenshots 🖼️ 📹 How to use 📹 Click on the image... 🧰 Features 🧰 This tool include: 📍 HASH 📍 RSA 📍 XOR 📍 AES ECC 📍 AES CBC 📍 DES ECB 📍 FERNET 📍 RC2 📍 RC4 📍 CHACHA20POLY1305 📍...

tp-link-decrypt

NOTE as of 5 October 2025 this project is now depreciated. Nate Robbins has kindly taken over and added switch decryption - https://github.com/robbins/tp-link-decrypt ====================================================================================================== If you found this tool...

Exploit-CVE-2026-1357

Install dependencies pip3 install pycryptodome requests Basic exploit python3 wpvivi.py http://target.com Custom webshell python3 wpvivi.py http://target.com --shell backdoor.php python3 wpvivi.py http://target.com --code "" Technical explanation: Null Byte Key: When RSA decryption fails, it...

Lab-for-cve-2018-15133

Summary: MExploiting CVE-2018-15133 Deserialization Vulnerability This exploit takes advantage of a deserialization vulnerability in the Laravel Framework through 5.5.40 and 5.6.x through 5.6.29. Description Remote code execution might occur as a result of an unserialize call on a potentially...

CVE-2026-39324

CVE-2026-39324 Exploit PoC Rack::Session::Cookie decrypt failure falls back to accepting unencrypted cookies | ---|--- Advisory| GHSA-33qg-7wpp-89cq Package| rack-session RubyGems Affected| = 2.1.1 Patched| 2.1.2 Summary Rack::Session::Cookie with secrets: should only accept encrypted cookies. Bu...

CVE-2026-67541

Prior to version 0.0.70 , Heym (an agentic systems and business-process automation platform) contained a logic flaw where team-member management (add, remove, update) was gated only on team membership rather than requiring a team creator or admin role. Because the TeamMember object lacks a role c...

CVE-2026-67541 Heym: Missing role gate in team-member management lets any member add/remove members, exposing team-shared credentials

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, team-member management add / remove / update is gated only on team membership, not on the team creator/admin role — and TeamMember has no role column. Any non-creator memb...

CVE-2026-67541 Heym: Missing role gate in team-member management lets any member add/remove members, exposing team-shared credentials

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, team-member management add / remove / update is gated only on team membership, not on the team creator/admin role — and TeamMember has no role column. Any non-creator memb...

CVE-2026-67541

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, team-member management add / remove / update is gated only on team membership, not on the team creator/admin role — and TeamMember has no role column. Any non-creator memb...

CVE-2026-49230-APISIX-jwe-decrypt-Auth-Bypass

CVE-2026-49230 — Apache APISIX jwe-decrypt Authentication Bypass Proof of concept for an authentication bypass in the Apache APISIX jwe-decrypt plugin. The plugin decrypts a JWE token and forwards its plaintext to the upstream, acting as an authentication gate — but it never validates the AES-GCM...

CVE-2026-124604

The GV-Cloud Android application (specifically version v1.5.1 ) contains a vulnerability where RSA cryptographic key material , including both private and public keys, is embedded within the application package. Because Android applications can be extracted and reverse engineered, an attacker may...

PT-2026-141227

Ettercap through 0.8.4.1 contains an integer underflow in ccmp decrypt in src/ec encryption ccmp.c that subtracts the 8-byte CCMP trailer without checking minimum length. Attackers on a network whose WPA key is loaded can send a short crafted CCMP frame to overflow a stack buffer in the Ettercap...