2832 matches found
CVE-2021-45232
CVE-2021-45232 CVE-2021-45232 POC 1ใApache APISIX Dashboard unauthorized access vulnerability CVE-2021-45232 scan 2ใApache APISIX Dashboard default password scan...
seccubus
About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...
Linux-Kodachi
Kodachi OS A hardened, privacy-focused Linux distribution built on Debian. Failover VPN, Tor routing, DNSCrypt, a kill switch and anti-forensic tooling, pre-wired and working from first boot. !IMPORTANT Kodachi 10 is stable. Kodachi 10.0.3, code name Dragon, was released on 27.09.2026. It is the...
gophish
Gophish Gophish: Open-Source Phishing Toolkit Gophish is an open-source phishing toolkit designed for businesses and penetration testers. It provides the ability to quickly and easily setup and execute phishing engagements and security awareness training. Install Installation of Gophish is...
CVE-2015-7755-POC
CVE-2015-7755-POC CVE-2015-7755 vulnerability detection using ssh to connect those vulnerable version: ScreenOS 6.2.0r15โ6.2.0r18๏ผ6.3.0r12โ6.3.0r20 Juniper Networks user: root passwd: %sun='%s' = %u...
Brother Printers โ Authentication Bypass via Default Admin Password
By leaking a target device's serial number, a remote attacker can generate the target device's default administrator password. The target device may leak its serial number via unauthenticated HTTP, HTTPS, IPP, SNMP, or PJL requests. id: CVE-2024-51978 info: name: Brother Printers โ Authentication...
Jfrog Artifactory <6.17.0 - Default Admin Password
Jfrog Artifactory prior to 6.17.0 uses default passwords such as "password" for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. id: CVE-2019-17444 info: name: Jfrog Artifactory...
EUVD-2026-104015
A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmCorePlugin/lib/data/dmDataLoad.php. Performing a manipulation results in use of default password. The attack is possible to be carried out remotely. The exploit has been made public a...
CVE-2026-112030
A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmCorePlugin/lib/data/dmDataLoad.php. Performing a manipulation results in use of default password. The attack is possible to be carried out remotely. The exploit has been made public a...
CVE-2026-112030
The diem-project diem software, up to version 5.1.3 , contains a vulnerability in the dmCorePlugin/lib/data/dmDataLoad.php file. An attacker can perform a remote manipulation that results in the use of default passwords (CWE-1393 ). While the project has not yet responded to the initial report, i...
ActiveMQ_Crack
ActiveMQCrack Overview ActiveMQ series vulnerability detection and exploitation tool, including ActiveMQ default password vulnerability and ActiveMQ arbitrary file write vulnerability CVE-2016-3088, supports batch detection and exploitation. Usage Batch detection: Write the URLs to be detected li...
SecurityNotFound
404 Page Not Found Webshell ๐ผ Clone me! Clone or download the project: git clone --depth=1 https://github.com/CosasDePuma/SecurityNotFound.git ๐ฆ "Installation" The src/404.php file should be located on the target server and it must have the ability to execute .php files. Here is an example of som...
CVE-2022-1388-EXP
CVE-2022-1388-EXP This is CVE-2022-1388-EXP Author:Caps@BUGFOR Github:https://github.com/bytecaps Remaker:LinJacck Github:https://github.com/LinJacck Feature Display Verification mode: python CVE20221388.py -v -u targeturl Attack mode: python CVE20221388.py -a -u targeturl -c command Batch...
xbootEncodePwd
xbootEncodePwd xboot-activiti-1.0-SNAPSHOT xboot-cms-1.0-SNAPSHOT xboot-generator-1.0-SNAPSHOT xboot-app-1.0-SNAPSHOT xboot-core-1.0-SNAPSHOT xboot-open-1.0-SNAPSHOT xboot-autochat-1.0-SNAPSHOT xboot-docking-1.0-SNAPSHOT xboot-quartz-1.0-SNAPSHOT xboot-base-1.0-SNAPSHOT xboot-ems-1.0-SNAPSHOT...
Netsweeper 4.0.5 - Default Weak Account
The Web Panel in Netsweeper before 4.0.5 has a default password of 'branding' for the branding account, which makes it easier for remote attackers to obtain access via a request to webadmin/. id: CVE-2014-9614 info: name: Netsweeper 4.0.5 - Default Weak Account author: daffainfo severity: critica...
CVE-2026-85488
Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privilege escalation on affected Open Virtual Appliance OVA...
CVE-2026-85488
Brocade ASCG versions prior to 3.5.0 are susceptible to a hardcoded credential exposure. A well-known Brocade default password is embedded within a script distributed to every customer. A local authenticated user with read access to the installation path can discover these credentials. If default...
PT-2026-107857
Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privilege escalation on affected Open Virtual Appliance OVA...
EUVD-2026-94455
Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an admin account with the password sipcapture stored as a legacy SHA-256 hex hash. There is no first-login...
Security Bulletin: Security Vulnerability in IBM WebSphere Application Server - Liberty affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-14917)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to IBM WebSphere Application Server - Liberty Vulnerability Details CVEID:CVE-2025-14917 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application...