CVE-2015-7755-POC

CVE-2015-7755-POC CVE-2015-7755 脆弱性検出 ssh を使用して脆弱なバージョンに接続: ScreenOS 6.2.0r15—6.2.0r18，6.3.0r12—6.3.0r20 Juniper Networks ユーザー: root パスワード: %sun='%s' = %u...

Linux-Kodachi

概览 登录凭据（终端服务器与桌面 XFCE） | 用户名：kodachi | 密码：Security4All Kodachi 9 功能齐全 Kodachi 9 开发已完成，平台已全面可用。 每个组件——独立二进制文件、终端服务器版、桌面版（Debian XFCE）、AI 功能以及完整的云平台——均已构建、部署并可用于生产环境。 Kodachi 9 版本发布 最新动态 近期平台更新： Linux Kodachi 9 技术白皮书 - 全新发布！一份经过代码验证的全面解析，涵盖架构、Rust 服务、路由、加固、VPS 集群、签名链（RSA-4096 +...

ActiveMQ_Crack

ActiveMQCrack 概述 ActiveMQ系列漏洞探测利用工具，包括ActiveMQ 默认口令漏洞及ActiveMQ任意文件写入漏洞（CVE-2016-3088），支持批量探测利用。 使用方法 批量探测：文件中逐行写入需要检测的URL，参数-TF 指定文件 -t 并发数量 单个目标探测：-T http://x.x.x.x 执行效果 玉兔安全致力于web安全、红蓝对抗、内网渗透、免杀技巧、安全工具系列干货分享。更多安全工具分享，欢迎关注玉兔安全公众号！...

SecurityNotFound

404 ページが見つからないウェブシェル 📼 クローンしよう！ プロジェクトをクローンまたはダウンロード： root@kitploit: git clone --depth=1 https://github.com/CosasDePuma/SecurityNotFound.git 📦 "インストール" src/404.php ファイルはターゲットサーバーに配置する必要があり、.php ファイルを実行できる環境が必要です。 サーバーが配置される最も一般的なパスの例をいくつか示します： root@kitploit: 🏁 Windows C:\Xampp\htdocs\ Xampp 🐧 Lin...

gophish

Gophish Gophish: Open-Source Phishing Toolkit Gophish is an open-source phishing toolkit designed for businesses and penetration testers. It provides the ability to quickly and easily setup and execute phishing engagements and security awareness training. Install Installation of Gophish is...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

CVE-2021-45232

CVE-2021-45232 CVE-2021-45232 POC 1、Apache APISIX Dashboard 接口未授权访问漏洞CVE-2021-45232扫描 2、Apache APISIX Dashboard默认口令扫描...

CVE-2026-69657

XING CPTrans-ME-X contains a Use of Default Password CWE-1393. Anyone with the knowledge of the credential may log in to the affected device...

CVE-2026-69657

XING CPTrans-ME-X contains a Use of Default Password CWE-1393. Anyone with the knowledge of the credential may log in to the affected device...

EUVD-2026-70918

XING CPTrans-ME-X contains a Use of Default Password CWE-1393. Anyone with the knowledge of the credential may log in to the affected device...

CVE-2026-69657

XING CPTrans-ME-X contains a Use of Default Password vulnerability (CWE-1393), meaning anyone who knows the default credential can log in to the affected device. The vulnerability is rated CRITICAL with a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and a CVSS v4.0 base score...

xbootEncodePwd

xbootEncodePwd root@kitploit: xboot-activiti-1.0-SNAPSHOT xboot-cms-1.0-SNAPSHOT xboot-generator-1.0-SNAPSHOT xboot-app-1.0-SNAPSHOT xboot-core-1.0-SNAPSHOT xboot-open-1.0-SNAPSHOT xboot-autochat-1.0-SNAPSHOT xboot-docking-1.0-SNAPSHOT xboot-quartz-1.0-SNAPSHOT xboot-base-1.0-SNAPSHOT...

Brother Printers – Authentication Bypass via Default Admin Password

By leaking a target device's serial number, a remote attacker can generate the target device's default administrator password. The target device may leak its serial number via unauthenticated HTTP, HTTPS, IPP, SNMP, or PJL requests. id: CVE-2024-51978 info: name: Brother Printers – Authentication...

Jfrog Artifactory <6.17.0 - Default Admin Password

Jfrog Artifactory prior to 6.17.0 uses default passwords such as "password" for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. id: CVE-2019-17444 info: name: Jfrog Artifactory...

Netsweeper 4.0.5 - Default Weak Account

The Web Panel in Netsweeper before 4.0.5 has a default password of 'branding' for the branding account, which makes it easier for remote attackers to obtain access via a request to webadmin/. id: CVE-2014-9614 info: name: Netsweeper 4.0.5 - Default Weak Account author: daffainfo severity: critica...

CVE-2017-1000486

README - CVE-2020-1039909 Primefaces リモートコード実行 ============================================================ 脆弱性について CVE-2020-1039909 は、Primefaces JSF フレームワークにおけるリモートコード実行（RCE）の脆弱性です。この欠陥により、攻撃者は Padding Oracle 攻撃を通じてサーバー上で任意のコマンドを実行できます。これは、脆弱な暗号化とデフォルトパスワードの使用が原因です。 影響を受けるバージョン: 5.2.21 より前の...

CVE-2022-1388-EXP

CVE-2022-1388-EXP これはCVE-2022-1388-EXPです 著者:Caps@BUGFOR Github:https://github.com/bytecaps 改作者:LinJacck Github:https://github.com/LinJacck 機能紹介 検証モード：python CVE20221388.py -v -u targeturl 攻撃モード：python CVE20221388.py -a -u targeturl -c command 一括検出：python CVE20221388.py -s -f file WebShellモード：pyth...

CVE-2026-73778

CVE-2026-73778 affects the Credential Manager component of HPE devices. The vulnerability stems from a predictable factory-default password present in devices that are in their factory-default or post-ZTP (Zero Touch Provisioning) state before an administrator has configured credentials. An unaut...

CVE-2026-82698

A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown function of the file aca.sql. Performing a manipulation results in use of default password. Remote exploitation of the attack is possible. The exploit is now...

CVE-2026-82698 sambitraj Student-Management-System aca.sql default password

A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown function of the file aca.sql. Performing a manipulation results in use of default password. Remote exploitation of the attack is possible. The exploit is now...