CVE-2022-28346

CVE-2022-28346 È stato trovato un difetto nel pacchetto Django, che porta a un'iniezione SQL. Questa falla consente a un utente malintenzionato di utilizzare un dizionario appositamente creato contenente query SQL dannose per compromettere completamente il database. Indice CVE-2022-28346...

brutemap

Brutemap .. image:: https://brutemap-dev.github.io/static/brutemap-logo.jpg :target: https://brutemap-dev.github.io :alt: Brutemap Logo |Build Status| |Python| |License| .. |Build Status| image:: https://travis-ci.org/brutemap-dev/brutemap.svg?branch=master :target:...

Password-Analysis

Passwortanalyse: Basierend auf Entropie und Wörterbüchern schwacher Passwörter Skript in Go, das eine Liste von Passwörtern analysiert. Herunterladen und Kompilieren Sie können die Binärdatei direkt von den Releases herunterladen. Wenn Sie sie lieber manuell kompilieren möchten, beachten Sie die...

jwt_tool

The JSON Web Token Toolkit v2 jwttool.py is a toolkit for validating, forging, scanning and tampering JWTs JSON Web Tokens. Its functionality includes: Checking the validity of a token Testing for known exploits: CVE-2015-2951 The alg=none signature-bypass vulnerability CVE-2016-10555 The RS/HS25...

NextPass

🚀 NextPass Il generatore di dizionari di password AI incentrato sulla privacy. Next Pass è un generatore specializzato di dizionari di password che utilizza sia la logica basata su regole che i modelli linguistici di grandi dimensioni LLM per generare password. Progettato per ricercatori di...

naive-hashcat

Naive Hashcat बिना किसी झंझट के पासवर्ड हैश क्रैक करें। Naive hashcat एक प्लग-एंड-प्ले स्क्रिप्ट है जो सरल, अनुभवजन्य रूप से परीक्षित, "काफी अच्छे" पैरामीटर/अटैक प्रकारों के साथ पहले से कॉन्फ़िगर की गई है। ./naive-hashcat.sh का उपयोग करके hashcat अटैक चलाएँ, बिना यह जानने की आवश्यकता के कि "पर्दे...

Hashcat-Cheatsheet

Hashcat-Cheatsheet Cheatsheet di Hashcat per OSCP https://hashcat.net/wiki/doku.php?id=hashcat Identificare gli hash hash-identifier Hash di esempio: https://hashcat.net/wiki/doku.php?id=examplehashes MASSIMA POTENZA! Ho scoperto che posso ottenere più potenza dal cracking degli hash aggiungendo...

Linux Distros Unpatched Vulnerability : CVE-2026-77220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the...

DEBIAN-CVE-2026-77220

PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can...

CVE-2026-77220

PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can...

CVE-2026-77220 PDFio < 1.6.5 Dangling Pointer via Dictionary String-Formatting

PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can...

CVE-2026-77220

PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can...

CVE-2026-77220

PDFio before 1.6.5 contains a dangling pointer vulnerability in its dictionary string-formatting function. The root cause is that a pointer to a stack-local buffer is stored in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, this allows ...

CVE-2026-77220 PDFio < 1.6.5 Dangling Pointer via Dictionary String-Formatting

PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can...

EUVD-2026-64163

PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can...

nvdcve

NVD/CVE® come file JSON Importante : questo repository è ora parzialmente ridondante rispetto al progetto CVEProject/cvelist che consente di esplorare la cronologia delle modifiche CVE®/NVD usando git e di inviare nuove vulnerabilità tramite pull request su GitHub. Tuttavia, questo repository è...

Hob0Rules

Hob0Rules Regole per il cracking delle password per Hashcat basate su statistiche e pattern di settore. I seguenti post sul blog spiegano il significato statistico di questi set di regole: Statistics Will Crack Your Password Praetorian Password Cracking Rules Released Utili wordlist da utilizzare...

hashcrack

hashcrack decomprime alcuni tipi di hash, sceglie opzioni sensate e invoca hashcat Driver NVIDIA qui: http://www.nvidia.co.uk/Download/index.aspx?lang=en-uk email alternativa: [email protected] se hai bisogno di supporto Non sono sicuro che qualcuno alla NCC si occuperà di questo, ma in futu...

buffalo

Buffalo Ein Python-3-Skript zur Durchführung von Wörterbuch-/Wortlistenangriffen auf einen Ziel-SSH-Server unter Verwendung von zwei Textdateien als Eingabe. Verfasst für meine technische Prüfung bei Intel. Installation Dieses Skript ist von Paramiko und Colorama abhängig. Installiere die...

CVE-2026-19611

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords wer...