xpl-ModernWMS-CVE-2024-57698

Divulgação do Hash MD5 da Senha do Administrador - ModernWMS v1.0 - CVE-2024-57698 Um problema no modernwms v.1.0 permite que um invasor veja o hash MD5 da senha do administrador e outros atributos sem autenticação, mesmo após a configuração inicial e alteração de senha. Isso ocorre devido à...

CVE-2026-33829-Writeup

CVE-2026-33829-Analisi Caso di studio di vulnerabilità: CVE-2026-33829 Coercizione NTLM nello Strumento di cattura di Windows Riepilogo esecutivo Questa analisi descrive la replica tecnica di CVE-2026-33829 , una vulnerabilità di divulgazione di informazioni presente nell'architettura applicativa...

cve-2021-38314

CVE-2021-38314 Exploit Python Dettagli Il plugin Gutenberg Template Library & Redux Framework = 4.2.11 per WordPress registrava diverse azioni AJAX disponibili agli utenti non autenticati nella funzione includes in redux-core/class-redux-core.php, uniche per un dato sito ma deterministiche e...

Bcrypt-forcer

Bcrypt-forcer sqlmap Ferramenta de descriptografia Bcrypt Quebrador de hash Bcrypt...

CVE-2026-81688

opensslencrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in the cleartext file header metadata. Attackers can read this hash without the password to confirm guessed plaintexts offline or fingerprint identical plaintexts across separately-encrypted files...

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket

Domain-Controller-DC-Ausnutzung-mit-Metasploit-Impacket End-to-End-Domain-Controller-Ausnutzung mit Metasploit und Impacket: DC10 entdeckt, Zerologon CVE-2020-1472 ausgenutzt, NTLM-Hashes extrahiert, SYSTEM-Shell erlangt und eine Meterpreter-Sitzung eingerichtet. Zusammenfassung Diese Übung...

CVE-2026-81688 openssl_encrypt before 1.4.9 Plaintext Confirmation Oracle via SHA-256

opensslencrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in the cleartext file header metadata. Attackers can read this hash without the password to confirm guessed plaintexts offline or fingerprint identical plaintexts across separately-encrypted files...

CVE-2026-81688

openssl_encrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in the cleartext file header metadata. Because the hash is not keyed, an attacker who obtains an encrypted file can read the hash without the password and use it as a plaintext confirmation oracle — verifying gue...

CVE-2026-81688 openssl_encrypt before 1.4.9 Plaintext Confirmation Oracle via SHA-256

opensslencrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in the cleartext file header metadata. Attackers can read this hash without the password to confirm guessed plaintexts offline or fingerprint identical plaintexts across separately-encrypted files...

CVE-2026-80211

FrontAccounting through 2.4.20 stores and verifies user passwords as unsalted MD5 digests . The admin/users.php, admin/change_current_user_password.php, and includes/current_user.inc files all pass md5($password) without any per-password salt or adaptive hash (no password_hash()/password_verify()...

CVE-2026-80211 FrontAccounting through 2.4.20 Use of Unsalted MD5 for Password Storage

FrontAccounting through 2.4.20 stores and verifies user passwords as unsalted MD5 digests. admin/users.php passes md5$POST'password' to adduser and updateuserpassword, admin/changecurrentuserpassword.php does the same when a user changes their own password, the forgotten-password path in...

CVE-2025-24054

CVE-2025-24054 NTLM-Schwachstelle CVE-2025-24054 für den Diebstahl von Hashes ausgenutzt...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

CVE-2026-78292

Unauthenticated PHP Object Injection in Hash Form = 1.4.1 versions...

CVE-2026-32202

Disclaimer Questo strumento è destinato esclusivamente a red teaming autorizzato e penetration testing. L'uso non autorizzato contro sistemi senza permesso esplicito è illegale. Usalo a tuo rischio. L'autore non si assume alcuna responsabilità per usi impropri o danni. Descrizione Coercizione di...

CVE-2026-78292

CVE-2026-78292 is an unauthenticated PHP Object Injection vulnerability in the WordPress plugin Hash Form , affecting versions

EUVD-2026-66946

Unauthenticated PHP Object Injection in Hash Form = 1.4.1 versions...

CVE-2026-78292 WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Hash Form = 1.4.1 versions...

CVE-2026-21717

CVE-2026-21717 Vulnerabilità di Collisione Prevedibile dell'Hash delle Stringhe in Node.js V8 che Porta a Denial of Service Panoramica Una vulnerabilità critica nel meccanismo di hashing delle stringhe di V8 consente agli attaccanti di causare un grave degrado delle prestazioni nelle applicazioni...

CVE-2025-24071

CVE-2025-24071: Microsoft Windows Datei-Explorer Spoofing-Sicherheitslücke Skript von SilentExploit 📖 Beschreibung Dieses Projekt erkennt und demonstriert die Ausnutzung einer Windows Datei-Explorer Spoofing-Sicherheitslücke. Das Problem ergibt sich aus einer Windows-Bibliotheksdatei .library-ms,...