openwifipass

OpenWifiPass Uma implementação de código aberto do papel de concedente no protocolo de Compartilhamento de Senha Wi-Fi da Apple. Aviso Legal O OpenWifiPass é um software experimental e é o resultado de esforços de engenharia reversa do projeto Open Wireless Link. O código serve exclusivamente a...

carbon-identity-framework

carbon-identity-framework Branch| Build-Status ---|--- master| Dieses Repository enthält die Kernkomponenten und Funktionen, die für das Produkt WSO2 Identity Server erforderlich sind. Erstellen aus dem Quellcode Wenn Sie carbon-identity-framework aus dem Quellcode erstellen möchten: 1...

CVE-2020-25769

GOG Galaxy स्थानीय विशेषाधिकार वृद्धि - CVE-2020-25769 GOG Galaxy 2.0, CD Project द्वारा विकसित एक प्लेटफॉर्म है जिसे स्टोरफ्रंट, सॉफ्टवेयर वितरण, सोशल नेटवर्क और एकीकृत गेम लॉन्चर के रूप में डिज़ाइन किया गया है। विंडोज के तहत क्लाइंट विशेषाधिकार प्राप्त कार्यों को संभालने के लिए...

TokenTacticsV2

root@kitploit: / / / / / / / / | \ / / / / /// / \ / / / / / / / / | | / / / / / / / // / , / / / / / / // // / // // / / | |/ / / / // //||// // /,////// |/ TokenTactics v2 Questa è una versione aggiornata di TokenTactics originariamente scritta da Stephan Borosh @rvrsh3ll e Bobby Cooke...

EntraGoat

EntraGoat - एक जानबूझकर कमजोर Entra ID वातावरण EntraGoat सुरक्षा पेशेवरों के लिए एक जानबूझकर कमजोर Microsoft Entra ID अवसंरचना है। अपने स्वयं के टेनेंट में वास्तविक दुनिया की पहचान गलत कॉन्फ़िगरेशन और विशेषाधिकार वृद्धि पथ तैनात करें, फिर एक सुरक्षित, ब्लैक-बॉक्स CTF प्रारूप में उनका शोषण करने का...

conjur

Conjur Manutenibilità Copertura dei test Conjur fornisce gestione dei segreti e identità delle applicazioni per l'infrastruttura moderna: Linguaggio di markup delle autorizzazioni per macchine "MAML" , un linguaggio di policy di accesso basato sui ruoli per definire i componenti di sistema e i lo...

CVE-2021-33044

CVE-2021-33044 Dahua IPC/VTH/VTO Geräte Authentifizierungs-Bypass-Exploit Über: Die Schwachstelle zur Umgehung der Identitätsauthentifizierung wurde in einigen Dahua-Produkten während des Anmeldeprozesses gefunden. Angreifer können die Geräteidentitätsauthentifizierung umgehen, indem sie bösartig...

browser-identity-attacks-matrix

!badgehttps://img.shields.io/twit...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

BloodHound

BloodHound è un'applicazione web monolitica composta da un frontend React integrato con Sigma.js e un backend API REST basato su Go. Viene distribuito con un database applicativo PostgreSQL e un database a grafo Neo4j, ed è alimentato dai raccoglitori di dati SharpHound e AzureHound. BloodHound...

CVE-2026-80349

TarsWeb decides whether a request comes from a trusted local caller using a client-controlled header. app.js sets Koa's proxy option to true without naming which upstream proxies may be trusted and without limiting the number of forwarded hops, so the request address Koa reports is taken from the...

CVE-2021-29156

CVE-2021-29156 richtig gemacht Dieser Proof of Concept wurde umgesetzt, weil der andere öffentlich verfügbare PoC defekt ist ✨ Installation root@kitploit: go install github.com/5amu/CVE-2021-29156@latest Referenzen https://nvd.nist.gov/vuln/detail/CVE-2021-29156...

EUVD-2026-66748

AntFlow V2.0.0 is vulnerable to Incorrect Access Control. JiMuMDCCommonsRequestLoggingFilter.java retrieves the userid from the request header as the core of the identity verification mechanism, allowing attackers to forge any user identity credential information, thereby causing sensitive...

CVE-2026-75415

AntFlow V2.0.0 suffers from an Incorrect Access Control flaw in the file JiMuMDCCommonsRequestLoggingFilter.java . This component retrieves the userid from the request header and uses it as the core identity verification mechanism . Because the header value is not independently validated, an atta...

CVE-2026-80192 better-auth SSO before 1.6.27 Domain Ownership Authentication Bypass

@better-auth/sso before 1.6.27 and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7 prerelease line contains two domain-ownership flaws. When domain verification is disabled, automatic organization assignment accepts unverified provider domains, allowing an authenticated organizati...

keycloak__keycloak_CVE-2022-3782_20-0-1

Keycloak Keycloak è una soluzione Open Source di Identity and Access Management per applicazioni e servizi moderni. Questo repository contiene il codice sorgente per il server Keycloak, gli adattatori Java e l'adattatore JavaScript. Aiuto e documentazione Documentazione Mailing list utenti -...

tor-ip-changer

tor-ip-changer solicitar nova identidade a cada intervalo de X segundos usando o cliente TOR !!!não sou responsável por qualquer coisa que você fizer com este programa, ou por qualquer outra mda!!! é apenas para fins educacionais...

CVE-2026-79787 Alluxio through 2.9.5 S3 REST Proxy Authentication Bypass via Unverified Request Signature

Alluxio's S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default configuration, allowing unauthenticated attackers to spoof user identity. Attackers can extract usernames from unsigned Authorization headers and impersonate any user, including service accounts, to read,...

EUVD-2026-65699

Alluxio's S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default configuration, allowing unauthenticated attackers to spoof user identity. Attackers can extract usernames from unsigned Authorization headers and impersonate any user, including service accounts, to read,...

awesome-entra

Awesome Entra Una lista curata di fantastici strumenti, guide e altre risorse su Microsoft Entra. Contenuti Newsletter e podcast di Merill Mappa mentale Hub di apprendimento Presentazioni aka.ms Strumenti Community YouTube Podcast Bluesky Twitter LinkedIn Blog Newsletter e podcast di Merill...