AspDotNetWrapper-Edited-

AspDotNetWrapper para probar claves de máquina viewstate en ASP.NET descarga clona y descomprime el archivo en Windows Uso root@kitploit: AspDotNetWrapper.exe --keypath MachineKeys.txt --encrypteddata --decrypt --purpose=viewstate --modifier= --macdecode reemplaza el por el parámetro viewstate=...

CVE-2025-15545

CVE-2025-15545 Información Fabricante: TP-Link Sitio web del fabricante: TP-Link Modelo: Archer RE605X Versión de hardware: RE605X v3.0 Versión de firmware: RE605XEUV31.1.5 Build 20240905 Dirección de descarga del firmware: TP-Link Una cadena de vulnerabilidades — incluyendo el uso de claves...

EulerOS 2.0 SP10 : python-jwt (EulerOS-SA-2026-3761)

According to the versions of the python-jwt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC...

CVE-2025-69428

Aviso de Seguridad - CVE-2025-69428 Título: Acceso no autenticado a directorio sensible Divulgación de información CVE-ID: CVE-2025-69428 Descripción Una vulnerabilidad crítica de control de acceso en la aplicación Pro-Bit desplegada localmente en versiones anteriores a la v1.77.4 permite a...

CVE-2025-60791

CVE-2025-60791 CVE-2025-60791: Almacenamiento en texto claro de información sensible en memoria. Easywork Enterprise 2.1.3.354 es vulnerable al almacenamiento en texto claro de información sensible en memoria. La aplicación deja claves de licencia válidas vinculadas al dispositivo en la memoria d...

CVE-2026-92758

This MongoDB -related vulnerability occurs when the application logging mode is set to DEBUG or a malformed MongoDB connection string is used, causing application logs to capture sensitive information such as passwords and AWS secure access keys. The root cause is overly verbose or misconfigured ...

CVE-2026-92758 Logs may collect sensitive information

If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information if in use such as passwords and AWS secure access keys...

CVE-2026-92758 Logs may collect sensitive information

If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information if in use such as passwords and AWS secure access keys...

Logs may collect sensitive information

If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information if in use such as passwords and AWS secure access keys...

crapsecrets

Bifurcado originalmente de badsecrets 0.7.0 Sincronizado ocasionalmente hasta marzo de 2025 ¡Desactualizado, algunos módulos y casos de prueba no están al día! ¡Bueno para probar Machine Keys comprometidas de ASP.NET! Esto es CrapBadSecrets mkdir -p /ctools/ cd /ctools/ git clone...

crapsecrets

Forked originally from badsecrets 0.7.0 Synced occasionally until March 2025! Outdated with some modules and test cases are not up2date! Good for ASP.NET compromised Machine Key testing! This is CrapBadSecrets root@kitploit: mkdir -p /ctools/ cd /ctools/ git clone...

EUVD-2026-82214

In the Linux kernel, the following vulnerability has been resolved: crashdump: release keyring reference at the correct time restoredmcryptkeystothreadkeyring gets a reference to the user keyring before restoring the saved dm-crypt keys. The same keyring reference is then passed to addkeytokeyrin...

CVE-2026-92912

AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 uses cryptographically weak uniqid values for RTMP publish keys in LiveTransmition, reducing key entropy to approximately one million possibilities per creation second. Attackers who know the channel creation time can brute-force the...

CVE-2026-91019

The Event Booking Manager for WooCommerce WordPress plugin before 5.6.0 does not restrict who can view its stored payment gateway configuration, allowing users with Contributor-level access and above to read the site's PayPal and Stripe credentials, including their secret keys...

CVE-2026-91019

CVE-2026-91019 affects the Event Booking Manager for WooCommerce WordPress plugin in versions before 5.6.0 . The plugin fails to restrict access to its stored payment gateway configuration, allowing any user with Contributor-level permissions or higher to read the site's PayPal and Stripe credent...

CVE-2026-91019 Event Booking Manager for WooCommerce < 5.6.0 - Contributor+ Payment Gateway Credential Disclosure

The Event Booking Manager for WooCommerce WordPress plugin before 5.6.0 does not restrict who can view its stored payment gateway configuration, allowing users with Contributor-level access and above to read the site's PayPal and Stripe credentials, including their secret keys...

EUVD-2026-81358

The Event Booking Manager for WooCommerce WordPress plugin before 5.6.0 does not restrict who can view its stored payment gateway configuration, allowing users with Contributor-level access and above to read the site's PayPal and Stripe credentials, including their secret keys...

keyguard

keyguard Escanea bases de código, proyectos de GCP y pipelines de CI en busca de credenciales expuestas de la API de Google, antes de que sean explotadas. El problema: Google habilitó retroactivamente el acceso a la API de Gemini en claves API existentes Maps, Places, etc. que fueron diseñadas pa...

GitLeaks

GitLeaks GitLab CI 组件 一个用于 Gitleaks 的 GitLab CI 组件 —— 一款用于检测和防止硬编码秘密（如密码、API 密钥和令牌）被提交到 git 仓库的 SAST 工具。 功能特性 秘密检测 ：扫描仓库中的硬编码秘密和敏感信息 全面规则集 ：包含大量内置规则，用于检测各类秘密 自定义配置 ：支持本地和远程配置文件 多种输出格式 ：支持 JSON、SARIF 及其他报告格式 灵活参数 ：可直接向 Gitleaks 传递附加标志 远程配置 ：从远程 URL 下载并使用配置文件 可配置作业设置 ：可自定义作业名称、阶段和容器镜像 使用方法 基本用法...

CVE-2024-34102

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2024-34102...