keelog-bof

KeeLog Async BOF that captures the KeePass master password by monitoring for the unlock prompt window. When a locked KeePass database is detected, a low-level keyboard hook is installed and keystrokes are captured until the prompt window disappears by being submitted, cancelled or closeed. The...

ff-password-exporter

FF Password Exporter It can be difficult to export your passwords from Firefox. Since version 57 of Firefox Quantum existing password export addons no longer work. Mozilla provides no other official alternatives. FF Password Exporter makes it quick and easy to export all of your passwords from...

CVE-2023-32784-EXPLOIT-REPORT

CVE-2023-32784 शोषण प्रदर्शन परियोजना अवलोकन यह रिपॉजिटरी CVE-2023-32784 का प्रदर्शन प्रदान करती है, जो KeePass के 2.54 से पहले के संस्करणों में पाई जाने वाली एक गंभीर कमजोरी है। यह शोषण मेमोरी डंप के माध्यम से मास्टर पासवर्ड को पुनर्प्राप्त करने की अनुमति देता है, जिससे संग्रहीत क्रेडेंशियल उजाग...

CVE-2023-24055

CVE-2023-24055 CVE-2023-24055 के लिए POC और स्कैनर अपने जोखिम पर उपयोग करें! configscanner.py विंडोज पर चलने वाली KeePass कॉन्फ़िग फ़ाइल के लिए एक सरल पार्सर। यह उपकरण %APPDATA%\Roaming\KeePass\KeePass.config.xml निर्देशिका खोलेगा और सभी ट्रिगर आउटपुट करेगा। निम्नलिखित ट्रिगर कमांड लाइन / URL...

keepass-password-dumper

أداة تفريغ كلمة المرور الرئيسية لـ KeePass 2.X CVE-2023-32784 تحديث تم تعيين الثغرة الأمنية CVE-2023-32784 وتم إصلاحها في KeePass 2.54. شكرًا مرة أخرى لدومينيك ريشل على استجابته السريعة وإصلاحه الإبداعي! توضيح: يجب كتابة كلمة المرور على لوحة المفاتيح، وليس نسخها من الحافظة انظر قسم كيفية العمل. م...

KeePass-dump-py

KeePass-dump-py मूल KeePass 2.X मास्टर पासवर्ड डम्पर CVE-2023-32784 POC को पायथन में फिर से लिखने का मेरा प्रयास। कृपया अधिक विवरण और शोषण प्रक्रिया के लिए मूल POC पर जाएँ। यह स्क्रिप्ट क्या करती है: 1. जाँच करता है कि क्या KeePass प्रक्रिया चल रही है, अन्यथा यह KeePass को चालू करता है। 2. WerFau...

KeePass-CVE-2023-32784-Exploitation-and-Defense

ثغرة تسريب الذاكرة في KeePass CVE-2023-32784: بنية الاستغلال والدفاع الهدف تحليل ثغرة CVE-2023-32784 في KeePass Password Safe v2.53، وإثبات استخراج كلمة المرور الرئيسية عبر تفريغ الذاكرة، وهندسة ضوابط قوية للكشف والتخفيف من الأثر. الثغرة تستخدم KeePass مكوّن SecureTextBoxEx مخصصاً لإدخال كلمة...

EUVD-2026-70260

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by reading a retained backup key from the process memory of UpSignOn.exe, even after the vault has been re-locked. Attackers ca...

cve-2023-32784

CVE-2023-32784 KeePass 2.X version 2.54 est vulnérable à une faille permettant de récupérer le mot de passe principal à partir d'un vidage mémoire d'une base KeePass déverrouillée. Cette faille a été référencée CVE-2023-32784 Ce programme vise à récupérer le mot de passe principal à partir d'un...

CVE-2023-32784-keepass-linux

KeePass 2.53/cmdline files and store the pid of ones with the keyword KeePass in their commandline argument. It'll then acquire the adresses of memory maps in /proc//maps that aren't directly associated with a library, meaning they have an empty file path. It'll then store the memory of all those...

bw-dump

BW-Dump تم التحديث 2 : تم تعيين هذه الثغرة CVE-2023-38840. تم التحديث : تم إصدار تصحيح عبر طلب سحب على GitHub 5813 يصلح الثغرة. الإصدارات المتأثرة هي Bitwarden Desktop 2023.7.0 وما دون. الوصف أداة إثبات مفهوم تستخرج كلمة المرور الرئيسية من خزنة Bitwarden مقفلة يجب أن تكون قد فُتحت مرة واحدة على...

CVE-2023-32784-kdbxpassdmp

keepassdumper.py نسخة Python من vdohney/keepass-password-dumper CVE-2023-32784 — كل الفضل في تنفيذ C الأصلي والتقنية الأساسية يعود إلى vdohney. يقوم السكربت بفحص تفريغ ذاكرة العملية بحثًا عن سلاسل العرض المتبقية التي يتركها SecureTextBoxEx الخاص بـ KeePass 2.x خلفه أثناء قيام المستخدم بكتابة كلمة...

keepass-exfil-forensics

Esfiltrazione della Memoria di KeePass — Indagine di Network Forensics Recupera i dati esfiltrati dal traffico PCAP invertendo una catena di offuscamento hex → Base64 → XOR utilizzata in uno scenario DFIR CTF reale TryHackMe, quindi sfrutta CVE-2023-32784 per recuperare la password principale di...

Astra Linux – Vulnerability in Thunderbird

OpenPGP secret keys that were imported using Thunderbird versions 78.8.1 up to 78.10.1 were stored unencrypted on the user’s local disk. The master password protection was inactive for those keys. Version 78.10.2 will restore the protection mechanism for newly imported keys, and will automaticall...

CVE-2025-11729

The WordPress PPWP plugin (≤1.9.15) has an improper capability check in its can_access function, allowing authenticated Contributors and above to retrieve the master password and bypass protection on any password-protected post or page. CVSS 4.3 (Medium). The plugin's changelog shows a fix was ap...

CVE-2025-11729 PPWP: Password Protect Pages, Posts & Full or Partial Content <= 1.9.15 - Improper Authorization To Authenticated (Contributor+) Master Password Exposure

The PPWP: Password Protect Pages, Posts & Full or Partial Content plugin for WordPress is vulnerable to unauthorized access of data due to a improper capability check on the canaccess function in all versions up to, and including, 1.9.15. This makes it possible for authenticated attackers, with...

CVE-2026-63725

sysPass's FileBackupService::doBackupFiles in lib/SP/Services/Backup/FileBackupService.php around line 388 builds a tar shell command by string-concatenating the backup directory path $this-path directly into the command line 'tar czf ' . $backupFileApp . ' ' . BASEPATH . ' --exclude "'...

CVE-2026-17347

A flaw was found in pgAdmin 4. The MASTERPASSWORDHOOK setting, which allows administrators to configure an external command for per-user encryption keys, improperly substitutes usernames into the command string. An authenticated user can exploit this by providing a specially crafted username...

EUVD-2026-51560

The MASTERPASSWORDHOOK setting, introduced in pgAdmin 4 7.2, lets an administrator configure an external command that returns a per-user encryption key, with %u in the configured string replaced by the current user's name. The previous implementation substituted the username directly into the...

CVE-2026-17347 pgAdmin 4: OS command injection in MASTER_PASSWORD_HOOK via untrusted username substitution

The MASTERPASSWORDHOOK setting, introduced in pgAdmin 4 7.2, lets an administrator configure an external command that returns a per-user encryption key, with %u in the configured string replaced by the current user's name. The previous implementation substituted the username directly into the...