729 matches found
longtongue
Generate customized Password/Passphrase wordlist based on target information Coded with š by edoardottt Share on Twitter! Installation ā¬ļø pipx pipx install longtongue Source git clone https://github.com/edoardottt/longtongue.git cd longtongue pip install -r requirements.txt python3 longtongue.py...
longtongue
åÆ¾č±”ę å ±ć«åŗć„ćć¦ć«ć¹ćæćć¤ćŗććććć¹ćÆć¼ć/ćć¹ćć¬ć¼ćŗć®ćÆć¼ććŖć¹ććēęćć¾ć šć§ć³ć¼ć by edoardottt Twitterć§ć·ć§ć¢ļ¼ ć¤ć³ć¹ćć¼ć« ā¬ļø pipx pipx install longtongue Source git clone https://github.com/edoardottt/longtongue.git cd longtongue pip install -r requirements.txt python3 longtongue.py ä½æēØę¹ę³ š» usage: longtongue -h -p | -c | -v -l | -L -y...
CryptHook
CryptHook CryptHook ęÆäøäøŖęØ”ååå®ē°ļ¼åÆéčæåƹē§°åē»åÆē å åÆäæę¤ē°ęåŗēØēØåŗćå®éčæęé©ē½ē»éäæ”ēåŗē”ē³»ē»č°ēØ send/sendto å recv/recvfrom ę„å·„ä½ćCrypthook éēØäŗä»»ä½ä¾čµčæäŗē³»ē»č°ēØēē°ęåŗēØēØåŗć å åÆ CryptHook ä¾čµéēØ 256 ä½åÆé„ē AES-GCM ęØ”å¼ćåÆé„éčæ PBKDF2 ä»å£ä»¤ēęćIV ä½æēØéęŗę°ę®åčå³ę¶ęå»ŗļ¼å¹¶å©ēØēøåēåÆé„ę“¾ēęęÆåØę„ę¶ē«Æéå»ŗåå§ååéļ¼ä»„å°å¼éäæęåØęä½éåŗ¦ćęÆäøŖę°ę®å ē认čÆä¹ä¼å¾å°éŖčÆć å č“£å£°ę...
CVE-2025-26202-Details
CVE-2025-26202-č©³ē“° CVE-2025-26202: DZSć«ć¼ćæć¼Webć¤ć³ćæć¼ćć§ć¼ć¹ć«ććććÆćć¹ćµć¤ćć¹ćÆćŖććć£ć³ć° XSS čŖ¬ę DZSć«ć¼ćæć¼Webć¤ć³ćæć¼ćć§ć¼ć¹ć®ćÆć¤ć¤ć¬ć¹ć»ćć„ćŖćć£čØå®ļ¼2.4GHz & 5GHzćć³ćļ¼ć® WPA/WAPIćć¹ćć¬ć¼ćŗ ćć£ć¼ć«ćć« ćÆćć¹ćµć¤ćć¹ćÆćŖććć£ć³ć° XSS ć®čå¼±ę§ćååØćć¾ććčŖčؼćććę»ęč ćÆććć¹ćć¬ć¼ćŗćć£ć¼ć«ćć«ęŖęć®ććJavaScriptćę³Øå „ć§ćććććÆäæåćććå¾ćē®”ēč ćć¹ćć¼ćæć¹ćć¼ćøć®ćč”Øē¤ŗććć«ćÆććććÆćŖććÆććŖćć·ć§ć³ć§ćć¹ćć¬ć¼ćŗćč”Øē¤ŗććéć«å®č”ććć¾ćć å½±éæćåććč£½...
CVE-2023-42829
CVE-2023-42829ļ¼'App ęč®øč½å¤č®æé® SSH å£ä»¤ēčÆ' ę¬ęę”£ę¢å å«åƹ macOS äø ssh äŗčæå¶äøäøäøŖé»č¾ę¼ę“ēåęļ¼ęēē¬¬äøäøŖč½Æ件ę¼ę“ļ¼ļ¼ļ¼ä¹å å«ę¼ē¤ŗ Apple å¦ä½äæ®å¤čÆ„ę¼ę“ē蔄äøåęćęäŗ 2022 幓åŗéčæ Apple å®å Øčµéč®”åå Apple ę„åäŗčÆ„é®é¢ļ¼å®åę„åØ macOS Ventura 13.5 äøäæ®å¤ļ¼å¹¶äŗ§ēäŗ CVE-2023-42829ļ¼šļ¼ćčÆ„é®é¢åƼč“äæååØ macOS ēØę·ę¬å°"ē»å½"é„åäø²ļ¼com.apple.ssh.passphrases č®æé®ē»ļ¼äøē SSH å£ä»¤ēčÆ仄ęęå½¢å¼ę“é²ē»ę¬å°ę»å»č ć å č“£å£°ęļ¼...
passera
Note: I no longer have the time to continue development of Passera, but pull requests are more than welcome! The number one requested item would be an updated Firefox extension, since the latest API change broke the current release. Passera A simple tool that allows users to have strong unique...
CVE-2019-6690-python-gnupg-vulnerability
CVE-2019-6690: python-gnupg 0.4.3 ć«ćććäøé©åćŖå „åę¤čؼ ęć ćÆćåƾē§°ęå·åćä½æēØććéć«ćgnupg.GPG.encrypt ććć³ gnupg.GPG.decrypt ć”ć½ććć®ćć¹ćć¬ć¼ćŗććććć£ćä»ćć¦ćć¼ćæćę³Øå „ććę¹ę³ćēŗč¦ćć¾ććć ęä¾ććććć¹ćć¬ć¼ćŗćÆę¹č”ć«åƾćć¦ę¤čؼććć¦ććććć©ć¤ćć©ćŖćÆ --passphrase-fd=0 ć gpg å®č”åÆč½ćć”ć¤ć«ć«ęø”ćć¾ććgpg ćÆęØęŗå „åć®ęåć®č”ć«ćć¹ćć¬ć¼ćŗćććć®å¾ć®č”ć«å¾©å·ććęå·ęć¾ććÆęå·åććå¹³ęćęå¾ ćć¾ćć...
CVE-2026-47097
AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware. Attackers can reverse engineer the publicly...
EUVD-2026-89967
AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware. Attackers can reverse engineer the publicly...
CVE-2026-47097 AJA HELO Plus < 2.1.7 Hardcoded AES Passphrase for Diagnostics Export Bundle
AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware. Attackers can reverse engineer the publicly...
CVE-2026-47097
The AJA HELO Plus firmware (versions before 2.1.7 ) is vulnerable to an information disclosure vulnerability. The root cause is a static AES passphrase embedded in an obfuscated form within the firmware, which can be recovered via reverse engineering of the publicly available firmware image. Unau...
CVE-2026-47097 AJA HELO Plus < 2.1.7 Hardcoded AES Passphrase for Diagnostics Export Bundle
AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware. Attackers can reverse engineer the publicly...
CVE-2026-47097: Use of Hard-coded Cryptographic Key
AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware. Attackers can reverse engineer the publicly...
Astra Linux ā Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: The PMK parameter is now passed as binary data, rather than hexadecimal data. It appears that the hexadecimal passphrase mechanism does not work on newer chips/firmwares e.g., BCM4387. There was actually...
SUSE CVE-2026-89607
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encryptedkeysize in parsetag3packet parsetag3packet set encryptedkeysize from the Tag 3 packet body without bounding it against ECRYPTFSMAXKEYBYTES 64. When encryptedkeysize 64,...
Linux Distros Unpatched Vulnerability : CVE-2026-89607
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ecryptfs: reject oversized encryptedkeysize in parsetag3packet parsetag3packet set encryptedkeysize from the Tag 3 packet body without bounding it against...
PT-2026-86459
šØ CVE-2026-86150 A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-x/softap/hostapd. Such manipulation of the argument wpa passphrase leads to hard-coded credentials. The attack can be launched remotely. The exploit has been...
EUVD-2026-70785
MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that uses a hard-coded passphrase for multicast command authorization. Any multicast-reachable peer can enumerate MOOS processes and send termination commands to trigger process...
CVE-2026-85451
MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that uses a hard-coded passphrase for multicast command authorization. Any multicast-reachable peer can enumerate MOOS processes and send termination commands to trigger process...
CVE-2026-85451
MOOS core-moos through 10.4.0 is affected by a remote process termination vulnerability in the SuicidalSleeper component. The root cause is a hard-coded passphrase used for multicast command authorization, allowing any multicast-reachable peer to enumerate MOOS processes and send termination comm...