618 matches found
CryptHook
CryptHook CryptHook é uma implementação modular para proteger aplicações existentes com criptografia simétrica de blocos. Ele funciona interceptando as chamadas de sistema base para comunicação de rede send/sendto e recv/recvfrom. O Crypthook funcionará com qualquer aplicação existente que depend...
longtongue
Gere listas de senhas/frases personalizadas com base em informações do alvo Codificado com 💙 por edoardottt Compartilhe no Twitter! Instalação ⬇️ pipx root@kitploit: pipx install longtongue Fonte root@kitploit: git clone https://github.com/edoardottt/longtongue.git cd longtongue pip install -r...
CVE-2019-6690-python-gnupg-vulnerability
CVE-2019-6690: Validazione impropria dell'input in python-gnupg 0.4.3 Abbiamo scoperto un modo per iniettare dati tramite la proprietà passphrase dei metodi gnupg.GPG.encrypt e gnupg.GPG.decrypt quando viene utilizzata la crittografia simmetrica. La passphrase fornita non viene validata per i...
CVE-2025-26202-Details
Dettagli CVE-2025-26202 CVE-2025-26202: Cross-Site Scripting XSS nell'Interfaccia Web del Router DZS Descrizione Una vulnerabilità Cross-Site Scripting XSS esiste nel campo WPA/WAPI Passphrase delle impostazioni di sicurezza wireless bande 2.4GHz e 5GHz nell'interfaccia Web del router DZS. Un...
longtongue
Generate customized Password/Passphrase wordlist based on target information Coded with 💙 by edoardottt Share on Twitter! Installation ⬇️ pipx root@kitploit: pipx install longtongue Source root@kitploit: git clone https://github.com/edoardottt/longtongue.git cd longtongue pip install -r...
passera
Note: I no longer have the time to continue development of Passera, but pull requests are more than welcome! The number one requested item would be an updated Firefox extension, since the latest API change broke the current release. Passera A simple tool that allows users to have strong unique...
CVE-2023-42829
CVE-2023-42829; 'Eine App könnte möglicherweise auf SSH-Passphrasen zugreifen' Dieses Dokument enthält sowohl eine Analyse einer Logik-Schwachstelle, die im ssh-Binary auf macOS identifiziert wurde meine erste Software-Sicherheitslücke!, als auch eine Patch-Analyse, die zeigt, wie Apple die...
CVE-2026-48084
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Versions prior to 1.0.2 don't throttle failed passphrase login attempts. An attacker can submit unlimited wrong passphrase guesses against any known email address, capped only by the Argon2...
CVE-2026-48084 OpenReception doesn't rate limit passphrase login attempts
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Versions prior to 1.0.2 don't throttle failed passphrase login attempts. An attacker can submit unlimited wrong passphrase guesses against any known email address, capped only by the Argon2...
CVE-2026-48084 OpenReception doesn't rate limit passphrase login attempts
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Versions prior to 1.0.2 don't throttle failed passphrase login attempts. An attacker can submit unlimited wrong passphrase guesses against any known email address, capped only by the Argon2...
CVE-2026-48084
OpenReception’s OpenReception appointment-booking software (versions prior to 1.0.2) does not rate-limit failed passphrase login attempts in /api/auth/login, unlike the WebAuthn path which triggers a per-account 429 throttle after ~19 attempts. The absence of throttling on the passphrase branch a...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the S2K.Argon2Params class and the PGPUtil.makeKeyFromPassPhrase method, which read the one-byte OpenPGP Argon2 passes, parallelism, and memory-size exponent fields with only a...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the S2K.Argon2Params class and the PGPUtil.makeKeyFromPassPhrase method, which read the one-byte OpenPGP Argon2 passes, parallelism, and memory-size exponent fields with only a...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the S2K.Argon2Params class and the PGPUtil.makeKeyFromPassPhrase method, which read the one-byte OpenPGP Argon2 passes, parallelism, and memory-size exponent fields with only a...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the S2K.Argon2Params class and the PGPUtil.makeKeyFromPassPhrase method, which read the one-byte OpenPGP Argon2 passes, parallelism, and memory-size exponent fields with only a...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the S2K.Argon2Params class and the PGPUtil.makeKeyFromPassPhrase method, which read the one-byte OpenPGP Argon2 passes, parallelism, and memory-size exponent fields with only a...
CVE-2026-60114
Sustainable Irrigation Platform SIP through version 5.2.16 contains a path traversal vulnerability that allows attackers with access to the restore functionality to write files to arbitrary locations by uploading crafted JSON backup files with unvalidated keys used to construct file paths...
CVE-2026-58475
Sustainable Irrigation Platform SIP through version 5.2.16 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by supplying malicious script payloads within program names submitted via HTTP requests. Attackers can exploit the...
CVE-2026-58478
Sustainable Irrigation Platform SIP through version 5.2.16 contains a server-side request forgery SSRF vulnerability that allows unauthenticated attackers to make the device issue arbitrary HTTP requests by supplying a malicious callback URL when the optional Node-RED plugin is installed. Attacke...
CVE-2026-58479
CVE-2026-58479 affects Sustainable Irrigation Platform (SIP) 5.x, specifically via the optional cli_control plugin. The vulnerability enables remote code execution (RCE) by storing a malicious payload through the plugin’s HTTP endpoint and then activating the associated irrigation station. The ro...