Lucene search
+L

33 matches found

Kitploit
Kitploit
added 2026/09/05 1:52 a.m.4 views

telegram-phish-simulator

⚠️ Telegram Phishing Simulator – Образовательный инструмент по безопасности НЕ ИСПОЛЬЗУЙТЕ ЭТОТ КОД ДЛЯ НЕЗАКОННЫХ ДЕЙСТВИЙ. Этот репозиторий представляет собой симуляцию, созданную исключительно для обучения кибербезопасности, повышения осведомлённости и авторизованного лабораторного тестирования...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/05 12:30 a.m.5 views

o5logon-fetch

o5logon-fetch Un petit programme Java qui tente d'exploiter CVE-2012-3137 sur des serveurs Oracle 11 vulnérables. En exploitant cette vulnérabilité, vous pouvez effectuer des attaques par force brute hors ligne jusqu'à découvrir le mot de passe d'un utilisateur donné, sans aucune trace d'audit...

6.4CVSS8.7AI score0.31437EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/04 7:34 p.m.4 views

linset

Linset — это не инструмент социальной инженерии Прежде всего, отмечу, что это проект для образовательных целей, который помог мне и, надеюсь, другим лучше познакомиться с миром программирования и беспроводных сетей. Категорически запрещено использовать этот инструмент в чужих беспроводных сетях!...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 6:54 a.m.2 views

Hook-PasswordChangeNotify

Hook-PasswordChangeNotify 1、Выполните следующую команду в powershell: root@kitploit: Import-Module .\Invoke-ReflectivePEInjection.ps1 Invoke-ReflectivePEInjection -PEPath HookPasswordChange.dll -procname lsass 2、Когда пользователь целевой машины изменяет пароль, новый пароль будет записан в...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 7:31 p.m.3 views

mimikat_ssp

mimikatssp windows перехват паролей с обходом антивируса...

5.4AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/05/12 11:00 p.m.138 views

Exploit for Improper Input Validation in Microsoft

monikerlinktest cve-2024-21413 1. set up tun0 on router via o...

9.8CVSS6AI score0.9466EPSS
SaveExploits24
Positive Technologies
Positive Technologies
added 2025/12/16 12:00 a.m.10 views

PT-2025-51749

Name of the Vulnerable Software and Affected Versions WBCE CMS version 1.6.1 Description WBCE CMS version 1.6.1 contains a cross-site scripting issue that enables attackers to inject malicious HTML and CSS. This allows for the capture of user keystrokes. Attackers can upload a specially crafted...

7.1CVSS6.2AI score0.00264EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2020-30294

Malware in sbrugna...

9.8CVSS9.2AI score0.01258EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2025-28700

Malicious code in bioql PyPI...

6.8CVSS6.7AI score0.00277EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/21 11:15 a.m.36 views

CVE-2024-10403

Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave...

7.5CVSS0.00653EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/21 5:44 a.m.56 views

CVE-2024-10403 SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav

Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave...

5.9CVSS0.00653EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/21 12:00 a.m.12 views

Broadcom Fabric OS 安全漏洞

Broadcom Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Broadcom, USA. A security vulnerability exists in Broadcom Fabric OS versions prior to 8.2.3e2, 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a, which stems from the ability to capture...

7.5CVSS6.7AI score0.00653EPSS
SaveExploits0References1
Broadcom
Broadcom
added 2024/11/12 12:00 a.m.33 views

SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav

Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave. Description The...

5.9CVSS6.5AI score0.00653EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/08/02 12:00 a.m.26 views

Moxa IKS, EDS Predictable From Observable State (CVE-2019-6563)

Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

10CVSS8.4AI score0.01748EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/15 5:15 p.m.16 views

CVE-2022-25210

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture passwords of the jobs that will be configured...

6.5CVSS6.6AI score0.00809EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/15 5:15 p.m.8 views

CVE-2022-25210

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture passwords of the jobs that will be configured...

6.5CVSS6.6AI score0.00809EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/15 5:15 p.m.20 views

Design/Logic Flaw

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture passwords of the jobs that will be configured...

4CVSS6.3AI score0.00809EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/02/15 4:11 p.m.181 views

CVE-2022-25210

CVE-2022-25210 affects the Jenkins Convertigo Mobile Platform Plugin up to version 1.1. The vulnerability arises from using static fields to store job configuration information, enabling attackers with Item/Configure permission to capture passwords for jobs that will be configured. This is descri...

6.5CVSS6.5AI score0.00809EPSS
SaveExploits0References1Affected Software1
FreeBSD
FreeBSD
added 2021/08/07 12:00 a.m.14 views

lynx -- SSL certificate validation error

Axel Beckert reports: ... I was able to capture the password given on the commandline in traffic of an TLS handshake using tcpdump and analysing it with Wireshark:...

1.4AI score
SaveExploits0References1
NVD
NVD
added 2020/09/01 9:15 p.m.38 views

CVE-2020-13946

In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and...

5.9CVSS6.8AI score0.02951EPSS
SaveExploits0References5
Rows per page
Query Builder