CVE-2026-55069

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...

CVE-2026-55069

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...

EUVD-2026-39917

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the PostgreSQL database can exploit SHA-512's high computatio...

CVE-2025-10285: Exposure of Sensitive Information to an Unauthorized Actor

The web interface of the Silicon Labs Simplicity Device Manager is exposed publicly and can be used to extract the NTLMv2 hash which an attacker could use to crack the user's domain password...

Linux Distros Unpatched Vulnerability : CVE-2009-4269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a transformation that reduces the...

GHSA-87F6-8GR7-PC6H KubePi may leak password hash of any user

Summary http://kube.pi/kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password of any user including admin. This leads to password crack attack PoC https://drive.google.com/file/d/1ksdawJ1vShRJyT3wAgpqVmz-Ls6hMA7M/preview Impact - Leaking confidential information. - Can lead to password...

CVE-2023-33921: Exposed Dangerous Method or Function

A vulnerability has been identified in CP-8031 MASTER MODULE All versions CPCI85 V05, CP-8050 MASTER MODULE All versions CPCI85 V05. The affected devices contain an exposed UART console login interface. An attacker with direct physical access could try to bruteforce or crack the root password to...

CVE-2021-36767: Use of Password Hash With Insufficient Computational Effort

In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective. An attacker may send an unauthenticated request to the server. The server will reply with a weakly-hashed version of the server's...

Argus Surveillance DVR 4.0 - Weak Password Encryption

Exploit Title: Argus Surveillance DVR 4.0 - Weak Password Encryption Exploit Author: Salman Asad @deathflash1411 a.k.a LeoBreaker Date: 12.07.2021 Version: Argus Surveillance DVR 4.0 Tested on: Windows 7 x86 Build 7601 & Windows 10 Reference: https://deathflash1411.github.io/blog/dvr4-hash-crack...

ZSQL: Number Of Password Changes Required Before the Current Password Can Be Reused

Configure the number of password changes required before the current password can be reused. The configuration prevents a password from being cracked due to repeated use. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrig...

CVE-2020-3923: Improper Authentication

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism. Attackers can crack the default password and gain access to the system...

CVE-2017-3962

Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management NSM before 8.2.7.42.2 allows attackers to crack user passwords via unsalted hashes...

SSH Authentication Backdoor Vulnerability in Fortigate Firewalls

FortiGate Fita Firewall is a network firewall product from Fortinet Fita for defense against attacks such as network and malicious code at the network and content layers. Fortigate Firewall has an SSH authentication backdoor vulnerability. FortiGate firewall FortimanagerAccess user's password is...

Easily crack Win2008 password-ERD6. 0-vulnerability warning-the black bar safety net

Everyone knows ERD5. 0 On win2008 and Vista operating system not afford to do with, how to crack win2008 and vista? ERD6. 0 done this point, below we our to MDOP2008 as an example to introduce how to customize a picture of ERD6. 0 tools CD-ROM First, in win2008 insert MDOP2008 the installation...

To decrypt WPA/WPA2 encrypted high-speed crack of the truth-vulnerability warning-the black bar safety net

For wireless WPA encryption environment, in access to the WPA Handshake Authentication package, the attacker will through brute force mode for WPA password cracking, but also by the prior establishment of a targeted dictionary, then dictionary crackattack. For most wireless access point AP, this...

IPC$ Password Crack-the-BAT-vulnerability warning-the black bar safety net

Author: TheLostMind Sometimes in the broiler below want to a whole other chickens, with SOCK5 reverse proxy, cumbersome and slow, there are N multi-threaded IPC$password crack tool, but the others filled with soft kill wow, make afree to killIntuit trouble, the city's use cow knife, a little soft...

Webshell under to crack computer administrator password-vulnerability warning-the black bar safety net

Information source: evil octal information security team www.eviloctal.com） This idea derived from previous studies runas command when inspired. Method of use: 1, The your password dictionary was renamed into the psw. txt, upload to the target server is an executable, writable directory. It is...

How to force to crack encrypted WinRAR file-vulnerability warning-the black bar safety net

When a very important RAR file because of forgotten password unable to decompress when you are not so abandoned it? Of course not, you can use the RAR Password Cracker this software will be encrypted RAR file crack. After installation run the program RAR Password Cracker Wizard settings, first...

i-Gallery 3.4 bug crack password!

we can find file mdb of i-Gallery by link: http://www.hkp.com/igallery/database/igallery.mdb and can crack password on file igallery.mdb! because password is Base64! -------------------- with link : http://www.hkp.com/gallery/igallery.asp?d=5c../../5c we can view file on folder of site!...

Suffered password loss teach you how to hack-vulnerability warning-the black bar safety net

The network administrator in the network the role of the equivalent of the police, not only to keep the network in check leakage fill a vacancy, but also in the network, each PC repair the time to overcome various difficulties. In view of the now security-conscious looked up, almost in an...