CVE-2026-56682

9Router is an AI router & token saver. Prior to 0.5.6, 9Router deployments that allow requests to reach Next.js without the sanitizing custom-server.js wrapper use the client-supplied X-9r-Real-Ip value as the bucket key in getClientIp, checkLock, and recordFail in src/lib/auth/loginLimiter.js fo...

PassGAN

PassGAN 本仓库包含论文 PassGAN: A Deep Learning Approach for Password Guessing 的代码。 PassGAN 模型取自 Improved Training of Wasserstein GANs，并假设 PassGAN 的作者在其工作中使用了 improvedwgantraining 的 TensorFlow 实现。因此，我在本仓库中对参考实现进行了修改，使其易于训练（train.py）和采样（sample.py）。本仓库贡献了： 命令行界面 基于 RockYou 数据集预训练的 PassGAN 模型 快速开始...

CVE-2026-71205-PoC

CVE-2026-71205 — changedetection.io：/login 无速率限制可导致无限密码暴力破解 产品： dgtlmoon/changedetection.io — v0.55.7 文件： changedetectionio/flaskapp.py CWE： CWE-307 — 对过多身份验证尝试的限制不当 CVSS 3.1： AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N — 6.5（中危） CNA： Turan Security · CVE 记录 描述 changedetection.io 的 /login 路由将提交的密码与单个...

win-brute-logon

注意1：我们激动地宣布，当前工具已移植到PowerShell版本。这意味着用户现在可以直接从PowerShell命令行访问并使用该工具，使其使用更加便捷高效。我们相信这一新版本将极大惠及用户，并提升使用体验。感谢您一直以来的支持，希望您喜欢新的PowerShell版本：https://github.com/DarkCoderSc/power-brute-logon 注意2：我们最近得知，微软已在现代和最新版本的Windows中默认启用了帐户锁定策略。该策略通过在一定次数的登录失败后锁定帐户来保护系统安全。虽然这是一项有益的安防措施，但它使得此概念验证（PoC）在这些系统上的效率降低。 W...

Go365

Go365 v2.0 修复了AWS网关问题（感谢h0useh3ad！） 当代理服务器连接失败时不再崩溃 新增了图形端点 在使用Go365之前，请通读本README！ Go365是一款用于对使用Office365（现/即将更名为Microsoft365）的组织执行用户枚举和密码猜测攻击的工具。Go365使用了一个位于login.microsoftonline.com上的独特SOAP API端点，大多数其他工具不使用该端点。当使用电子邮件地址和密码进行查询时，该端点会返回一个Azure AD身份验证和授权码。Go365会处理该代码，并将结果显示在屏幕上或输出到文件中。...

Shreder

Shreder Shreder es una potente herramienta de fuerza bruta de contraseñas para el protocolo SSH multihilo. Características Adivinación de contraseñas muy rápida, solo una contraseña en 0.1 segundos. Optimizado para listas de contraseñas grandes, Shreder prueba 1000 contraseñas en 1 minuto y 40...

brutto

brutto 轻松对任何目标进行暴力破解，其魔力在于递增数值并直接生效。 实现 克隆 git clone https://github.com/jofpin/brutto.git 下载最新版本 用Python安装：python setup.py install root@kitploit: So you import the library from bruttoeasy import Brutto 如何使用 包含所有字母（A - Z），区分大小写。 所有数字都会体现在过程中（0-9） 同样包含所有符号和空格。 设置 scope（范围） letters（字母） numbers（数字）...

Talon

此仓库已归档 如需查看最新版本的 Talon 或提交问题，请参考 https://github.com/Tylous/Talon。 Talon Talon 是一款旨在执行自动化密码猜测攻击且保持不被检测的工具。Talon 能够利用 Kerberos 列举用户列表，识别哪些用户是有效的。Talon 还可以针对 Kerberos 和 LDAPS（LDAP 安全）服务执行密码猜测攻击。Talon 可以使用单个域控制器或多个域控制器来执行这些攻击，每次尝试在域控制器和服务（LDAP 或 Kerberos）之间随机化。 有关此技术的更多信息，请参见以下博客。 使用方法...

CVE-2026-44596

CVE-2026-44596 — YAMCS 认证端点缺少速率限制 概述 yamcs-core 中的认证端点 POST /auth/token 缺乏任何形式的速率限制、帐户锁定或失败尝试节流。未认证的远程攻击者可以对任何用户帐户执行无限制的密码猜测尝试。 字段| 值 ---|--- CVE| CVE-2026-44596 严重程度| MEDIUM CVSS 5.3 CWE| CWE-307: 对过多认证尝试的限制不当 受影响版本| yamcs-core = 5.12.7。 时间线 日期| 事件 ---|--- 2026-05| 漏洞报告 2026-05-27| 在 yamcs-core...

EUVD-2026-72007

AVideo API fails to enforce rate limits when clients send a bot User-Agent header, allowing attackers to bypass all eight protected operations including login brute-force protection. Attackers can send requests with a bot User-Agent to disable rate limiting and perform unlimited password guessing...

CVE-2026-82643

WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php that accepts credentials over GET without rate limiting. Attackers can submit correct credentials repeatedly to trigger uncapped two-factor confirmation emails and perform sustaine...

EUVD-2026-68230

WWBN AVideo current e01e41ecc and earlier contains a brute-force rate limiting bypass in enforceRateLimit, which protects login.json.php and 13 other endpoints. The function stores its attempt counter via a cache layer ObjectYPT::setCacheGlobal that silently discards writes for any client...

EUVD-2026-68229

WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php that accepts credentials over GET without rate limiting. Attackers can submit correct credentials repeatedly to trigger uncapped two-factor confirmation emails and perform sustaine...

CVE-2026-82643

WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php , which accepts credentials via HTTP GET without rate limiting . An unauthenticated attacker can repeatedly submit correct credentials to trigger uncapped two-factor confirmation e...

CVE-2026-82643 WWBN AVideo Unauthenticated Rate Limit Bypass via preauthorize.json.php

WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php that accepts credentials over GET without rate limiting. Attackers can submit correct credentials repeatedly to trigger uncapped two-factor confirmation emails and perform sustaine...

PT-2026-83569

Name of the Vulnerable Software and Affected Versions WWBN AVideo affected versions not specified Description An unauthenticated credential submission issue exists in the 'plugin/Live/api/preauthorize.json.php' endpoint. The system accepts credentials via the GET method without implementing rate...

CVE-2026-81704

opensslencrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline password guessing against encrypted files roughly six to seven orders of magnitude faste...

CVE-2026-81704

openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler. The affected code uses unstretched SHA-256 instead of Argon2id , omitting key stretching and hash rounds. This allows attackers to perform offline password guessing ag...

CVE-2026-81704 openssl_encrypt before 1.4.9 Weak Key Derivation via D-Bus

opensslencrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline password guessing against encrypted files roughly six to seven orders of magnitude faste...

CVE-2026-81689

openssl_encrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, resulting in identical keys across all users and files. An attacker with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wi...