DPAT

Domain Password Audit Tool DPAT DPAT is a Python-based security tool that analyzes password hashes extracted from Active Directory domain controllers. It generates comprehensive HTML reports showing password usage statistics, policy violations, and security insights from both NTDS dumps and...

keimpx

Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

Windmill < 1.603.3 - SQL Injection

Windmill versions 1.276.0 through 1.603.2 contain an authenticated SQL injection vulnerability in the folder owner management endpoint. The addowner API endpoint passes user-supplied input directly into a SQL query without sanitization, enabling JSONB path injection. An authenticated user with...

YesWiki < 4.6.4 - Unauthenticated SQL Injection

YesWiki before version 4.6.4 contains an unauthenticated SQL injection vulnerability in the Bazar form-import path. The bnidnature parameter in FormManager::create is concatenated into an INSERT statement without sanitization, allowing unauthenticated attackers to inject arbitrary SQL and read th...

HashTag

Name: HashTag: Parse and Identify Password Hashes Version: 0.41 Date: 11/05/2013 Author: Smeege Contact: [email protected] Description: HashTag.py is a python script written to parse and identify password hashes. It has three main arguments which consist of identifying a single hash type -sh...

CVE-2026-119660

MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin sessions by using the hard-coded default sessionkey 'musebotsessionkey'. Attackers can sign a MuseBot-session cookie carrying a userid to gain full administrative access,...

EUVD-2026-114076

MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin sessions by using the hard-coded default sessionkey 'musebotsessionkey'. Attackers can sign a MuseBot-session cookie carrying a userid to gain full administrative access,...

Invoke-DCSync

Invoke-DCSync Invoke-DCSync Reference: https://adsecurity.org/?p=1729 Reference: https://silentbreaksecurity.com/invoke-dcsync-because-we-all-wanted-it/ Goal: retrieve password hashes from all user accounts on a domain controller using the mimikatz DCSync function Warning：Only do this in a lab...

CVE-2025-32044

CVE-2025-32044 — Moodle Unauthenticated REST API User Data Exposure Stack Trace Args Leak → Names, Emails, Password Hashes Overview CVE-2025-32044 is a high-severity CVSS 7.5 unauthenticated information disclosure vulnerability in Moodle LMS 4.5.0 through 4.5.2. The vulnerability lies in Moodle's...

CVE-2024-24919

Check point:CVE-2024-24919 run CVE nuclei -list chick.txt -t CVE-2024-24919.yaml Replace with the target IP address, and this command will attempt to access the /etc/shadow file, which contains password hashes. curl --path-as-is -i -s -k -X POST \ -H 'Host: 117.102.198.7 ' \ -H 'Content-Length: 3...

Linux Distros Unpatched Vulnerability : CVE-2026-116218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL injection vulnerability that allows authenticated API users to inject SQL via the type field of the...

CVE-2026-116896

REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database table, allowing non-admin users with the backupexport permission to export rexuser, rexusersession, and other applications' tables. Attackers can obtain plaintext session ids a...

CVE-2026-116896

REDAXO versions before 5.21.5 are vulnerable to a missing authorization flaw in the backup addon export functionality. The component incorrectly permits non-admin users possessing the backup[export] permission to export any database table, including rex_user and rex_user_session. This allows atta...

CVE-2026-116896 REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tables

REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database table, allowing non-admin users with the backupexport permission to export rexuser, rexusersession, and other applications' tables. Attackers can obtain plaintext session ids a...

EUVD-2026-110792

REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database table, allowing non-admin users with the backupexport permission to export rexuser, rexusersession, and other applications' tables. Attackers can obtain plaintext session ids a...

EUVD-2026-110535

YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but placed in an unquoted INTERVAL position. Authenticated administrators can inject SQL via the from POST parameter to perform blind reads of the database including user password hashes...

CVE-2026-116828

YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but placed in an unquoted INTERVAL position. Authenticated administrators can inject SQL via the from POST parameter to perform blind reads of the database including user password hashes...

PT-2026-126361

REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database table, allowing non-admin users with the backupexport permission to export rex user, rex user session, and other applications' tables. Attackers can obtain plaintext session id...

CVE-2026-116828 YesWiki before 4.7.0 SQL Injection via despam.php INTERVAL operand

YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but placed in an unquoted INTERVAL position. Authenticated administrators can inject SQL via the from POST parameter to perform blind reads of the database including user password hashes...