Pwdlyser

Pwdlyser New repo for Public release Pwdlyser P assw ord -Analyser is a multi-functional analysis tool created to provide security professionals and organisations aiming to improve their security posture with the ability to easily review and analyse passwords from Active Directory domain accounts...

self-service-password

LDAP Tool Box Self Service Password 紹介 Self Service Password は、LDAP ディレクトリ内のパスワードをユーザーが変更できるようにする PHP アプリケーションです。 このアプリケーションは、標準的な LDAPv3 ディレクトリ（OpenLDAP、OpenDS、ApacheDS、Sun Oracle DSEE、Novell など）だけでなく、Active Directory でも使用できます。 次の機能があります: Samba パスワードを変更する Samba モード Active Directory モード...

ridrelay

RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...

EIPP

EIPP 禁止パスワードリスト Entra ID Password Protection の Banned Password List（BPL）を操作するためのツールです。 グローバル BPL のエントリを含む eipp-global-bpl.txt は、2024-04-11 にダンプされました。 詳細情報: https://www.synacktiv.com/en/publications/entra-id-banned-password-lists-password-spraying-optimizations-and-defenses EIPPDecrypt...

Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257

Digisol-DG-GR1321のパスワードポリシーバイパス-CVE-2024-2257...

CVE-2025-25749-Weak-Password-Policy-in-HotelDruid-3.0.7

CVE-2025-25749 - HotelDruid 3.0.7 における脆弱なパスワードポリシー 説明 HotelDruid バージョン 3.0.7 以前の脆弱性により、パスワード強度ポリシーが適用されていないため、ユーザーは脆弱なパスワードを設定できます。 影響 脆弱なパスワードが受け入れられる: 攻撃者は単純なパスワードを推測したり、高い成功率でクレデンシャルスタッフィング攻撃を行うことができます。 クレデンシャル再利用のリスク: ユーザーがシステム間でパスワードを再利用している場合、攻撃者は漏洩したクレデンシャルを悪用できます。 パスワード変更の制限なし:...

Chromium: CVE-2026-17720 Insufficient policy enforcement in Passwords

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17825 Insufficient policy enforcement in Passwords

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17829 Insufficient policy enforcement in Passwords

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2026-17829

Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

WordPress WP Password Policy plugin <= 3.7.1 - Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated Subscriber+ Privilege Escalation vulnerability discovered by zickzick2 in WordPress Plugin WP Password Policy versions = 3.7.1...

CVE-2026-17825

Insufficient policy enforcement in Passwords in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-17829

Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17720

Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-17825

Insufficient policy enforcement in Passwords in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17825

Insufficient policy enforcement in Passwords in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66039

Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

PT-2026-66144

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the Passwords component allows a remote attacker to bypass discretionary access control, which is a security mechanism that restricts acces...

Chromium: CVE-2026-15124 Insufficient policy enforcement in Passwords

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-15992

The WP Password Policy plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 3.7.1. This is due to missing authorization checks and nonce verification in the getuser function of the ModulePasswordHint class, which unconditionally calls WPUser::setrole with...