hashcat

hashcat hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 300 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to...

ad-password-protection

Lithnet Password Protection for Active Directory LPP は、すべての Active Directory アカウントに強力なパスワードを確保したいと考える組織が利用できる選択肢を拡張します。 LPP は Active Directory サーバーにインストールするモジュールで、パスワードフィルターを使用して、ユーザーがパスワードを変更しようとする際にパスワードを検査します。グループポリシーを使用して、それらのパスワードに対して実行するチェックの種類をカスタマイズし、パスワードは拒否されるか、承認されてディレクトリにコミットされます。 LPP...

rome-webshell

Rome WebShell パワフルで楽しいPHP WebShell これは軽量なPHPウェブシェル で、バニラJavaScriptとCSSのみを使用し、 jQueryやBootstrapの無駄は一切ありません 。 機能 完全インタラクティブなファイルエクスプローラー 、ディレクトリのブラウズとファイルの即時ダウンロード ブラウザから直接ファイルをアップロード ペイロードをURLエンコードすることなくコマンドを実行 MD5パスワード保護 、例えばKing of The Hill中にアクセスを制限するのに便利 完全CSSアニメーション、レスポンシブ で楽しいFlatUIインターフェース...

obfuscation_detection

Obfuscation Detection v2.4 Author: Tim Blazytko Automatically detect obfuscated code and other interesting code constructs Description: Obfuscation Detection is a Binary Ninja plugin to detect obfuscated code and interesting code constructs e.g., state machines in binaries. Given a binary, the...

Ghostfuscator

Ghostfuscator AES暗号化を使用してパスワード保護されたPythonスクリプトを難読化します 使用方法 スクリプトを実行し、メニューに従ってください。 詳細 スクリプトが難読化されると、実行時にパスワード入力を求めるプロンプトが表示され、正しいパスワードを入力すると、メモリ内で復号化されたコンテンツを実行します。...

CVE-2026-90545 WWBN AVideo Missing Authorization via commentAddNew.json.php

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the commentAddNew.json.php endpoint, allowing authenticated users to post comments on password-protected and group-restricted videos. Attackers can submit POST requests with a valid...

PT-2026-90650

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the commentAddNew.json.php endpoint, allowing authenticated users to post comments on password-protected and group-restricted videos. Attackers can submit POST requests with a valid...

CVE-2026-88874

AVideo (through revision c3edcc274c389816d434acadac07ee78eaf330c1, 2026-08-23) suffers from an authentication bypass in its live streaming feature. The Live::_getStats() method (plugin/Live/Live.php) exposes the RTMP stream key, isPasswordProtected flag, and HLS (m3u8) URL to unauthenticated call...

EUVD-2026-57466

SiYuan: Password protected tier omitted in the attribute-view/database publish filter: Reader receives rows of protected documents without the password publish mode...

CVE-2025-15489 Passster < 4.2.24 - Password Protection Bypass

The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content...

PT-2026-84715

The Wp Edit Password Protected WordPress plugin before 1.3.5 allows protecting page content, but this protection can be bypassed by using the REST API...

PT-2026-79526

Name of the Vulnerable Software and Affected Versions JoomGallery versions prior to 4.3.1 Description An unauthenticated access control bypass exists in the category JSON view. While the HTML view correctly enforces password protection for gallery categories, the JSON view fails to perform this...

CVE-2026-17559

The Passster WordPress plugin before 4.3.9 does not correctly match its own public endpoint paths when deciding which REST API requests may bypass global password protection, comparing them as an unanchored substring of the request URI rather than against the resolved route, allowing an...

EUVD-2026-63911

The Passster WordPress plugin before 4.3.9 does not correctly match its own public endpoint paths when deciding which REST API requests may bypass global password protection, comparing them as an unanchored substring of the request URI rather than against the resolved route, allowing an...

PT-2026-79370

The Passster WordPress plugin before 4.3.9 does not correctly match its own public endpoint paths when deciding which REST API requests may bypass global password protection, comparing them as an unanchored substring of the request URI rather than against the resolved route, allowing an...

CVE-2026-17559: Incorrect Authorization

The Passster WordPress plugin before 4.3.9 does not correctly match its own public endpoint paths when deciding which REST API requests may bypass global password protection, comparing them as an unanchored substring of the request URI rather than against the resolved route, allowing an...

CVE-2026-73045

SiYuan before 3.7.4 has an improper restriction of excessive authentication attempts in the authFilePublishAccess endpoint, allowing unauthenticated attackers to brute-force per-notebook publish passwords with no rate limiting or CAPTCHA, potentially granting access to password-protected publishe...

PT-2026-73079

Name of the Vulnerable Software and Affected Versions PPWP – Password Protect WordPress versions prior to 1.9.21 Description An Insecure Direct Object Reference IDOR exists in the ppw free set password AJAX action. This issue occurs because of missing validation on a user-controlled key, allowing...

CVE-2026-72806

CVE-2026-72806 affects SiYuan versions before 3.7.4, where a vulnerability in the FilterViewByPublishAccess filter allows an authentication bypass. Unauthenticated readers can render attribute views and access password-protected document rows (titles, block IDs, column values) via renderAttribute...

CVE-2026-72806

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the FilterViewByPublishAccess filter that fails to check publish password protection when rendering attribute views and database rows. Unauthenticated readers can access password-protected document rows including...