117 matches found
passfault
OWASP Passfault へようこそ 目標: パスワードをもっと良くしよう！ 注記: このプロジェクトは廃止されましたが、zxcvbn プロジェクトは非常に類似したアプローチを採用しており、非常に成功しています。そのライブラリの使用をお勧めします。 コマンドラインインターフェースの実行: 1. java 8 jdk をインストール 2. cd commandLine 3. ../gradlew installDist 4. 実行: build/install/passfault/bin/passfault jsonWebService の実行: 1. cd jsonService ...
pcfg_cracker
PCFG = Probabilistic Context Free Grammar PCFG = Pretty Cool Fuzzy Guesser In short: A collection of tools to perform research into how humans generate passwords. These can be used to crack password hashes, but also create synthetic passwords honeywords, or help develop better password strength...
Password-Strength-Evaluator
パスワード強度評価ツール Password Strength Evaluator は、パスワードの強度を評価し、セキュリティを向上させるための推奨事項を提供するツールです。このツールは、Have I Been Pwned API を使用して、パスワードがデータ侵害で流出していないかも確認します。さらに、評価結果を JSON および CSV ファイルに保存し、将来の分析に役立てます。 使用方法 1. Python 2.7 環境の準備 システムに Python 2.7 がインストールされていることを確認してください。 また、requests...
Password-Analysis
パスワード分析: エントロピーと弱いパスワード辞書に基づく パスワードのリストを分析するGo製スクリプト。 ダウンロードとコンパイル リリースから直接バイナリをダウンロードできます。手動でコンパイルする場合は、以下の手順を検討してください。 git clone https://github.com/am0nt31r0/Password-Analysis.git cd Password-Analysis go build -ldflags "-w -s" -o pwdAnalysis バイナリをbinディレクトリに移動します。 └─$ tree go go/ ├── bin │ ├──...
CVE-2024-40684
IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, and 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 IBM SmartCloud Analytics - Log Analysis does not require that users should have strong passwords by default, which makes it easi...
EUVD-2024-55600
IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, and 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 IBM SmartCloud Analytics - Log Analysis does not require that users should have strong passwords by default, which makes it easi...
Understanding Password Preferences, Memorability, and Security through a Human-Centered Lens
Passwords remain the primary authentication method, yet user-created passwords are often the weakest due to the security-usability trade-off. Although AI-based password generators are emerging, little is known about their effectiveness and user perceptions. This eye-tracking study examined how...
CVE-2026-33124
Frigate is a network video recorder NVR with realtime local object detection for IP cameras. Versions prior to 0.17.0-beta1 allow any authenticated user to change their own password without verifying the current password through the /users/username/password endpoint. Changing a password does not...
CVE-2026-33124 Frigate has insecure password change functionality
Frigate is a network video recorder NVR with realtime local object detection for IP cameras. Versions prior to 0.17.0-beta1 allow any authenticated user to change their own password without verifying the current password through the /users/username/password endpoint. Changing a password does not...
CVE-2026-33124 Frigate has insecure password change functionality
Frigate is a network video recorder NVR with realtime local object detection for IP cameras. Versions prior to 0.17.0-beta1 allow any authenticated user to change their own password without verifying the current password through the /users/username/password endpoint. Changing a password does not...
PT-2026-26598
Frigate is a network video recorder NVR with realtime local object detection for IP cameras. Versions prior to 0.17.0-beta1 allow any authenticated user to change their own password without verifying the current password through the /users/username/password endpoint. Changing a password does not...
Multilingual AI-Driven Password Strength Estimation with Similarity-Based Detection
Considering the rise of cyberattacks incidents worldwide, the need to ensure stronger passwords is necessary. Developing a password strength meter PSM can help users create stronger passwords when creating an account on an online platform. This research aimed to explore whether incorporating a...
cyber-security-toolkit
cyber-security-toolkit Python-based Cyber Secu...
Tucows (VDP): Password Strength Policy Bypass via Server-Side Validation Flaw
A password strength policy bypass was discovered due to a server-side validation flaw. The password strength policy was only enforced in the browser, not on the server side...
CVE-2021-33563
Koel before 5.1.4 lacks login throttling, lacks a password strength policy, and shows whether a failed login attempt had a valid username. This might make brute-force attacks easier...
Password Strength Analysis through Social Network Data Exposure: A Combined Approach Relying on Data Reconstruction and Generative Models
Although passwords remain the primary defense against unauthorized access, users often tend to use passwords that are easy to remember. This behavior significantly increases security risks, also due to the fact that traditional password strength evaluation methods are often inadequate. In this...
Enhancing Password Security through a High-Accuracy Scoring Framework Using Random Forests
Password security plays a crucial role in cybersecurity, yet traditional password strength meters, which rely on static rules like character-type requirements, often fail. Such methods are easily bypassed by common password patterns e.g., 'P@ssw0rd1!', giving users a false sense of security. To...
EUVD-2018-11951
Malware in sbrugna...