271 matches found
e013
e013 Небольшой VBScript, который крадет пароли Wi-Fi из Windows В файле WifiName.txt вы увидите пароль каждой сохраненной сети Wi-Fi, доступной на любом компьютере с Windows, поддерживающем VBscript ⚠️ Не изменяйте скрипт в Блокноте, используйте текстовый редактор например, GNU Emacs, Vim, Atom,...
CredPhish
CredPhish — это скрипт PowerShell, предназначенный для вызова запросов учётных данных и эксфильтрации паролей. Он использует CredentialPicker для сбора паролей пользователей, Resolve-DnsName для эксфильтрации через DNS и Windows Defender ConfigSecurityPolicy.exe для выполнения произвольных...
WifiPassword-Stealer
WifiPassword-Stealer Получить все сохраненные пароли Wi-Fi с целевого компьютера. УСТАНОВКА если вы используете python файл root@kitploit: pip install smtplib pip install subprocess pip install glob ИСПОЛЬЗОВАНИЕ •Создайте аккаунт на "https://mailtrap.io/" используя временную почту. •Укажите свой...
CVE-2023-24055
Отказ от ответственности Этот скрипт предназначен только для образовательных и демонстрационных целей. Автор не одобряет и не потворствует использованию этого скрипта в каких-либо преступных или злонамеренных действиях, и его следует использовать только там, где это явно разрешено с...
sleepall
sleepall Троян на основе ошибки CVE-2024-28085 https://people.rit.edu/sjf5462/6831711781/wall2272024.txt которая не исправлена еще нигде. Суть: bash поддерживает escape коды и мы можем управлять формой строки в терминале. Троян слушает процессы и ищет pid команды sudo, узнает его родителя и убива...
Linux Distros Unpatched Vulnerability : CVE-2026-55856
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, when a Java...
PT-2026-83771
Name of the Vulnerable Software and Affected Versions ZTE ZXDU68 S202 affected versions not specified Description Command injection flaws allow attackers to delete core system runtime files, which leads to the crash and paralysis of the monitoring module. Additionally, attackers can obtain root...
Exploit for CVE-2026-64638
CVE-2026-64638 — XSS2Shell WordPress Pre-Auth Reflected XSS...
EUVD-2026-52660
In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS1 v1.5 padding and other authentication failures, allowing an on-path attacker who captures a victim's Basic128Rsa15-encrypted username token to use repeated unauthenticated...
OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia
Introduction We have been tracking two new backdoors, OctLurk and SilkLurk , observed in attacks against government organizations primarily in Central Asia since January 2025. Identified victims are located in Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab...
Drupal plugin "AI Agents" vulnerable to incorrect authorization
Overview AI Agents provided by Drupal contains the vulnerability listed below. Incorrect authorization CWE-863 - CVE-2026-13236 Kuniyoshi Noguchi @KuniNogu reported this vulnerability to the developer and IPA. JPCERT/CC coordinated with the developer to publish the advisory under Information...
CVE-2026-47840
CVE-2026-47840 concerns LDAP StartTLS with UAA: a network attacker between UAA and its LDAP directory can impersonate the directory using any trusted certificate, harvest LDAP bind passwords and end-user passwords during simple-bind, and return forged group memberships that grant admin scopes. Af...
CVE-2026-47840 - LDAP StartTLS unconditionally disables hostname verification | Cloud Foundry
Severity High CVSS score: 8.3 High CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVSS score: 7.5 High CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N/RL:O Vendor CloudFoundry Foundation Versions Affected Severity is High unless otherwise noted. UAA All versions prior to v78.13.0...
Pirated PC games are delivering password-stealing malware
A new Windows malware campaign hides inside pirated PC games and modified installers for franchises like Far Cry, Need for Speed, FIFA, and Assassin’s Creed. Researchers estimate that more than 400,000 devices worldwide have been infected, with around 30,000 users in the US. The infection method ...
Reaper macOS Infostealer Abuses Script Editor to Steal Crypto and Passwords
Threat actors are deploying an updated SHub Stealer variant named Reaper that exploits the native macOS Script Editor to bypass OS-level protections and compromise cryptocurrency assets...
Fake BlueWallet steals passwords, accounts, and crypto from Macs
A fake website impersonating BlueWallet a real Bitcoin wallet is targeting Mac users with a simple but effective attack. BlueWallet itself has not been compromised. Instead, cybercriminals have stolen the name and branding of the legitimate Bitcoin wallet to make a malicious download appear...
CVE-2026-25608
CVE-2026-25608 (STER) : The vulnerability involves unencrypted TCP traffic used by STER to transmit data, enabling a Man-In-The-Middle attacker to obtain sensitive information such as passwords, personal data, or authentication tokens. The underlying risk is data confidentiality loss during netwo...
Fake Job Interview Apps Drop JobStealer Malware on Windows and macOS
Hackers are using Fake interview apps to spread JobStealer malware on macOS and Windows to steal crypto wallets, browser data, and passwords...
Bogus Avast website fakes virus scan, installs Venom Stealer instead
A fake website impersonating Avast antivirus is tricking people into infecting their own computers. The site looks legitimate, runs what appears to be a virus scan, and claims your system is full of threats. But the results are fake: when you’re prompted to “fix” the problem, the download you’re...