WinboxPoC

WinboxExploit Dies ist ein Proof-of-Concept der kritischen WinBox-Sicherheitslücke CVE-2018-14847, die das Auslesen von Klartext-Passwörtern aus beliebigen Dateien ermöglicht. Die Sicherheitslücke wurde bereits vor langer Zeit behoben, daher ist dieses Projekt beendet und wird nicht mehr...

OneLogicalMyth_Shell

OneLogicalMythShell यह HTA शेल ब्रेकआउट मूल्यांकन में सहायता के लिए बनाया गया था। मैंने इसे शुरू में एक वर्ष से अधिक समय पहले बनाया था और सोचा कि दूसरों को यह उपयोगी लग सकता है, इसलिए अब इसे सार्वजनिक कर दिया है। कृपया बेझिझक पुल रिक्वेस्ट सबमिट करें। विशेषताएँ फ़ाइल एक्सप्लोरर ड्राइव्स सूचीबद्ध...

passgen

🔐 passgen — Passwörter vom Terminal aus generieren Ein kleines Go-CLI, das sichere zufällige Passwörter mit flexiblen Zeichensätzen und Ausschlüssen generiert. Verwendet crypto/rand für kryptografisch sichere Zufälligkeit. Wenn keine Zeichensatz-Flags angegeben werden, sind standardmäßig alle...

fakelogonscreen

FakeLogonScreen FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory or local machine to make sure it is correct and is then displayed to the console or saved to disk. It can either be...

CVE-2025-58443

CVE-2025-58443 Exploit POC für https://github.com/FOGProject/fogproject, welches einen Authentifizierungs-Bypass darstellt, der zu einem vollständigen DB-Dump führt, der Klartext-Passwörter und Benutzer- sowie Admin-Passwort-Hashes enthält. Anfällige Version : 1.5.10.1673 Nachfolgend ein Skript,...

vx-underground-wordlist

vx-underground-wordlist Wordlist altamente ottimizzata per forzare la password dei file .zip di vx-underground in pochissimo tempo...

CVE-2025-29557

CVE-2025-29557 – Divulgazione delle credenziali dell'API MailConfiguration di ExaGrid 📝 Panoramica Titolo della vulnerabilità : Divulgazione delle credenziali SMTP tramite API MailConfiguration Prodotto : Appliance di backup ExaGrid EX10 Versioni interessate : 6.3 – 7.0.1.P08 ID CVE :...

CVE-2023-36144

CVE-2023-36144 PoC für CVE-2023-36144 - Intelbras Switch SG 2404 MR L2+ Firmware 1.00.54 Sicherungsdatei ohne Authentifizierung herunterladen Schritte zur Reproduktion: 1. Rufen Sie den folgenden Link auf: http://127.0.0.1/cgi-bin/exportCfgwithpasswd ersetzen Sie 127.0.0.1 durch die IP-Adresse de...

orbitaldump

OrbitalDump A simple multi-threaded distributed SSH brute-forcing tool written in Python. How it Works When the script is executed without the --proxies switch, it acts just like any other multi-threaded SSH brute-forcing scripts. When the --proxies switch is added, the script pulls a list usuall...

ssh-auditor

SSH Auditor Features ssh-auditor will automatically: Re-check all known hosts as new credentials are added. It will only check the new credentials. Queue a full credential scan on any new host discovered. Queue a full credential scan on any known host whose ssh version or key fingerprint changes...

CVE-2026-79212

A flaw was found in Google Chrome. This vulnerability, stemming from missing authorization in the Passwords component, could allow a remote attacker to bypass the web origin policy. To exploit this, the attacker would first need to compromise the browser's renderer process and employ social...

CVE-2026-79049

A flaw was found in Google Chrome. This vulnerability, caused by incorrect reference resolution in the Passwords component, allows a remote attacker to bypass system access restrictions by providing a specially crafted file. This could lead to unauthorized access to sensitive system resources...

CVE-2026-75896

Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5...

Grafana-CVE-2021-43798

Grafana-CVE-2021-43798 Implementazione in Python di uno strumento per decifrare e cifrare dati sensibili in Grafana, affrontando specificamente le vulnerabilità associate a CVE-2021-43798. Grafana cifra tutte le password delle fonti dati utilizzando l'algoritmo AES con la secretkey presente nel...

Linux Distros Unpatched Vulnerability : CVE-2026-79049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-79207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Passwords in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file...

Linux Distros Unpatched Vulnerability : CVE-2026-79212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged soci...

Linux Distros Unpatched Vulnerability : CVE-2026-79058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elemen...

ad-password-protection

Lithnet Password Protection per Active Directory LPP migliora le opzioni disponibili per un'organizzazione che desidera garantire che tutti i propri account Active Directory abbiano password forti. LPP è un modulo che si installa sui server Active Directory e utilizza un filtro password per...

DEBIAN-CVE-2026-79212

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...