Lucene search
+L

13 matches found

Kitploit
Kitploit
added 2026/09/01 1:55 a.m.2 views

wifi-password

wifi-password 快速获取你的 WiFi 密码,如果需要,生成 WiFi 二维码,方便手机轻松连接。 适用于 macOS 、Linux 和 Windows 安装 使用 pip 安装 root@kitploit: $ python3 -m pip install --user wifi-password 使用 git 安装 root@kitploit: $ git clone https://github.com/sdushantha/wifi-password $ cd wifi-password $ python3 setup.py install 使用 AUR 安装 使用...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/01 1:55 a.m.54 views

wifi-password

wifi-password Quickly fetch your WiFi password and if needed, generate a QR code of your WiFi to allow phones to easily connect. Works on macOS and Linux , Windows Installation Install using pip root@kitploit: $ python3 -m pip install --user wifi-password Install using git root@kitploit: $ git...

5.6AI score
SaveExploits0
EUVD
EUVD
added 2026/08/28 9:31 p.m.8 views

EUVD-2026-66418

The vulnerability allows the unauthorised generation of physical access QR codes due to the use of hard-coded credentials within the application. The generation mechanism uses the 'badgenumber' parameter as the HMAC private key, the value of which remains static and is accessible via the API usin...

8.6CVSS5.2AI score0.00243EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/26 1:17 p.m.7 views

CVE-2026-12587

The vulnerability allows the unauthorised generation of physical access QR codes due to the use of hard-coded credentials within the application. The generation mechanism uses the 'badgenumber' parameter as the HMAC private key, the value of which remains static and is accessible via the API usin...

8.6CVSS0.00243EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/26 12:20 p.m.35 views

CVE-2026-12587 Embedded credentials in Virtuagym

The vulnerability allows the unauthorised generation of physical access QR codes due to the use of hard-coded credentials within the application. The generation mechanism uses the 'badgenumber' parameter as the HMAC private key, the value of which remains static and is accessible via the API usin...

8.6CVSS0.00243EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/26 12:20 p.m.14 views

CVE-2026-12587

CVE-2026-12587 affects the Virtuagym application, where a static, hard-coded badge_number parameter is used as the HMAC private key for generating physical access QR codes. This value is exposed via the API endpoint /club/_id_club_/member/_id_member_/resamania_qr_info, and the cryptographic logic...

8.6CVSS5.2AI score0.00243EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/20 12:00 a.m.16 views

Riftzilla QRGen cross-site scripting vulnerability

Riftzilla QRGen is a QR code generation and management system developed by the Riftzilla team. Riftzilla QRGen has a cross-site scripting vulnerability. This vulnerability stems from the id parameter in the/article.php file, which allows for reflective cross-site scripting, potentially enabling...

5.1CVSS5.7AI score0.0033EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2018-0674

Malware in sbrugna...

7.5CVSS7.6AI score0.01642EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2021-25394

Malware in sbrugna...

7.5CVSS5.2AI score0.00969EPSS
SaveExploits0References3
OSV
OSV
added 2022/01/10 2:10 p.m.12 views

CVE-2021-38957

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validation during QR code generation. IBM X-Force ID: 212040...

7.5CVSS7.1AI score0.00969EPSS
SaveExploits0References2
Prion
Prion
added 2022/01/10 2:10 p.m.23 views

Input validation

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validation during QR code generation. IBM X-Force ID: 212040...

5CVSS7.5AI score0.00969EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/01/07 5:55 p.m.49 views

CVE-2021-38957

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validation during QR code generation. IBM X-Force ID: 212040...

3.1CVSS7.2AI score0.00969EPSS
SaveExploits0References2
CVE
CVE
added 2017/12/29 3:00 p.m.94 views

CVE-2014-3651

Affected product: JBoss KeyCloak before 1.0.3.Final. Vulnerability: remote attackers can cause denial of service by sending a large value in the size parameter to auth/qrcode, related to QR code generation (resource consumption). Root cause: excessive resource usage leading to DoS. Impact: availa...

7.5CVSS7.4AI score0.01642EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder