smb

SMB Un pacchetto Go per comunicare su SMB. Attualmente esiste solo una funzionalità minima per le funzioni lato client. root@kitploit: package main import "log" "github.com/stacktitan/smb/smb" func main host := "172.16.248.192" options := smb.Options Host: host, Port: 445, User: "alice", Domain:...

crackerjack

!CAUTION Dieses Repository ist nicht mehr gewartet, besuchen Sie https://github.com/sadreck/crackerjack für die neueste Version. CrackerJack Web-Oberfläche für Hashcat von Context Information Security Inhaltsverzeichnis Einführung Architektur Funktionen Einschränkungen Installation Fehlerbehebung...

penelope

Penelope ist ein moderner Shell-Handler für Penetrationstester und CTF-Spieler. Er bietet eine leistungsfähigere Alternative zu einfachen Netcat-Listenern und fügt automatische PTY-Upgrades, Sitzungsverwaltung, Protokollierung, Dateiübertragungen und Hilfsmodule hinzu. Inhaltsverzeichnis 📥...

openclaw-dashboard

Painel do Agente OpenClaw Um painel de monitoramento em tempo real, bonito e seguro, para agentes OpenClaw. Acompanhe sessões, monitore o uso da API, visualize custos, gerencie arquivos de memória e mantenha-se atualizado sobre a saúde do sistema — tudo em um só lugar. 📸 Capturas de Tela Visão...

CVE-2024-44000-LiteSpeed-Cache

إثبات اختراق LiteSpeed Cache CVE-2024-44000 CVE-2024-44000 هي ثغرة في إضافة LiteSpeed Cache، وهي إضافة ووردبريس شائعة. تؤثر هذه الثغرة على إدارة الجلسات في LiteSpeed Cache، مما يسمح للمهاجمين بالوصول غير المصرح به إلى البيانات الحساسة. يعمل السكربت وفق الخطوات التالية: 1. استخراج ملفات تعريف...

CVE-2024-44000-LiteSpeed-Cache

CVE-2024-44000-LiteSpeed-Cache CVE-2024-44000 è una vulnerabilità nel plugin LiteSpeed Cache, un popolare plugin WordPress. Questa vulnerabilità riguarda la gestione delle sessioni in LiteSpeed Cache, consentendo agli aggressori di ottenere accesso non autorizzato a dati sensibili. Anteprima Come...

CVE-2026-24166

NVIDIA UFM Enterprise has a vulnerability in its session management component caused by a hard-coded cryptographic key . An attacker with local access could exploit this to extract information, potentially leading to information disclosure and escalation of privileges . The CVSS 3.1 score is 5.1 ...

EUVD-2026-65612

NVIDIA UFM Enterprise contains a vulnerability in the session management component, where an attacker could use a hard-coded cryptographic key to extract information. A successful exploit of this vulnerability might lead to information disclosure and escalation of privileges...

TYPO3-EXT-SA-2026-015: Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-015...

POS Codekop v2.0 - Broken Authentication

A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data. id: CVE-2023-36347 info: name: POS Codekop v2.0 - Broken Authentication author: princechaddha severity: high description: | A broken authentication mechanism ...

Tenda AC1200 V-W15Ev2 - Authentication Bypass

The Tenda AC1200 V-W15Ev2 router is affected by improper authorization/improper session management. The software does not perform or incorrectly perform an authorization check when a user attempts to access a resource or perform an action. This allows the router's login page to be bypassed. The...

CVE-2025-54309__Enhanced_exploit

CVE-2025-54309Exploitmigliorato Questa è una versione migliorata del POC dell'exploit creato originariamente da watchtowrlabs : https://github.com/watchtowrlabs/watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309 un enorme ringraziamento a loro!! Questo exploit è destinato a scopi di ricer...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

CVE-2025-24813-PoC-Apache-Tomcat-RCE

Apache Tomcat CVE-2025-24813 Prova di concetto PoC Un exploit proof-of-concept per la vulnerabilità di deserializzazione di Apache Tomcat CVE-2025-24813. Questo strumento dimostra come gli attaccanti potrebbero sfruttare la deserializzazione insicura nella gestione delle sessioni di Tomcat...

EUVD-2026-63221

An unauthenticated remote attacker in possession of a valid session identifier is able to continue using the session after it should have expired. This increases the risk associated with stolen, leaked, shared, or unattended sessions and may enable unauthorized continued access to the FDS web...

EUVD-2026-62454

phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure counter is session-scoped and reset on each successful password re-authentication. Attackers with a valid password can bypass the five-attempt limit by obtaining a fresh session cook...

EUVD-2026-62206

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...

CVE-2026-21582

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...

CVE-2026-65984

FUXA (web-based SCADA/HMI/Dashboard software) versions 1.3.2 and earlier contain a JWT lifecycle flaw in two endpoints: POST /api/refresh in server/api/auth/index.js falls back to decoded.groups when the user record is missing or groups is zero, and POST /api/heartbeat in server/api/index.js re-s...

CVE-2026-65984 FUXA: JWT lifecycle flaws allow deleted or demoted users to retain privileged sessions

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, POST /api/refresh in server/api/auth/index.js falls back from current user data to decoded.groups, including when the user is deleted or groups is zero, and POST /api/heartbeat in server/api/index.js...