cve-2020-16012

यह रिपॉजिटरी CVE-2020-16012 के लिए PoCs शामिल करती है, जो Firefox और Chromium में CanvasRenderingContext2D.drawImage के कार्यान्वयन में एक साइड चैनल भेद्यता है। इस भेद्यता का विवरण पढ़ें Mozilla Attack & Defense ब्लॉग पर। benchmark के अंदर संलग्न कार्यों के समय को मापने के लिए कोड है, साथ ही Linu...

slipstream

NAT Slipstreaming NAT Slipstreaming allows an attacker to remotely access any TCP/UDP service bound to any system behind a victim's NAT, bypassing the victim's NAT/firewall remote arbitrary firewall pinhole control, just by the victim visiting a website. v1 developed by : @SamyKamkar //...

Moderate: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

CVE-2025-68621

CVE-2025-68621 — Timing-Angriff auf /api/login/sync in Trilium Notes Schweregrad: HIGH CVSS 7.4 Betroffene Software: TriliumNext/Trilium 0.101.0 Schwachstellentyp: CWE-208 – Beobachtbare Timing-Diskrepanz Observable Timing Discrepancy Behoben in: Trilium 0.101.0 PR 8129 Veröffentlicht: 2026-02-06...

CVE-2016-6210

CVE-2016-6210 Enumerazione dei nomi utente contro i daemon SSH affetti da CVE-2016-6210. Usalo solo contro i tuoi host! Attaccare sistemi su cui non sei autorizzato potrebbe metterti nei guai seri! INSTALLAZIONE Clona il repository: root@kitploit: git clone...

lucky13

LUCKY13 Exploit Questo repository contiene un exploit proof-of-concept POC per la vulnerabilità LUCKY13 CVE-2013-0169, che è un attacco di temporizzazione contro alcune implementazioni della modalità CBC Cipher Block Chaining nei sistemi crittografici. L'exploit mira a decifrare un token target...

ch55x_firmware_extractor

Extrator de firmware CH55x O extrator de firmware CH55x é utilizado para ler o firmware de circuitos integrados CH55x. Não há suporte interno nos dispositivos para ler diretamente o firmware através do bootloader. No entanto, existe uma funcionalidade para verificar o conteúdo do firmware de 8 em...

sap_bo_launchpad-ssrf-timing_attack

SAP BusinessObjects Launchpad SSRF & Timing Attack PoC Dieses Python-Skript ist ein Proof-of-Concept PoC zur Durchführung von SSRF Server-Side Request Forgery und Timing-Angriffen gegen SAP BusinessObjects Launchpad. Es wurde entwickelt, um Sicherheitsforschern und -experten dabei zu helfen, offe...

ssh_user_enum

sshenumv0.3.py Uso: sshenumv0.3.py opções Opções: root@kitploit: -h, --help Mostra esta mensagem de ajuda e sai -u --userlist Especifica um arquivo de nomes de usuário delimitado por novas linhas -i --ip Especifica o alvo -m --multiplier Especifica o multiplicador para a senha usado para causar o...

CVE-2016-6210-Exploit

Esta é a primeira versão do exploit "armamentado" para CVE-2016-6210 Contexto: Postado por Eddie Harari no Full Disclosure http://seclists.org/fulldisclosure/2016/Jul/51 O resumo: Ao enviar senhas grandes, um usuário remoto pode enumerar usuários em um sistema que executa SSHD. Esse problema exis...

CVE-2016-6210-exploit

CVE-2016-6210-exploit Exploit personalizado python 2.7 escrito para enumerar nomes de usuário conforme CVE-2016-6210 OpenSSH 7.2-p2 e anteriores deve ser usado apenas em sistemas autorizados DESCRIÇÃO Escrevi este programa como uma ferramenta para explorar o CVE-2016-6210, que é uma vulnerabilida...

wp_drupal_timing_attack

wpdrupaltimingattack Script Python per sfruttare CVE-2014-9016 e CVE-2014-9034. Solo per scopi legali...

sniffly

Sniffly2 Sniffly2 is a variant of Sniffly which abuses HTTP Strict Transport Security headers and the Performance Timing API in order to sniff your browsing history in Chromium-based browsers. Demo Visit http://diracdeltas.github.io/sniffly in Chrome/Chromium/Brave/etc. with HTTPS Everywhere...

CVE-2026-72700

The getgrav/grav-plugin-login Composer plugin before 3.9.1 used by Grav compares password reset and account activation tokens using a non-constant-time === string comparison instead of hashequals in classes/Controller.php taskReset and login.php activation handler. Because the token-submission...

CVE-2026-72701

Grav CMS before 2.0.16 is affected by a timing side-channel vulnerability in Utils::verifyNonce(). The function uses a non-constant-time string comparison (the === operator) instead of PHP's hash_equals() when validating CSRF nonces . An attacker can measure response-time differences across multi...

CVE-2026-72700 Grav before 3.9.1 Timing Attack via Non-Constant-Time Token Comparison

The getgrav/grav-plugin-login Composer plugin before 3.9.1 used by Grav compares password reset and account activation tokens using a non-constant-time === string comparison instead of hashequals in classes/Controller.php taskReset and login.php activation handler. Because the token-submission...

CVE-2026-72700

The getgrav/grav-plugin-login Composer plugin (used by Grav CMS ) before version 3.9.1 compares password reset and account activation tokens using a non-constant-time === string comparison instead of hash_equals() in classes/Controller.php (taskReset()) and login.php (activation handler). Because...

CVE-2026-78551

RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to enumerate valid usernames, perform unrestricted password-guessing attacks, and potentially exhaust application worker resources. For local authentication, the login implementati...

EUVD-2026-65085

RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to enumerate valid usernames, perform unrestricted password-guessing attacks, and potentially exhaust application worker resources. For local authentication, the login implementati...

CVE-2026-78551 RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts

RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to enumerate valid usernames, perform unrestricted password-guessing attacks, and potentially exhaust application worker resources. For local authentication, the login implementati...