Wordell

Wordell 🌐 Wordellは、WordPressのセキュリティ評価をより効率的かつ包括的に行うために設計された、強力なWordPress列挙スクリプトです。サイトマップの列挙、ユーザー名の発見、WordPressログイン情報の収集、スクリーンショットの撮影、地理データ付きのランダムIPアドレスの生成が可能です。Wordellを使用することで、WordPressのセキュリティテストプロセスを強化し、WordPressインストールにおける潜在的な脆弱性を特定できます。 機能 ✨ ✅ サイトマップ列挙:...

ssh_user_enum

sshenumv0.3.py Verwendung: sshenumv0.3.py Optionen Optionen: root@kitploit: -h, --help Diese Hilfe anzeigen und beenden -u --userlist Eine Datei mit Benutzernamen angeben eine Zeile pro Benutzer -i --ip Das Ziel angeben -m --multiplier Den Multiplikator für das Passwort angeben wird verwendet, um...

o365enum

Office 365 Benutzer-Aufzählung Ermitteln Sie gültige Benutzernamen aus Office 365 mithilfe von ActiveSync, Autodiscover oder der office.com-Anmeldeseite. Verwendung o365enum liest Benutzernamen aus der als erster Parameter angegebenen Datei. Die Datei sollte einen Benutzernamen pro Zeile enthalte...

CVE-2018-15473_exploit

CVE-2018-15473 - OPENSSH 7.7 BENUTZERENUMERATION Abhängigkeiten: https://github.com/pyperanger/crypt-curve25519 Fix-Patch https://metacpan.org/pod/Net::SSH::Perl Referenzen https://seclists.org/oss-sec/2018/q3/125 http://www.openwall.com/lists/oss-security/2018/08/15/5...

tookie-osint

Abbiamo dovuto fare un rebranding 🔎 Panoramica Tookie-osint ha un'interfaccia utente semplice da usare ed è davvero intuitivo. L'idea principale di Tookie-osint è scoprire i nomi utente richiesti da un input. Tookie-osint è simile allo strumento chiamato Sherlock. Scopre tutti gli account utente ...

PoC-CVE-2018-15473

PoC-CVE-2018-15473 O OpenSSH até a versão 7.7 é propenso a uma vulnerabilidade de enumeração de usuários devido ao fato de não atrasar a rejeição de um usuário inválido na autenticação até que o pacote contendo a solicitação seja totalmente analisado, relacionado a auth2-gss.c, auth2-hostbased.c ...

EUVD-2024-16187

The check user account lock states feature within the email OTP flow fails to validate user input, allowing an attacker to infer the existence of registered user accounts. The discovery of valid usernames can increase the risk of brute-force and social engineering attacks. Attackers can leverage...

CVE-2024-0391

The CVE-2024-0391 issue affects WSO2 products with the email OTP flow, where the check user account lock states validation fails, enabling attacker enumeration of registered usernames. This disclosure indicates that valid usernames can be inferred, which could facilitate targeted brute-force or s...

PT-2026-39580

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The check user account lock states feature within the email OTP flow fails to validate user input. This allows an attacker to infer whether specific user account...

RHCOS 3 : Red Hat OpenShift Enterprise 3.1.1 update (Important) (RHSA-2016:0070)

The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0070 advisory. - commons-fileupload: Arbitrary file upload via deserialization CVE-2013-2186 - stapler-adjunct-zeroclipboard: multiple cross-site...

ZKTeco ZKBioSecurity 安全漏洞

ZKTeco ZKBioSecurity is a web-based integrated platform developed by ZKTeco Corporation in China. Version 3.0 of ZKTeco ZKBioSecurity contains security vulnerabilities. These vulnerabilities stem from user enumeration, and could allow unverified attackers to discover valid usernames by submitting...

CVE-2005-1650

The web mail service in Woppoware PostMaster 4.2.2 build 3.2.5 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...

BIT-DISCOURSE-2025-64528 Users are able to find users by name even when `enable_names` is off

Discourse is an open source discussion platform. Prior to versions 3.5.3, 2025.11.1, and 2025.12.0, an attacker who knows part of a username can find the user and their full name via UI or API, even when enablenames is disabled. Versions 3.5.3, 2025.11.1, and 2025.12.0 contain a fix...

PT-2025-48802

Name of the Vulnerable Software and Affected Versions Nagvis Checkmk MultisiteAuth versions prior to 1.9.48 Description An unauthenticated attacker can enumerate Checkmk usernames. This issue affects the user enumeration functionality within the software. Recommendations Update to version 1.9.48 ...

EUVD-2010-0247

Malware in sbrugna...

EUVD-2021-25561

Malware in sbrugna...

EUVD-2009-2664

Malware in sbrugna...

EUVD-2013-4311

Malware in sbrugna...

EUVD-2022-52826

Malicious code in bioql PyPI...

Advisory ROSA-SA-2025-3023

software: kanboard 1.2.47 WASP: ROSA-CHROME unaffected versions = kanboard-1.2.47-0.gitb57deb.4 affected versions kanboard-1.2.47-0.gitb57deb.4 CVE-ID: CVE-2025-52576 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in Kanboard before version 1.2.46 allows existing usernames to be...