cupp

CUPP - Perfilador de Contraseñas Comunes de Usuarios Acerca de La forma más común de autenticación es la combinación de un nombre de usuario y una contraseña o frase de paso. Si ambos coinciden con los valores almacenados en una tabla local, el usuario es autenticado para una conexión. La fortale...

CVE-2023-37756-CWE-521-lead-to-malicious-plugin-upload-in-the-i-doit-Pro-25-and-below

CVE-2023-37756 – Weak Password Requirement in admin-center lead to malicious plugin upload in the i-doit Pro 25 and below i-doit Pro 25 and below are vulnerable to weak password requirement vulnerability in admin-center + malicious plugin upload lead to RCE vulnerability. These vulnerabilities...

TomcatScanPro

TomcatScanPro Si crees que este proyecto te ha sido útil, ¡no olvides darle una estrella ⭐! ¡Tu apoyo es la motivación para seguir mejorando y optimizando este proyecto! 😊 Introducción Este proyecto es una herramienta de detección de contraseñas débiles para servicios Tomcat. Además de soportar...

CVE-2021-43469

CVE-2021-43469 익스플로잇 제목: VINGA 라우터에는 취약한 비밀번호와 백그라운드 명령 실행 취약점이 있습니다. 제품: VINGA WR-N300U 웹 서버: goahead 작성자: CXAQHQ 시간: 2021-11-01 로그인 후 Ping 및 traceroute 인터페이스에 명령 실행 취약점이 존재합니다. IP addr 명령 실행 IDA에서 취약점 코드를 살펴봅니다...

PSW Front-end Login & Registration 1.13 - Weak Password Recovery

PSW Front-end Login & Registration plugin for WordPress contains a weak password recovery mechanism that can be exploited by unauthenticated attackers. This vulnerability affects versions through 1.13 and allows attackers to potentially gain unauthorized access. id: CVE-2025-47646 info: name: PSW...

CVE-2025-26326

CVE-2025-26326 Vulnerabilidad de seguridad crítica en los complementos de conexión remota NVDA Remote y Tele NVDA Remote. Esta vulnerabilidad fue registrada como CVE-2025-26326 en CNA MITRE. Esta CVE/vulnerabilidad fue publicada en las siguientes bases de datos globales: NVD, National Institute o...

CVE-2022-25012

Argus Surveillance DVR 4.0 - Weak Password Encryption CVE-2022-25012 Updated version of this weak password encryption script Exploit DB REF: https://www.exploit-db.com/exploits/50130 Author REF: https://deathflash1411.github.io/blog/dvr4-hash-crack NIST REF:...

CentralizedFirewall

Proyecto API de Firewall Manager Instalación Sigue estos pasos para configurar y ejecutar el proyecto de la API: 1. Clonar el repositorio git clone https://github.com/adriyansyah-mf/CentralizedFirewall cd CentralizedFirewall 2. Editar el archivo .env Actualiza las variables de entorno en .env...

CVE-2024-42850

CVE-2024-42850 Un problema en la función de cambio de contraseña de Silverpeas v6.4.2 y versiones anteriores permite omitir los requisitos de complejidad de la contraseña. Informe Al cambiar la contraseña, al enviar la nueva contraseña, esta se envía primero en una solicitud POST a un endpoint qu...

wifi-cracking

Cracking de Wi-Fi Crackea routers Wi-Fi WPA/WPA2 con Airodump-ng y Aircrack-ng/Hashcat. Este es un breve tutorial que ilustra cómo crackear redes Wi-Fi aseguradas con contraseñas débiles. No es exhaustivo, pero debería ser información suficiente para que puedas probar la seguridad de tu propia re...

Teldat-Router-CVE-2022-POC

Enrutador Teldat CVE-2022-39996 y CVE-2022-39997 POC Prueba de concepto para dos vulnerabilidades descubiertas en los enrutadores Teldat RS123 / RS123w. Resumen ID CVE| Tipo| CWE| CVSS| Gravedad ---|---|---|---|--- CVE-2022-39996| XSS Reflejado| CWE-79| 6.1| Media CVE-2022-39997| Contraseña Débil...

woodpecker-plugins

woodpecker-plugins usage Copy the plugins to the woodpecker-framwork/plugin directory and start java -jar woodpecker-framework.1.3.3.jar from https://github.com/woodpecker-appstore weblogic-info check T3 isOpen: echo 't3 12.2.1\nAS:255\nHL:19\nMS:10000000\nPU:t3://us-l-breens:7001\n\n'|nc...

EUVD-2026-95309

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...

CVE-2022-25012

CVE-2022-25012 El DVR de vigilancia Argus v4.0 emplea un cifrado de contraseña débil. Compilación gcc pocland.c -o pocland Ejemplo de uso ./pocland B4A1ECB4F539C48C7357F641C9C49083 Referencias CVE-2022-25012 Más PoCs disponibles en: pocland...

CVE-2026-107829

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...

CVE-2026-107829

Jivejdon versions through 5.0 are vulnerable to a weak password storage issue. The application uses ToolsUtil.hash() in AccountDaoSql to store account passwords as unsalted MD5 digests . If an attacker gains access to the user table via database access or SQL injection , they can crack the passwo...

CVE-2026-107829 Jivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSql

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...

CVE-2022-25012-dvr4-weak-password-encryption

This is an improved version of the exploit by deathflash1411 Original exploit: https://www.exploit-db.com/exploits/50130 Improved Features Cracked password is now output as reconstructed password string instead of only output character by character The encrypted password string is now entered as ...

DBScanner

DBScanner Unauthorized access + weak password batch detection Automatically scan common SQL and No-SQL database scripts on the internal network mysql, mssql, oracle, postgresql, redis, mongodb, memcached, elasticsearch, including unauthorized access and common weak password detection Runs in a...

CVE-2017-11610

Supervisord Remote Command Execution Vulnerability Script CVE-2017-11610 Vulnerability Overview Supervisor is a process management tool written in Python, which can be used to start, restart auto-restart programs, and stop processes not just Python processes on UNIX-like systems Windows is not...