EUVD-2026-68177

A vulnerability was determined in Beetel 450TC3 01.00.0001. This affects an unknown part. Executing a manipulation can lead to weak password recovery. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this...

CVE-2026-82487

Beetel 450TC3 router (firmware 01.00.00_01 ) is affected by a weak password recovery vulnerability that enables authenticated privilege escalation . The attack is executable remotely with low privileges and no user interaction. The affected component is described as an unknown part in the provide...

passwordcheck

passwordcheck لملفات إعداد rclone في https://github.com/rclone/rclone/issues/4783 تم اكتشاف مشكلة أمنية تعني أن كلمات المرور التي تم إنشاؤها بواسطة "rclone config" قد تكون غير آمنة. يقوم هذا البرنامج بفحص ملف إعداد rclone لديك بحثًا عن أيٍّ من كلمات المرور هذه. التثبيت قم بتنزيل ملف zip المناسب...

CVE-2022-25012-dvr4-weak-password-encryption

This is an improved version of the exploit by deathflash1411 Original exploit: https://www.exploit-db.com/exploits/50130 Improved Features Cracked password is now output as reconstructed password string instead of only output character by character The encrypted password string is now entered as ...

PSW Front-end Login & Registration 1.13 - Weak Password Recovery

PSW Front-end Login & Registration plugin for WordPress contains a weak password recovery mechanism that can be exploited by unauthenticated attackers. This vulnerability affects versions through 1.13 and allows attackers to potentially gain unauthorized access. id: CVE-2025-47646 info: name: PSW...

wifi-cracking

Wi-Fi Cracking Cracka router Wi-Fi WPA/WPA2 con Airodump-ng e Aircrack-ng/Hashcat. Questo è un breve tutorial illustrativo che mostra come violare reti Wi-Fi protette con password deboli. Non è esaustivo, ma dovrebbe fornire informazioni sufficienti per testare la sicurezza della propria rete o p...

CVE-2022-25012

Argus Surveillance DVR 4.0 - Crittografia debole delle password CVE-2022-25012 Versione aggiornata di questo script di crittografia debole delle password Exploit DB REF: https://www.exploit-db.com/exploits/50130 Author REF: https://deathflash1411.github.io/blog/dvr4-hash-crack NIST REF:...

CentralizedFirewall

Progetto API Firewall Manager Installazione Segui questi passaggi per configurare ed eseguire il progetto API: 1. Clona il Repository root@kitploit: git clone https://github.com/adriyansyah-mf/CentralizedFirewall cd CentralizedFirewall 2. Modifica il file .env Aggiorna le variabili d'ambiente in...

CVE-2024-1346

CVE-2024-1346 Schwaches MySQL-Datenbank-Root-Passwort in LaborOfficeFree betrifft Version 19.10. Diese Schwachstelle ermöglicht es einem Angreifer, das Root-Passwort der von LaborOfficeFree verwendeten MySQL-Datenbank mithilfe von zwei Konstanten zu berechnen. Exploit-Titel: LaborOfficeFree 19.10...

woodpecker-plugins

woodpecker-plugins utilizzo Copia i plugin nella directory woodpecker-framwork/plugin, quindi avvia java -jar woodpecker-framework.1.3.3.jar da https://github.com/woodpecker-appstore weblogic-info verifica se T3 è aperto: root@kitploit: echo 't3...

CVE-2017-11610

Script per la vulnerabilità di esecuzione remota di comandi in Supervisord CVE-2017-11610 Introduzione alla vulnerabilità Supervisor è uno strumento di gestione dei processi scritto in Python, che può essere utilizzato molto comodamente su sistemi UNIX-like non supporta Windows per avviare,...

cupp

CUPP - Profiler für häufige Benutzerpasswörter Über Die häufigste Form der Authentifizierung ist die Kombination aus einem Benutzernamen und einem Passwort oder einer Passphrase. Wenn beide mit den in einer lokal gespeicherten Tabelle hinterlegten Werten übereinstimmen, wird der Benutzer für eine...

Teldat-Router-CVE-2022-POC

Teldat Router CVE-2022-39996 e CVE-2022-39997 POC Proof of Concept per due vulnerabilità scoperte nei router Teldat RS123 / RS123w. Panoramica CVE ID| Tipo| CWE| CVSS| Gravità ---|---|---|---|--- CVE-2022-39996| XSS Riflesso| CWE-79| 6.1| Media CVE-2022-39997| Password Debole| CWE-521| 9.8| Criti...

CVE-2026-80211

FrontAccounting through 2.4.20 stores and verifies user passwords as unsalted MD5 digests. admin/users.php passes md5$POST'password' to adduser and updateuserpassword, admin/changecurrentuserpassword.php does the same when a user changes their own password, the forgotten-password path in...

CVE-2024-42850

CVE-2024-42850 Uma falha na função de alteração de senha do Silverpeas v6.4.2 e versões anteriores permite ignorar os requisitos de complexidade de senha. Análise Ao alterar sua senha, ao enviar a nova senha, a senha é primeiro enviada em uma requisição POST para um endpoint que verifica se a sen...

DBScanner

DBScanner Detecção em lote de acesso não autorizado + senhas fracas Script de varredura automática de bancos de dados SQL e No-SQL comuns em redes internas mysql, mssql, oracle, postgresql, redis, mongodb, memcached, elasticsearch, incluindo detecção de acesso não autorizado e senhas fracas comun...

Hscan

Hscan-Win-Gui HScan v1.20 Bedienungsanleitung 1. Systemanforderungen: Windows NT/2000/XP 2. Softwareüberblick: root@kitploit: Mehrthreading-Untersuchung angegebener IP-Bereiche angegebene Hosts oder Hostlisten. GUI- und Befehlszeilenmodus. Scanoptionen: -name --- Hostnamen abrufen; -port ---...

CVE-2021-43469

CVE-2021-43469 Titre de l'exploit : Le routeur VINGA présente des mots de passe faibles et des vulnérabilités d'exécution de commandes en arrière-plan. produit : VINGA WR-N300U serveur web : goahead Auteur : CXAQHQ DATE : 2021-11-01 Des vulnérabilités d'exécution de commandes existent sur les...

CVE-2022-25012

CVE-2022-25012 Argus Surveillance DVR v4.0 impiega una crittografia debole delle password. Compilazione root@kitploit: gcc pocland.c -o pocland Esempio di utilizzo root@kitploit: ./pocland B4A1ECB4F539C48C7357F641C9C49083 Riferimenti CVE-2022-25012 Altri PoC disponibili su: pocland...

TomcatScanPro

TomcatScanPro root@kitploit: Se ritieni che questo progetto ti sia utile, non dimenticare di cliccare su Star ⭐! Il tuo supporto è la nostra motivazione per continuare a ottimizzare e migliorare questo progetto! 😊 Introduzione Questo progetto è un rilevamento di password deboli per il servizio...