maswe

OWASP Mobile Application Security Weakness Enumeration MASWE OWASP Mobile Application Security Weakness Enumeration MASWE — это перечень распространённых уязвимостей безопасности и конфиденциальности в мобильных приложениях. Он предназначен для использования в качестве справочника разработчиками,...

JKS-private-key-cracker-hashcat

JKS private key cracker - Гвоздь в крышку гроба JKS Java Key Store JKS — это способ хранения одного или нескольких криптографических закрытых и открытых ключей для асимметричной криптографии в файле, принятый в Java. Хотя существуют различные форматы хранилищ ключей, Java и Android по-прежнему по...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

cumulus

Application Weakness Monitoring Software What's Cumulus Cumulus is a service that helps you monitor and fix security weakness in realtime. The issues will be reported on web dashboard. It's very simple and powerful. Key features Just install SDK to web front, can be found security weakness on...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

pmkidcracker

PMKID WPA2 Cracker This program is a tool written in Python to recover the pre-shared key of a WPA2 WiFi network without any de-authentication or requiring any clients to be on the network. It targets the weakness of certain access points advertising the PMKID value in EAPOL message 1. Program...

CVE-2020-9289

Déchiffrer les secrets de configuration de FortiManager CVE-2020-9289 CVE-2020-9289 et CVE-2019-6693 sont liées à la même clé par défaut et codée en dur. Les seules différences dans la routine de déchiffrement implémentée dans FortiManager/FortiAnalyzer sont : La gestion de l'IV les 16 octets...

Autorize

Autorize Autorize est une extension open source de détection automatique du respect des autorisations et de l'authentification pour Burp Suite. Elle est conçue pour aider les ingénieurs en sécurité applicative et les testeurs d'intrusion à identifier les contournements d'autorisation et les...

CVE-2019-6447

CVE-2019-6447 Вышеуказанное исследование уязвимости безопасности файлового браузера ES позволяет нам увидеть проблему во всей ее полноте...

modoboa 2.0.4 - Admin TakeOver

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4. id: CVE-2023-0777 info: name: modoboa 2.0.4 - Admin TakeOver author: r3Y3r53 severity: critical description: | Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to...

WP Directory Kit <= 1.4.4 - Authentication Bypass

The WP Directory Kit plugin for WordPress version 1.4.4 and below contains an authentication bypass vulnerability in its auto-login functionality. The vulnerability allows unauthenticated attackers to gain administrative access by exploiting a cryptographically weak token generation mechanism tha...

ble-cve2025-attack-new-version

ble-cve2025-attack-new-version android-ble-cve-2025-4866 🔐 PoC pour CVE-2025-4866 — Vulnérabilité Android BLE version publique 📡 Exploitation de la faille d'autorisation BLE sur les appareils Android PoC public uniquement. 👨💻 Développé par BloodCode Labs — 2025...

wibu-codemeter-analysis

Analyse cryptographique de la DLL WIBU CodeMeter Recherche indépendante en sécurité sur la protection CodeMeter de WIBU-Systems Divulgation responsable Fournisseur informé : 24 décembre 2025 Période de divulgation : 90 jours Publication publique : 24 mars 2026 Périmètre : Analyse de WibuBz32.dll...

meshtastic-cve-2025-52464-poc

Meshtastic CVE-2025-52464: доказательство концепции Обзор Этот проект представляет собой чисто программное доказательство концепции, демонстрирующее CVE-2025-52464 — уязвимость, затрагивающую версии прошивки Meshtastic с 2.5.0 по 2.6.10. Реализация воспроизводит криптографическое поведение уязвим...

CVE-2022-25012

CVE-2022-25012 Argus Surveillance DVR v4.0 utilise un chiffrement de mot de passe faible. Compilation gcc pocland.c -o pocland Exemple d'utilisation ./pocland B4A1ECB4F539C48C7357F641C9C49083 Références CVE-2022-25012 Plus de PoCs disponibles sur : pocland...

CVE-2025-69821-Beat-XP-Vega-Smartwatch-Security-Assessment

CVE-2025-69821 : Beat-XP-Vega-Smartwatch-Security-Assessment Une évaluation de sécurité de la montre intelligente Beat XP VEGA Firmware RB303ATV006229 axée sur la connectivité Bluetooth Low Energy BLE a révélé une faiblesse de conception et d'implémentation qui permet à un dispositif central BLE ...

cve-2026-20833-rc4-kerberos

CVE-2026-20833 — Усиление безопасности Kerberos RC4 Этот репозиторий объединяет техническую документацию , PowerShell-скрипты , панели мониторинга Power BI и официальные ссылки на Microsoft , связанные с поэтапным отказом от RC4 в Kerberos для сред Active Directory , в рамках изменений безопаснос...

CVE-2026-102128

An identity-verification weakness in Kiteworks Email Protection Gateway allowed the gateway to act on the Kiteworks platform on behalf of a user it had not authenticated, and to provision a platform account for an identity it did not already know. A remote, unauthenticated sender could potentiall...

TencentOS Server 4: libevent (TSSA-2026:1051)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1051 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

PT-2026-103561

Name of the Vulnerable Software and Affected Versions Kiteworks Email Protection Gateway affected versions not specified Description An identity-verification weakness allows the gateway to act on the Kiteworks platform on behalf of an unauthenticated user and provision a platform account for an...