CVE-2020-35590

Exploit Information Exploit Title: WordPress Plugin Limit Login Attempts Reloaded 2.13.0 - Login Limit Bypass CVE: CVE-2020-35590 Date: 2020-06-09 Exploit Author: N4nj0 Software Link: https://wordpress.org/plugins/limit-login-attempts-reloaded/ Version: 2.13.0 Tested on: WordPress 5.4.1, 5.4.2...

EUVD-2026-92594

Plane is an open-source project management tool. Prior to 1.4.0, Plane's magic-code email login uses a six-digit numeric OTP with approximately 20 bits of entropy. The verifier has no per-code failed-attempt counter, and an incorrect code does not increment a counter, invalidate the Redis entry, ...

WordPress Simple JWT Login plugin 4.0.0 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Taylsec in WordPress Plugin Simple JWT Login versions 4.0.0...

CVE-2026-24061-lab

CVE-2026-24061 — Reproduction Lab ⚠️ For educational purposes only. Isolated lab environment. Français ci-dessous Summary Critical authentication bypass CVSS 9.8 in GNU InetUtils telnetd ≤ 2.7. By injecting -f root as the USER variable via the Telnet NEWENVIRON option, an unauthenticated attacker...

CVE-2023-4800

CVE ID: CVE-2023-4800 Vulnerability Type: Sensitive Data Exposure Description: The DoLogin Security plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the dashboard widget in versions up to, and including, 3.7. This makes it possible for...

CVE-2024-53591

CVE-2024-53591 Des: An issue in the login page of Seclore v3.27.5.0 allows attackers to enumerate valid domains internal service via a brute force attack. POC: https://company/policyserver/redirectTprepositoryEntryAction.do?repoCode=10006, brute force repoCode parameter to find all hosted domains...

CVE-2024-28999

CVE-2024-28999 Exploit for CVE-2024-28999 SolarWinds Platform Race Condition Vulnerability - login page The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console login page Technical Details:...

CVE-2021-26088

PoC for CVE-2021-26088 written in PowerShell Description An improper authentication vulnerability in FSSO Collector may allow an unauthenticated user to bypass any firewall authentication rule and access the protected network via sending specifically crafted UDP login notification packets...

Zabbix-cve-2022-23131-SSO-bypass

Zabbix-cve-2022-23131-SSO-bypass To bypass the Zabbix SSO login portal,make sure to take the cookie from your browser.Replace it with the one, that is in the script. Make sure to also change the username you wnat to login as and run the exploitmost of the time its going to be "Admin" in Zabbix. N...

Astra Linux – Vulnerability in pam-pkcs11

PAM-PKCS11 is a Linux-PAM login module that enables user login using X.509 certificates. Prior to version 0.6.13, if certpolicy was set to none the default value, then pampkcs11 would only check whether the user was capable of logging into the token. An attacker could create a new token using the...

CVE-2023-4631

CVE ID : CVE-2023-4631 Vulnerability Type : IP Address Spoofing Description : The DoLogin Security plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 3.6. This is due to insufficient restrictions on where the IP Address information is being retrieved for...

WordPress Login Lockdown plugin <= 2.17 - Bypass Vulnerability vulnerability

Bypass Vulnerability vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Login Lockdown versions = 2.17...

bludit-CVE-2019-17240

bludit-CVE-2019-17240 Bypass bludit mitigation login and upload malicious to call a rev shell...

CVE-2026-2991

KiviCare = 4.1.2 - 인증 우회 CVE-2026-2991 PoC 📜 설명 CVE-2026-2991은 KiviCare – Clinic & Patient Management System EHR WordPress 플러그인의 인증 우회 취약점으로, 4.1.2 를 포함한 모든 버전에 영향을 미칩니다. 이 플러그인은 소셜 로그인을 통해 사용자를 인증하는 공개 REST 엔드포인트 /wp-json/kivicare/v1/auth/patient/social-login을 노출합니다. patientSocialLogin 함수는 이메일 주...

wp-def

wp-def Wordpress 기본 사용자 + 비밀번호 Python 2.7 커피 사주기 : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC 사용 방법? Python 2.7 설치 여기서 다운로드 python file.py...

IoT_vuln

POC for TOTOLINK devices: TOTOLINK LR350: CVE-2024-10654 login bypass TOTOLINK T6: CVE-2025-6916 login bypass - for a deeper dive into this CVE, read more at: https://anduinbrian.github.io/posts/blogs/totolink-t6-v3/...

CVE-2026-105233

A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation of the argument PHPSESSID leads to...

CVE-2026-105237

A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminAuthController.java of the component Login Endpoint. The manipulation results in improper restriction of excessive...

pritunl-CVE-2020-25200

CVE-2020-25200 Pritunl VPN server - Affected version: Pritunl v1.29.2145.25 553bbd ========================= Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of /auth/session login attempts. Initially, the server will return error 401. However, if the username i...

CVE-2026-105237 linlinjava litemall Login Endpoint AdminAuthController.java excessive authentication

A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminAuthController.java of the component Login Endpoint. The manipulation results in improper restriction of excessive...