CVE-2017-8295

CVE-2017-8295 Wordpress has a password reset feature that contains a vulnerability which might in some cases allow attackers to get hold of the password reset link without previous authentication. Such attack could lead to an attacker gaining unauthorised access to a victim's WordPress account...

CVE-2024-10508

Unauthenticated Privilege Escalation via Password Recovery on RegistrationMagic = 6.0.2.6 Disclaimer : This information is provided for educational purposes only. This document aims to raise awareness of security vulnerabilities and should not be used for any unauthorized or malicious activities...

token-reverser

Token Reverser 보안 토큰을 크랙하기 위한 단어 목록 생성기. 설치 $ git clone https://github.com/dariusztytko/token-reverser.git 사용 예시 1. 비밀번호 재설정 기능을 테스트 중입니다. 2. 재설정 비밀번호 토큰이 이메일로 전송되었습니다 예: 582431d4c7b57cb4a3570041ffeb7e10. 3. 이 토큰이 가입 시 입력한 데이터의 md5 해시라고 가정합니다. 4. 가입 시 다음 데이터를 입력했습니다: 이름: Foo 성: Bar 이메일:...

CVE-2021-26832

CVE-2021-26832 Suggested description Cross Site Scripting XSS at the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or directing the victim to a malicious site. Vulnerability Type...

CVE-2019-15107

CVE-2019-15107 Webmin RCE Failed to change password : The current password is incorrectuid=0root gid=0root groups=0root python usage: python CVE201915107.py https://10.10.20.166:10000 cmd C:\Users\CTF\Desktoppython CVE201915107.py https://10.10.20.166:10000 id |\ /| ...

CVE-2023-7028

CVE-2023-7028 An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be...

CVE-2024-9464

CVE-2024-9464: Palo Alto Expedition Authenticated Command Injection Proof of concept to exploit CVE-2024-9464 on vulnerable devices. This script chains the admin reset of CVE-2024-5910 to achieve "unauthenticated" arbitrary command execution. Blog Post Root cause and indicators of compromise here...

AfterLife

AFTERLIFE 失効永続化検出ラボ パスワードリセットが成功しても、攻撃者が去らないとき。 単一の脆弱性クラスに焦点を当てたローカルのレッド/ブルーラボ：本来それを無効化するはずの イベントよりも長く生き残る資格情報。 これにはエクスプロイト、根本原因、修正、3ルールの検出パック、ルールが構造的に見ることのできない ものを対象とした状態監査、フォレンジックコンソール — そして 機能しない 検出ルールが含まれ、 失敗を実演するためにリポジトリに保持されている。 クイックスタート · 発見事項 · なぜ素朴な検出は失敗するのか · ルールパック · コンソール · 修正 · マトリクス...

CVE-2020-29669

=============== Macally WIFISD2-2A82 Writeup for CVE-2020-29669 by Maximilian Barz Silky and Daniel Schwendner code-byter ========================== This is a writeup of exploiting the Macally WIFISD2-2A82 Travel Router Firmware version: 2.000.010. The Guest user is able to reset its own password...

CVE-2023-7028

CVE-2023-7028 ⚠️ 이 익스플로잇은 방어 목적으로 사용되며, 사이버보안 전문가가 잠재적으로 취약한 GitLab 서버를 식별하는 데 사용해야 합니다. 설명 CVE-2023-7028 - 사용자 상호작용 없이 비밀번호 재설정을 통한 GitLab Community Edition 및 Enterprise Edition 계정 탈취 영향을 받는 제품 및 버전: 제품| 영향을 받는 버전 ---|--- GitLab Community Edition 및 Enterprise Edition| 16.1.6 16.2.9 16.3.7 16.4.5...

openCRX-CVE-2020-7378

openCRX-CVE-2020-7378 Unauthenticated Account Take Over Exploits Password Reset Vulnerability in OpenCRX, CVE-2020-7378. A Stealthy Python Implentation for CVE-2020-7378 Exploit is because, the developers used Random Class from java.util.Random to generate random tokens in order to reset a users...

wp-jobhunt-exploit

wp-jobhunt-exploit CVE-2018-19487, CVE-2018-19488, exploit for WordPress wp-jobhunt plugin wp-jobhunt plugin is a plugin used with JobCareer theme: https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636 see changelog at the bottom Python exploit for CVE-2018-19487 AJ...

CVE-2026-98313

A flaw was found in the Linux kernel's Qualcomm MSM DisplayPort driver. When display link training fails to initialize the connection, the driver improperly attempts an idle teardown sequence on an unpowered controller. A local user could trigger this condition during display state transitions,...

zerologon-CVE-2020-1472

CVE-2020-1472 - Zero-Logon POC This exploit requires you to use the latest impacket from GitHub. Ensure impacket installation is done with netlogon structures added. Note : 1. By default, successful exploitation changes the password of the DC Account. 2. Allows DCSync 3. Breaks communication with...

CVE-2025-4606

CVE-2025-4606- WordPress Sala Theme = 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover 🔥 Vulnerability Summary The WordPress theme Sala versions = 1.1.4 is vulnerable to an unauthenticated privilege escalation vulnerability. This flaw allows unauthenticated attacke...

nice-cve-poc

Nice CVE PoCs A collection of interesting CVE PoCs CVE-2023-44487 - HTTP/2 Rapid Reset Attack...

challack

Proof-of-concept code for CVE-2016-5696 This code currently allows reseting connections or injecting into sessions. The attack is implemented against both clients and servers. For detailed information, consult the original publication: Off-Path TCP Exploits: Global Rate Limit Considered Dangerous...

zerologon

ZeroLogon 익스플로잇 스크립트 익스플로잇 코드는 https://www.secura.com/blog/zero-logon 및 https://github.com/SecuraBV/CVE-2020-1472 를 기반으로 합니다. 원본 연구 및 스캐너는 Secura, 수정은 RiskSense Inc.가 담당했습니다. 익스플로잇을 위해, 기존에 설치된 Impacket을 모두 제거하고 https://github.com/SecureAuthCorp/impacket/commit/b867b21 또는 그 이상 버전의 Impacket을 설치하세요...

ResetNightmare-impacket

ResetNightmare — CVE-2026-27912 Linux / impacket tooling for CVE-2026-27912 "ResetNightmare". Resets a target Active Directory account's password by requesting a kadmin/changepw TGT for an NTENTERPRISE principal whose name is the target's sAMAccountName, using an account UPNUser on which we can...

CVE-2025-59382-QNAP-Password-Reset-Account-Takeover

CVE-2025-59382: QNAP Password Reset to Account Takeover Unauthenticated attacker-controlled password reset URL in /cgi-bin/resetpassword.cgi. Tested against QuTScloud c5.2.4.3041 build 20250211 in a lab. QNAP later published this as CVE-2025-59382 in advisory QSA-26-10. Short version An...