CVE-2026-21006-Zigbee-Light-Link-Factory-Reset-Exploit

CVE-2026-21006 – Zigbee Light Link ファクトリーリセットエクスプロイト プログラムコード Python Zigbee シミュレーション zigbeefactoryreset.py - Simulated Zigbee coordinator sending factory reset command import time class ZigbeeDevice: def initself: self.networkkey = b'secret' def receivecommandself, cmdid: if cmdid == 0x00: Factor...

CVE-2026-18963

CVE-2026-18963 Keycloak Reset-Credentials State Bypass Detector https://github.com/user-attachments/assets/005fab89-339a-4e4e-881c-da6a626f6c9e python3 kc-resetforge.py -h usage: kc-resetforge.py -h --target TARGET --targets-file TARGETSFILE --port PORT --realm REALM --client-id CLIENTID --userna...

CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC

CVE-2023-27372 — SPIP SPIP 4.2.1 이전 버전의 인증되지 않은 원격 코드 실행 취약점입니다. 비밀번호 재설정 양식의 oubli 매개변수는 역직렬화 처리 오류로 인해 PHP 객체 주입에 취약합니다. 조작된 직렬화 페이로드가 웹 사용자 권한으로 서버 측에서 실행되며, 출력은 응답의 oubli 입력 필드 값에 그대로 반영됩니다. 작동 방식 1. /spip.php?page=spippass에서 anti-CSRF 토큰을 가져옵니다. 2. oubli 매개변수에 PHP 직렬화 페이로드를 주입한 POST 요청을 보냅니다...

CVE-2025-53580

CVE-2025-53580 WordPress Simple Business Directory Pro 플러그인 15.6.9는 높은 우선순위의 권한 상승에 취약합니다 CVE-2025-53580 Simple Business Directory Pro — 잘못된 권한 할당 → 비밀번호 재설정 → 관리자 장악 / | |// / / / | | / | / \ / \ | | | \ /| | / | | /| /| | | | | / -----/ | |/ ----- \ \ / | | / / / //// //// / ❶ 취약점...

CVE-2026-94541: Missing Authorization

The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.82 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attacke...

PT-2026-104278

YesWiki before 4.6.7 contains an insufficient session expiration vulnerability that allows attackers to reuse old password reset links because tokens lack expiry timestamps. Attackers who obtain an unused reset URL from mailboxes, logs, backups, or browser history can submit a new password throug...

CVE-2026-82043: Observable Response Discrepancy

UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...

JetBrains TeamCity < 2025.11.8 / 2026.1.x < 2026.1.4 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.8, or 2026.1.x prior to 2026.1.4. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the...

CVE-2026-104468: Insufficient Session Expiration

YesWiki before 4.6.7 contains an insufficient session expiration vulnerability that allows attackers to reuse old password reset links because tokens lack expiry timestamps. Attackers who obtain an unused reset URL from mailboxes, logs, backups, or browser history can submit a new password throug...

PT-2026-104445

UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...

PT-2026-104180

Name of the Vulnerable Software and Affected Versions WPMobile.App – Android and iOS App Builder versions prior to 11.83 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. This allows unauthenticated attacker...

CVE-2025-9967

익스플로잇: 인증되지 않은 OTP 비밀번호 재설정 브라우저 콘솔 PoC 인증 불필요 async = async function getNonceAndAjaxUrl if window.resetpassobj return nonce: resetpassobj.ajaxnonce, ajaxUrl: resetpassobj.ajaxurl ; const home = await fetch'http://localhost/wordpress/'.thenr = r.text; const m =...

CVE-2026-30655

CVE-2026-30655 — esiclivre의 SQL 삽입 비밀번호 재설정 요약 esiclivre의 비밀번호 재설정 엔드포인트에 SQL 삽입 취약점이 존재합니다. 인증되지 않은 공격자가 cpfcnpj POST 매개변수를 통해 SQL을 주입할 수 있으며, 이로 인해 민감한 정보에 대한 무단 액세스가 발생할 수 있습니다. 영향을 받는 프로젝트 저장소: https://github.com/esiclivre/esiclivre 영향을 받는 버전: v0.2.2 및 이전 버전 영향을 받는 커밋:...

CVE-2026-93453

CVE-2026-93453 — Originヘッダーを介したSOGoパスワードリセットリンクポイズニング SOGoがユーザーにメール送信するパスワードリセットリンクを、クライアントが指定したOriginヘッダーからそのまま組み立ててしまう脆弱性のエクスプロイトです。被害者のログイン情報を知る匿名の攻撃者が、制御下のOriginを付けてリカバリリクエストをPOSTします。すると、送信される「Password...

CVE-2025-15030

CVE-2025-15030 User Profile Builder 3.15.2 - 인증되지 않은 임의 비밀번호 재설정 CVE-2025-15030 User Profile Builder — 인증되지 않은 비밀번호 재설정 → 관리자 계정 탈취 + 셸 업로드 / / \ |/ / / / / / \ / / / \ / \ | / | | //| \ / /| / | / /| \ | || | / | / || / | | | // | /\/ /| /|/ /\ |\| |\ || /| \ || /| // \...

CVE-2026-53953

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In version 3.3.22, the password reset endpoint can be accessed without authentication. When a reset request is submitted for an existing user, the application generates a new temporary...

CVE-2023-32243-Detection-and-Mitigation-in-WordPress

🔐 CVE-2023-32243 – WordPress에서의 탐지 및 완화 📘 프로젝트 제목: Essential Addons for Elementor WordPress 플러그인의 CVE-2023-32243 탐지 및 완화 🧠 개요 이 프로젝트는 CVE-2023-32243 의 악용과 예방을 탐구합니다. 이는 WordPress에서 "Essential Addons for Elementor" 플러그인버전 5.4.0 5.7.1에 영향을 미치는 심각한 권한 상승 취약점CVSS 점수 9.8입니다. 이 취약점은 인증되지 않은 공격자가 관리자...

CVE-2026-53953 GetSimple CMS: Predictable Password Reset Password Allows Administrator Account Takeover

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In version 3.3.22, the password reset endpoint can be accessed without authentication. When a reset request is submitted for an existing user, the application generates a new temporary...

CVE-2026-53953 GetSimple CMS: Predictable Password Reset Password Allows Administrator Account Takeover

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In version 3.3.22, the password reset endpoint can be accessed without authentication. When a reset request is submitted for an existing user, the application generates a new temporary...

EUVD-2026-91043

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In version 3.3.22, the password reset endpoint can be accessed without authentication. When a reset request is submitted for an existing user, the application generates a new temporary...