CVE-2023-45182

CVE-2023-45182 IBM i Access Client Solutions 1.1.9.4 - Cifrado débil de contraseñas Cronología Vulnerabilidad reportada al proveedor: 22.09.2023 Nueva versión corregida 1.1.9.4 publicada: 08.12.2023 Divulgación pública: 15.12.2023 Descripción IBM i Access Client Solutions, para almacenar las...

CVE-2025-46047

CVE-2025-46047 Silverpeas = 6.4.2 PoC de Enumeración de Usuarios Script de prueba de concepto para demostrar una vulnerabilidad de enumeración de nombres de usuario en las versiones 6.4.1 y 6.4.2 de Silverpeas. Detalles de la Vulnerabilidad Software afectado: Silverpeas Versiones afectadas: 6.4.1...

CVE-2022-1162

CVE-2022-1162 Se estableció una contraseña fija para las cuentas registradas mediante un proveedor OmniAuth por ejemplo, OAuth, LDAP, SAML en GitLab CE/EE versiones 14.7 anteriores a 14.7.7, 14.8 anteriores a 14.8.5 y 14.9 anteriores a 14.9.2, lo que permite a atacantes potencialmente tomar el...

cve-2019-17240

Bludit = 3.9.22 - Bypass de Mitigación de Fuerza Bruta Este es un pequeño proyecto donde reescribo este script de Python en Golang. El propósito de este proyecto era aprender Golang y entender cómo funciona este exploit. Uso $ ./brutepass -sdasds flag provided but not defined: -sdasds Usage of...

CVE-2026-93949

Authentication Bypass Using an Alternate Path or Channel vulnerability in Omegathemes Grocery Shopping Store grocery-shopping-store allows Password Recovery Exploitation.This issue affects Grocery Shopping Store: from n/a through 1.3.3...

CVE-2020-28874

This repository contains the description of the vulnerability found CVE-2020-28874 in ProjectSend r1270 release. Thank you to my colleagues from Entelgy Innotec Security for pushing me to improve! CVE-2020-28874: Privilege Escalation Description The vulnerability is in the reset password componen...

CVE-2026-72898

🔴 CVE-2026-72898 - Unauthenticated SQL Injection Metabase — Unauthenticated SQL Injection → Full Administrator Takeover 📌 Overview CVE-2026-72898 is a maximum-severity CVSS 10.0 unauthenticated SQL injection vulnerability in Metabase that allows a remote attacker to inject arbitrary SQL into the...

Blackash-CVE-2025-4322

CVE-2025-4322 : Escalada de Privilegios No Autenticada mediante Actualización de Contraseña "Toma de Control de Cuenta 🔥" Descripción : El tema Motors para WordPress es vulnerable a la escalada de privilegios mediante la toma de control de cuentas en todas las versiones hasta la 5.6.67 inclusive...

CVE-2026-93949 WordPress Grocery Shopping Store theme <= 1.3.3 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Omegathemes Grocery Shopping Store grocery-shopping-store allows Password Recovery Exploitation.This issue affects Grocery Shopping Store: from n/a through 1.3.3...

EUVD-2026-96203

Authentication Bypass Using an Alternate Path or Channel vulnerability in Omegathemes Grocery Shopping Store grocery-shopping-store allows Password Recovery Exploitation.This issue affects Grocery Shopping Store: from n/a through 1.3.3...

CVE-2026-93949

The Grocery Shopping Store WordPress theme (versions

xpl-ModernWMS-CVE-2024-57698

Divulgación del hash MD5 de la contraseña de administrador - ModernWMS v1.0 - CVE-2024-57698 Un problema en modernwms v.1.0 permite a un atacante ver el hash MD5 de la contraseña del administrador y otros atributos sin autenticación, incluso después de la configuración inicial y el cambio de...

Fortigate-Belsen-Leak-Dump-CVE-2022-40684-

Fortigate-Belsen-Leak-Dump-CVE-2022-40684 Cómo funciona este script: 1. El script recorre todas las subcarpetas dentro de rootfolder y busca vpn-passwords.txt. 2.Salta cualquier línea que contenga el banner '-=-= Belsen Group -=-=.' 3. Para las líneas con el formato usuario:contraseña Extrae la...

openssh_dos

Since OpenSSH servers don't restrict the login password length, you can cause these servers to crash by sending very long passwords which use massive amounts of a the server's CPU to hash. This vulnerability is known as CVE-2016-6515. My POC can be downloaded here you will need to unzip Usage:...

CVE-2023-42820

CVE-2023-42820 CVE-2023-42820 Descripción de la vulnerabilidad Vulnerabilidad de restablecimiento de contraseña en JumpServer USAGE V2 Update 1. Reestructuración completa 2. Nuevo: cuando no se reciben la cuenta y el correo electrónico, se utilizan la cuenta y el correo electrónico predeterminado...

CVE-2026-94257

The SMS Alert WordPress plugin before 4.0.1 does not bind the account whose password is being changed to the phone number that was actually verified during its OTP password reset, allowing unauthenticated attackers to set a new password on an arbitrary account, including an administrator, by...

CVE-2026-94257 SMS Alert 3.9.6 - 4.0.0 - Unauthenticated Privilege Escalation via Arbitrary Password Reset

The SMS Alert WordPress plugin before 4.0.1 does not bind the account whose password is being changed to the phone number that was actually verified during its OTP password reset, allowing unauthenticated attackers to set a new password on an arbitrary account, including an administrator, by...

EUVD-2026-96133

The SMS Alert WordPress plugin before 4.0.1 does not bind the account whose password is being changed to the phone number that was actually verified during its OTP password reset, allowing unauthenticated attackers to set a new password on an arbitrary account, including an administrator, by...

CVE-2026-94257

The SMS Alert WordPress plugin (versions 3.9.6 - 4.0.0 ) is vulnerable to unauthenticated privilege escalation due to a missing bond between the account being modified and the verified phone number during the OTP password reset process. This flaw allows an unauthenticated attacker to set a new pa...

winboxPOC

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos de contraseñas en texto plano. Requisitos Python 3+ Este script NO se ejecutará con Python 2.x o inferior. Cómo Usar El script se usa de manera simple c...