phpmyadmin-config-set-2fa

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · phpmyadmin-config-set-2fa Write-up: https://abraxaslabs.tech/research/phpmyadmin-config-set-2fa phpmyadmin-config-set-2fa Class: Privilege leftover / missing step-up Reach: Remote phpMyAdmin 5.2.3 RELEASE523 / 962857e...

CVE-2025-4322-Exploit

CVE-2025-4322 - Unverified Password Change CWE-620 Exploit: Download here Details CVE ID : CVE-2025-4322 Published : 05/20/2025 Impact : Critical CVSS : 9.8 Patch Available: No official patch yet Impact Critical severity vulnerability that enables attackers to potentially: - Escape the browser's...

CVE-2026-15964-PoC

CVE-2026-15964 - Single Sign On For TNG = 2.0.0 Unauthenticated privilege escalation via unverified password change in the WordPress plugin Single Sign On For TNG. | ---|--- Severity| Critical 9.8 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-620 Unverified Password Change Affected|...

Malicious code in elf-stats-mistletoe-pinecone-620 (npm)

Source: amazon-inspector 0e04e98f7eb8f6c52591eb84ba92379c6e6af2499578abe9dc4f769b72163bfe The package elf-stats-mistletoe-pinecone-620 was found to contain malicious code. --- Credit: OpenSSF source...

WeClawArena: An Auditable Sandbox and Benchmark for Cross-User Agents Collaboration and Security in Human-Centered Agent Networks

Recent advances in persistent personal-agent frameworks are making human-centered agent networks realistic deployment targets: each user can be served by an AI agent that acts on the user's behalf, maintains state, and communicates with other agents through social and task relations. In these...

MiracleLinux 4 : php54-php-5.4.40-4.AXS4 (AXSA:2016-620:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-620:01 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in...

CVE-2025-59808: Unverified Password Change

An unverified password change vulnerability CWE-620 vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5....

Malicious code in elf-stats-mistletoe-pinecone-620 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e04e98f7eb8f6c52591eb84ba92379c6e6af2499578abe9dc4f769b72163bfe The package elf-stats-mistletoe-pinecone-620 was found to contain malicious code...

MAL-2025-192098 Malicious code in elf-stats-mistletoe-pinecone-620 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e04e98f7eb8f6c52591eb84ba92379c6e6af2499578abe9dc4f769b72163bfe The package elf-stats-mistletoe-pinecone-620 was found to contain malicious code...

EUVD-2018-17974

Malware in sbrugna...

EUVD-2018-17973

Malware in sbrugna...

EUVD-2025-23823

Malicious code in bioql PyPI...

EUVD-2021-9908

Malicious code in bioql PyPI...

Security Bulletin: A Security Vulnerability was found in the IBM Security Verify Access product.

Summary IBM Security Verify Access could allow could an unverified user to change the password of an expired user without prior knowledge of that password Vulnerability Details CVEID:CVE-2024-45647 DESCRIPTION: IBM Security Verify Access could allow could an unverified user to change the password...

OSV-2025-620 Heap-buffer-overflow in FragPrepareChunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437694938 Crash type: Heap-buffer-overflow WRITE 8 Crash state: FragPrepareChunk DemuxFrag demuxprocessstream...

CVE-2025-46389

CWE-620: Unverified Password Change...

Unverified password change via set_password endpoint

...

Amazon Linux 2023 : ecs-init (ALAS2023-2024-620)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-620 advisory. http2/hpack: avoid quadratic complexity in hpack decoding CVE-2022-41723 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has no...

D-Link DIR-620 Router Arbitrary Command Execution

The vulnerability of the index.cgi component in D-Link DIR-620 router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using...

D-Link DIR-620 XSS

The vulnerability of the web interface of D-Link DIR-620 router software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...