CVE-2023-49543

CVE-2023-49543 Book Store Management System v1.0 - 不正确的访问控制 描述 ：Book Store Management System v1 中存在不正确的访问控制，允许攻击者访问未经授权的页面，并在未进行身份验证的情况下执行管理功能。 受影响产品版本 ：Book Store Management System v1.0 CVE 作者 ：Geraldo Alcântara 日期 ：2023年11月29日 确认日期 ：2023年12月15日 CVE ：CVE-2023-49543 测试环境 ：Windows 影响...

nepstech-xpon-router-CVE-2024-40119

nepstech-xpon-router-CVE-2024-40119 作者： Subhodeep Baroi CVE-2024-40119：Nepstech无线路由器NTPL-XPON1GFEVN v1.0中的CSRF漏洞 描述 CVE-2024-40119 是Nepstech Wifi Router xpon NTPL-XPON1GFEVN v1.0固件v2.0.1中的一个跨站请求伪造（CSRF）漏洞。该漏洞允许远程攻击者在未经用户同意的情况下更改管理员密码，可能导致帐户被接管。 详细信息 漏洞类型： 跨站请求伪造（CSRF） 产品供应商： Nepstech 受影响产品代码库： Wi...

Session-Fixation-in-Vvveb-CMS-v1.0.6.1

Vvveb CMS v1.0.6.1 中的会话固定漏洞 作者： Andrew Paul 发现日期： 2025年6月9日 厂商： Vvveb 厂商URL： http://vvveb.com 厂商GitHub： https://github.com/givanz/Vvveb 受影响版本： 1.0.6.1（可能包括更早版本） CVE ID： CVE-2025-8517 摘要 在Vvveb CMS 1.0.6.1版本的认证机制中发现了一个会话固定漏洞，分类为CWE-384:...

CVE-2025-25620

CVE-2025-25620 Unifiedtransform v2.0 存在存储型跨站脚本攻击（XSS）漏洞，位于"创建作业"功能中，允许攻击者在其他用户的会话上下文中执行恶意脚本。 厂商：Unifiedtransform PoC 步骤 1：以教师身份登录应用程序。 步骤 2：创建作业并上传包含XSS载荷的PDF文件。 步骤 3：导航至“课程”下的“查看作业”部分，并打开上传的作业。 影响：当查看作业时，恶意脚本会执行，可能导致账户接管（ATO）及其他严重安全隐患。 漏洞类型：跨站脚本攻击（XSS） 攻击类型：远程 影响：代码执行...

CVE-2025-3605

🚀 Guía de Explotación de CVE-2025-3605 🛡️ Resumen de la Vulnerabilidad El plugin Frontend Login and Registration Blocks para WordPress versiones = 1.0.7 es vulnerable a escalada de privilegios mediante apropiación de cuentas. El problema surge porque el plugin no valida la identidad del usuario al...

CVE-2026-14856-TastyIgniter

CVE-2026-14856: XSS Almacenado a Toma de Control de Cuenta en TastyIgniter v4.3.0 📌 Resumen Se identificó una vulnerabilidad de Cross-Site Scripting XSS Almacenado en la funcionalidad de carga de archivos del Media Manager de TastyIgniter v4.3.0. Debido a una validación y saneamiento insuficiente...

CVE-2025-28355

CVE-2025-28355 经发现，https://github.com/Volmarg/personal-management-system 应用程序存在CSRF攻击漏洞，攻击者可执行的操作之一是诱骗合法用户发起跨站请求，从而修改其密码，使攻击者能够访问该应用程序。该漏洞需要浏览器的“SameSite”Cookie属性默认值为 none 的浏览器（如Firefox）才能利用。 向量字符串 : CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS评分 : 4.7 概念验证 为进行演示，我将使用用户名 tester，并将其密码更改为...

CVE-2022-31798

CVE-2022-31798 Título del Exploit: Nortek Linear eMerge E3-Series - toma de control de cuenta...

Apache StreamPipes <= 0.93.0 - Use of Cryptographically Weak PRNG in Recovery Token Generation

Apache StreamPipes from version 0.69.0 through 0.93.0 uses a cryptographically weak Pseudo-Random Number Generator PRNG in the recovery token generation mechanism. Given a valid token it's possible to predict all past and future generated tokens. id: CVE-2024-29868 info: name: Apache StreamPipes ...

Branda WordPress plugin - Privilege Escalation

Branda WordPress plugin = 3.4.24 contains a privilege escalation caused by improper user identity validation in password update functionality, letting unauthenticated attackers change arbitrary user passwords, including administrators, exploit requires crafted request. id: CVE-2025-14998 info:...

SysAid On-Prem <= 23.3.40 - XML External Entity

SysAid On-Prem versions = 23.3.40 are vulnerable to an unauthenticated XML External Entity XXE vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives. id: CVE-2025-2776 info: name: SysAid On-Prem = 23.3.40 - XML External Enti...

SMS Alert – SMS & OTP for WooCommerce - Privilege Escalation

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validating a user's identity prior to updati...

Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover

The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to chan...

ClinicCases 7.3.3 Cross-Site Scripting

ClinicCases 7.3.3 is susceptible to multiple reflected cross-site scripting vulnerabilities that could allow unauthenticated attackers to introduce arbitrary JavaScript by crafting a malicious URL. This can result in account takeover via session token theft. id: CVE-2021-38704 info: name:...

WordPress Stacks Mobile App Builder <=5.2.3 - Authentication Bypass

Stacks Mobile App Builder WordPress plugin ≤ 5.2.3 suffers from an authentication bypass vulnerability via improper handling of query parameters, allowing attackers to impersonate arbitrary users. id: CVE-2024-50477 info: name: WordPress Stacks Mobile App Builder =5.2.3 - Authentication Bypass...

WWBN AVideo 11.6 - Cross-Site Scripting

A reflected XSS vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff, allowing arbitrary Javascript execution. id: CVE-2023-48728 info: name: WWBN AVideo 11.6 - Cross-Site Scripting author: ritikchaddha severity: medium...

parisneo/lollms < 2.2.0 - Authenticated Stored XSS

parisneo/lollms 2.2.0 contains a stored XSS caused by unsanitized user input in createpost function in backend/routers/social/init.py, letting attackers inject malicious scripts executed in user browsers, exploit requires crafted post submission. id: CVE-2026-1115 info: name: parisneo/lollms 2.2....

ARMember < 3.4.8 - Unauthenticated Admin Account Takeover

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover even the administrator due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username. id:...

Flowise <= 3.0.5 - Account Takeover

Flowise versions 3.0.5 and earlier had a vulnerability in the forgot-password endpoint, which returned valid reset tokens without authentication—allowing attackers to reset passwords and take over accounts. id: CVE-2025-58434 info: name: Flowise = 3.0.5 - Account Takeover author:...

TranslatePress <= 3.3.1 - Unauthenticated Account Takeover

TranslatePress WordPress plugin = 3.3.1 contains a sensitive information exposure caused by the 'trpgettranslationsregular' AJAX action saving password-reset URLs in translation dictionary, letting unauthenticated attackers extract admin password-reset URLs, exploit requires automatic string savi...