nepstech-xpon-router-CVE-2024-40119

nepstech-xpon-router-CVE-2024-40119 作者： Subhodeep Baroi CVE-2024-40119：Nepstech无线路由器NTPL-XPON1GFEVN v1.0中的CSRF漏洞 描述 CVE-2024-40119 是Nepstech Wifi Router xpon NTPL-XPON1GFEVN v1.0固件v2.0.1中的一个跨站请求伪造（CSRF）漏洞。该漏洞允许远程攻击者在未经用户同意的情况下更改管理员密码，可能导致帐户被接管。 详细信息 漏洞类型： 跨站请求伪造（CSRF） 产品供应商： Nepstech 受影响产品代码库： Wi...

CVE-2025-14340

XSS para la toma de control de la cuenta de administrador CVE-2025-14340 Una vulnerabilidad de Cross-Site Scripting en la interfaz REST de administración de Payara permite la ejecución de JavaScript controlado por el atacante, lo que provoca la toma de control de la cuenta de administrador. Esto ...

CVE-2023-32707

CVE-2023-32707 基于 exploitdb 上报告的 CVE 改进的 POC 利用脚本 漏洞标题：Splunk 9.0.5 - 管理员账户接管 CVE：CVE-2023-32707 概述 该脚本用于利用 Splunk 9.0.5 中的一个漏洞，导致管理员账户被接管。该漏洞利用拥有 edituser 能力的低权限用户来提升权限。 前提条件 Python 3.x 所需的 Python 包（使用 pip3 install -r requirements.txt 安装）： requests urllib3 用法 1. 克隆仓库： root@kitploit: git clone...

CVE-2025-50363_BXSS_CVE

项目名称和仓库URL: Maid Hiring Management System using PHP and MySQL 漏洞类型: 通过盲XSS进行特权提升 受影响版本:v1.0 💣漏洞描述: 在女佣招聘管理系统中发现了一个盲跨站脚本 XSS 漏洞，允许普通用户（如女佣或雇主）提升权限，并可能控制管理员账户。 👩‍💻影响: 完全接管管理员账户、访问敏感数据以及系统操纵。 🛜PoC（概念验证） 1. 在 mhms/maid-hiring.php 中，用户可以申请职位。 2. 填写表单，在姓名 字段中放入盲XSS payload，然后提交表单。 3. 当管理员查看申请时，盲XSS...

CVE-2021-40101

Survey XSS 与 CSRF 结合导致 Concrete5 8.5.4 管理员帐户接管 在版本低于 9 的 Concrete CMS 中，管理员在更改其他用户密码时无需提供自己的密码。 结合 CVE-2021-28145（"Concrete CMS（前身为 concrete5）8.5.5 之前的版本允许远程认证用户通过精心设计的调查区块执行 XSS 攻击。这至少需要编辑者权限"：该修复包含在 8.5.5 版本中），低权限用户（例如开发者或能够创建调查的公共用户）可以插入恶意 JavaScript 代码到 Web 应用程序中。调查结果可由管理员在其 Web 界面（报告调查）中查看。恶...

CVE-2026-23550-PoC

CVE-2026-23550-PoC CVE-2026-23550 - Plugin de WordPress Modular DS Acceso de Administrador No Autenticado Prueba de Concepto PoC que demuestra CVE-2026-23550 - toma de control crítica de cuenta de administrador sin autenticación en el plugin de WordPress Modular DS versiones ≤2.5.1. Explotado...

CVE-2026-54694 NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover

SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a single exploitable attack chain, with three distinct exploitation paths of escalating impact. StringHighlighter.js builds an HTML string by interpolating raw value substrings...

CVE-2026-8181

CVE-2026-8181 Burst Statistics | 权限绕过至管理员账户接管 描述： Burst Statistics 3.4.0 - 3.4.1.1 - 权限绕过至管理员账户接管 WordPress 插件 Burst Statistics – 隐私友好型 WordPress 分析（Google Analytics 替代品）在 3.4.0 到 3.4.1.1 版本中存在身份验证绕过漏洞。这是由于在验证来自 Authorization 头的应用程序密码时，ismainwpauthenticated 函数对返回值的处理不正确。该函数调用...

CVE-2026-66418-OpenClaw-Dashboard-v3.0.0-Stored-XSS-via-Failed-Login-Username-Field

Aviso de seguridad: Cross-Site Scripting almacenado no autenticado que conduce a la toma de control de la cuenta de administrador openclaw-dashboard Título: OpenClaw Dashboard v3.0.0 XSS almacenado a través del campo de nombre de usuario en inicio de sesión fallido ID de CVE asignado:...

CVE-2026-6741

CVE-2026-6741 CVE-2026-6741 is a CVSS 8.8 High Authenticated Agent+ Privilege Escalation vulnerability in the LatePoint – Calendar Booking Plugin CVE-2026-6741 — LatePoint Privilege Escalation Scanner Plugin: LatePoint – Calendar Booking Plugin for Appointments and Events latepoint CVE ID:...

CVE-2026-19806

The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 1.4.52 via the guestticketlogin function and its p parameter. Th...

EUVD-2026-66230

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the 'trpgettranslationsregular' AJAX action. This makes it possible for unauthenticated attackers to extract t...

EUVD-2026-64898

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

CVE-2026-78414 Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

CVE-2026-77264

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handleemailotpreturn function returning the secret magic login token in the response t...

CVE-2026-77264

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code WordPress plugin (versions ≤ 4.8.6 ) contains a critical authentication bypass (CVSS 9.8). The handle_email_otp_return() function returns the secret magic login token directly in the HTTP response to a publ...

CVE-2025-14600 Admin Account Takeover via Path Traversal in vsDesk

An insecure deserialization vulnerability in vsDesk allows a remote attacker to gain unauthorized administrative access. By manipulating application configuration data, an attacker can force the system to authenticate against an arbitrary LDAP server and provision a new administrative account...

CVE-2025-14600 Admin Account Takeover via Path Traversal in vsDesk

An insecure deserialization vulnerability in vsDesk allows a remote attacker to gain unauthorized administrative access. By manipulating application configuration data, an attacker can force the system to authenticate against an arbitrary LDAP server and provision a new administrative account...

EUVD-2026-62258

The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be modified, deleted, or reassigned to a different author, allowing users with contributor-level access and above to alter, delete, or take over events created by other users including...

GHSA-43GM-9RR3-CX7G Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover

Summary A stored Cross-Site Scripting XSS vulnerability in Froxlor's DNS editor allows an authenticated user with DNS editor access customer role to inject arbitrary JavaScript into any administrator's browser session. When an administrator views the DNS configuration of an affected domain, the...