KevinLAB BEMS (Building Energy Management System) - Backdoor Account

KevinLAB BEMS has an undocumented backdoor account, and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution through the RMI. An attacker could exploit this vulnerability by logging in using the backdoor account with highes...

CVE-2024-29972

TG Join Us https://t.me/WanLiChangChengWanLiChang Únete a nosotros para recibir periódicamente varios EXP POC de vulnerabilidades. CVE-2024-29972-EXP CVE-2024-29972 Zyxel Nas Backdoor Account: cuenta de puerta trasera no autorizada abierta. FOFA app="ZyXEL-NAS326" Consideraciones Este script de...

DblTekGoIPPwn

DblTekGoIPPwn Herramienta para explotar el sistema de desafío-respuesta en dispositivos DblTek GoIP vulnerables. Puede generar respuestas a desafíos específicos, probar hosts para la vulnerabilidad, ejecutar comandos en hosts vulnerables, enviar mensajes SMS desde un host y acceder a un shell roo...

CVE-2019-19033

CVE-2019-19033: Cuenta Backdoor / Bypass de Autenticación en Jalios JCMS 10 I. VULNERABILIDAD Jalios JCMS 10 permite a los atacantes acceder a cualquier parte del sitio web y al servidor WebDAV con privilegios administrativos a través de una cuenta backdoor utilizando cualquier nombre de usuario ...

dlink

Inyección de comandos y cuenta de puerta trasera en dispositivos NAS de D-Link Resumen de la vulnerabilidad: La vulnerabilidad descrita afecta a múltiples dispositivos NAS de D-Link, incluidos los modelos DNS-340L, DNS-320L, DNS-327L y DNS-325, entre otros. La vulnerabilidad reside en la URI...

honeypot-dlink-CVE-2024-3273

honeypot-dlink-CVE-2024-3273 Honeypot rápido y sucio para CVE-2024-3273. Esta plantilla se puede usar para montar un honeypot básico en 10 minutos. TL;DR: Encuentra el fofa, shodan, onyphe, .... Clónalo con el script wgetclonehttp.sh. Ajustes manuales para que el honeypot sea más realista el...

vuln-chain-lab

Laboratorio PoC de Bypass de Carga de Archivos + XSS Almacenado Una aplicación web deliberadamente vulnerable que demuestra cómo un bypass de carga de archivos se encadena con XSS almacenado para crear cuentas de administrador puerta trasera, incluso cuando las protecciones CSP, CORS y CSRF están...

CVE-2026-52853: Improper Privilege Management

Docmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an authenticated workspace ADMIN can use the workspace invitation flow to invite an external email address with the OWNER role because the role ceiling does not prevent ADMIN users from granting privileges abov...

PT-2026-98240

Name of the Vulnerable Software and Affected Versions Docmost versions prior to 0.90.1 Description An authenticated workspace ADMIN can exploit the workspace invitation flow to invite an external email address and assign it the OWNER role. This occurs because the role ceiling does not prevent ADM...

D-Link Network Attached Storage - Backdoor Account

A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user...

CVE-2026-82535

Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script payloads into survey answers by computing deterministic invitation codes and bypassing authorization checks in the survey submission endpoint...

EUVD-2026-76159

Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script payloads into survey answers by computing deterministic invitation codes and bypassing authorization checks in the survey submission endpoint...

CVE-2026-82535 Chamilo LMS Stored XSS via Survey Answer Submission in reporting.php

Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script payloads into survey answers by computing deterministic invitation codes and bypassing authorization checks in the survey submission endpoint...

CVE-2026-82535 Chamilo LMS Stored XSS via Survey Answer Submission in reporting.php

Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script payloads into survey answers by computing deterministic invitation codes and bypassing authorization checks in the survey submission endpoint...

TBEA TLogger 2.1.0.0B0.0.0.0 Backdoor Account / SQL Injection / Disclosure

TBEA TLogger version 2.1.0.0B0.0.0.0 suffers from a backdoor account, resource exhaustion, denial of service, information disclosure, and remote SQL injection vulnerabilities. ------------------------------------------------------------------------------- title| Multiple Vulnerabilities in TBEA...

CVE-2026-52520

Emlog CMS = 2.6.14 contains a stored cross-site scripting XSS vulnerability in the article publishing module /admin/article.php. A remote authenticated attacker can inject arbitrary JavaScript code via the article content. When an administrator reviews or previews the submitted article in the...

D-Link Network Attached Storage - Command Injection and Backdoor Account

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument...

CVE-2025-71317 NetMan 204 Hard-coded Backdoor Credentials

NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax...

CVE-2025-71317: Use of Hard-coded Credentials

NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax...

CVE-2026-42289

ChurchCRM is an open-source church management system. Prior to 7.3.2, UserEditor.php processes user account creation and permission updates entirely through $POST parameters with no CSRF token validation. An unauthenticated attacker can craft a malicious HTML page that, when visited by an...