lazyweb

LazyWeb - 脆弱なWebアプリケーション LazyWeb は、一般的なサーバーサイドアプリケーションの脆弱性を示すためのデモンストレーション用Webアプリケーションです。各脆弱性はそれぞれの難易度評価で分類されており、開発者やセキュリティ愛好家に包括的な学習体験を提供します。 主な機能 Webアプリケーションにおける現実世界の脆弱性を示します。 基本的なものから高度なセキュリティ上の欠陥までを網羅し、ユーザーが様々なレベルでスキルをテストできます。 セキュリティ専門家が脆弱性の性質とその緩和方法を理解するのに役立つことを目的としています。 含まれる脆弱性...

CVE-2025-68860

CVE-2025-68860 El plugin Mobile builder de WordPress La vulnerabilidad de Omisión de autenticación mediante una ruta o canal alternativo en Mobile Builder permite el abuso de autenticación. Este problema afecta a Mobile builder desde n/a hasta 1.4.2. Puntuación CVSS: 9.8 CRÍTICA Vector:...

CVE-2025-68860

WordPress Mobile Builder = 1.4.2 - 身份验证失效（CVE-2025-68860） 描述 WordPress Mobile builder 插件 1.4.2 及以下版本存在身份验证失效（Broken Authentication）漏洞，攻击者可利用默认密钥 "examplekey" 生成有效的 JWT 令牌，并以管理员身份（userid=1）进行认证。借助该令牌，攻击者可以创建新的管理员账户并完全控制目标站点。 漏洞详情 CVE：CVE-2025-68860 原因：JWT 使用了硬编码密钥 "examplekey"，且缺乏充分的验证。 漏洞位置：在...

CVE-2022-1598

CVE-2022-1598 WPQA where ID is numeric and can be bruteforced! Plantilla de Nuclei: CVE-2022-1598.yaml VÍDEO POC: https://www.youtube.com/watch?v=MbhiQKWvivQ Referencias: https://wpscan.com/vulnerability/0416ae2f-5670-4080-a88d-3484bb19d8c8 https://vulners.com/cve/CVE-2022-1598...

CVE-2024-52475

CVE-2024-52475 WordPress Wawp 插件 = 3.0.17 存在认证绕过漏洞（账户接管） 免责声明！ 本文档中提供的有关 CVE-2024-52475 的信息仅供学习和教育目的使用。我们不鼓励也不授权将本信息用于任何有害目的，包括但不限于漏洞利用、系统篡改或其他非法活动。 我们强调在探索和理解安全漏洞时必须遵循道德规范。请记住，使用这些信息时应保持负责任的态度，并遵守适用法律。因使用此信息而采取的任何行动均由用户自行承担全部责任。 使用本材料即表示您同意不滥用所提供的信息，并对因使用此类信息而可能产生的任何后果承担全部责任。 简介 在浏览了与该 CVE...

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

Hoppscotch <= 2026.4.1 - Mass Assignment JWT_SECRET Overwrite

Hoppscotch self-hosted backend = 2026.4.1 contains a broken authentication caused by mass assignment via unauthenticated POST /v1/onboarding/config endpoint, letting unauthenticated attackers overwrite JWTSECRET to forge tokens and fully compromise the server, exploit requires attacker to access...

ZimaOS - Authentication Bypass

ZimaOS = 1.5.0 contains a broken authentication caused by improper password validation for known system service accounts in the login function, letting attackers authenticate with any password for these accounts, exploit requires knowledge of common usernames. id: CVE-2026-21891 info: name: ZimaO...

Flowise-CVE-2025-58434-PasswordReset

CVE-2025-58434 - Flowise AI Unauthenticated Password Reset Overview CVE ID: CVE-2025-58434 Affected Software: Flowise AI Vulnerable Versions: = 3.0.5 Fixed Version: 3.0.6 and later Severity: Critical Author: arensballiu Date: 2025 Description Flowise AI versions up to and including 3.0.5 contain ...

CVE-2025-49901

CVE-2025-49901 WordPress Simple Link Directory 插件 14.8.1 存在高优先级的认证失效（Broken Authentication）漏洞 ╔═══════════════════════════════════════════════════════════════════╗ ║ CVE-2025-49901 · Simple Link Directory · qc-opd ║ ║ Authentication Bypass → Password Reset → RCE ║...

CVE-2025-47646

🔐 CVE-2025-47646 – PSW 前端登录与注册插件 pswform 是请求所需的 nonce 字段。 该 nonce 由前端的 pswregistration 短代码动态生成。 ✅ 成功响应 HTTP/1.1 200 OK Conten...

CVE-2026-97196 WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability

Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass. This issue affects GiveWP: from n/a through 4.16.9...

CVE-2026-97196

The Liquid Web / StellarWP GiveWP WordPress plugin, versions up to and including 4.16.9 , is vulnerable to an Authentication Bypass due to an Improper Validation of Unsafe Equivalence in Input vulnerability. This flaw allows an attacker to bypass authentication mechanisms, potentially granting un...

EUVD-2026-88751

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...

CVE-2026-100870

Sylius versions prior to 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 are vulnerable to administrator password-reset poisoning. The software builds password-reset links using the request Host header without proper validation. This allows unauthenticated attackers to use forged Host headers to red...

CVE-2026-97731

MinIO through 7aac2a2 does not verify that every x-amz- header present on a request also appears in the client-supplied X-Amz-SignedHeaders list. extractSignedHeaders in cmd/signature-v4-utils.go iterates only the claimed list and never enumerates the headers that actually arrived, and thus a...

WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Abdelrhman Allam in WordPress Plugin GiveWP versions = 4.16.9...

CVE-2026-86678 Broken Authentication vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform administrator-level actions...

CVE-2026-86678 Broken Authentication vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform administrator-level actions...

CVE-2026-86677 Broken Authentication vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and remote code execution...