CVE-2024-21413

CVE-2024-21413 CVE-2024-21413 취약점을 이용한 로그인 정보 획득 먼저, 안녕하세요. Microsoft Outlook에 존재하는 취약점을 통해 Windows 사용자 정보를 얻으려면 아래의 작업을 수행할 수 있습니다. 메일 전송 작업은 PHP의 class.phpmailer.php 라이브러리를 통해 수행합니다. php 파일을 열어 메일 서버 설정을 해야 합니다. 그런 다음 코드 내에 있는 IP 주소에 Linux 장치를 입력합니다. Linux 장치에서 들어오는 요청을 수신하기 위해 impacket-smbserv...

CVE-2024-37383-POC

CVE-2024-37383-POC CVE-2024-37383에 대한 개념 증명 소개 이 저장소는 roundcube의 XSS 취약점인 CVE-2024-37383에 대한 개념 증명을 포함합니다. 이 취약점에 대한 자세한 정보는 여기에서 확인할 수 있습니다. 단계 Roundcube 시작 아직 실행 중인 roundcube 인스턴스가 없다면 startroundcube.sh 스크립트를 사용하여 시작할 수 있습니다. docker가 설치되어 있어야 합니다. 이 스크립트는 현재 gmx와 함께 작동하도록 구성되어 있지만, 다른 이메일 제공업체를...

CVE-2026-87965

CVE-2026-87965 affects the Easy Appointments WordPress plugin in versions before 4.0.2.2 . The vulnerability stems from a forgeable email-link token used to authorize appointment cancellation and confirmation actions. The token is derived from a hardcoded salt and the appointment's creation times...

CVE-2024-21413

CVE-2024-21413 - Microsoft Outlook의 치명적인 원격 코드 실행 취약점 설정 1. 스크립트와 같은 디렉토리에 다음 형식의 config.ini 파일을 생성하세요: root@kitploit: emailcredentials senderemail = [email protected] senderpassword = yourapppassword smtpserver = smtp.gmail.com smtpport = 587 2. template 폴더를 생성하고 그 안에 Stripo.html 파일을 넣으세요 사...

CVE-2026-77770 miniOrange 2FA (Free & Pro) - Unauthenticated Arbitrary Option Deletion via Out-of-Band Email Link Validator

The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not require a validated transaction before deleting site options whose names come from unauthenticated request input, allowing any visitor to delete arbitrary options, which can lock every...

CVE-2026-15689

Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in defaultemailpasswordreset and defaultwelcomesend. Both default emails emit a link of the form $base/login/$code, whose authority comes from the request Host header,...

Exploit for Improper Input Validation in Microsoft

TryHackMe: Moniker Link — CVE-2024-21413 Walkthrough A full w...

CVE-2026-32807

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, anyone with a DataLink UUID can fetch the attached text file directly...

PYSEC-2026-1932 Python Social Auth - Django has unsafe account association

Impact Upon authentication, the user could be associated by e-mail even if the associatebyemail pipeline was not included. This could lead to account compromise when a third-party authentication service does not validate provided e-mail addresses or doesn't require unique e-mail addresses. Patche...

GHSA-5C37-5J7W-8MH8 LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it.

LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it. The optional allowedHosts allowlist that would constrain this is undefined in the default and documented configuration, so LSHttpRequest::checkIsAllowedHost results in no operation....

CVE-2026-30459

An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link placed in a valid e-mail message...

keycloak: org.keycloak.authentication: Keycloak: Unauthorized account takeover via WebAuthn token replay

A flaw was found in Keycloak. This authentication vulnerability allows a remote attacker to replay ExecuteActionsActionToken tokens within Keycloak's WebAuthn Web Authentication flow. By intercepting an execute-actions email link, an attacker can register their own authenticator to a victim's...

CVE-2026-45055 CubeCart: Pre-Authenticated Password Reset Link Poisoning via HTTP Host Header

CubeCart is an ecommerce software solution. Prior to 6.7.2, CubeCart 6.6.x – 6.7.1 builds CCSTOREURL directly from the Host request header at bootstrap, with no allowlist. The constant is embedded verbatim into transactional email links, most critically the password-reset link in...

PT-2026-40813

Name of the Vulnerable Software and Affected Versions CubeCart versions 6.6.x through 6.7.1 Description CubeCart builds the CC STORE URL constant directly from the Host request header during bootstrap without using an allowlist. This constant is embedded into transactional email links, specifical...

CVE-2026-40905 LinkAce: Password Reset Poisoning via X-Forwarded-Host Header Injection Leading to Account Takeover

LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, a password reset poisoning vulnerability was identified in the application due to improper trust of user-controlled HTTP headers. The application uses the X-Forwarded-Host header when generating password reset URLs. By...

EUVD-2026-23231

An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link placed in a valid e-mail message...

CVE-2026-30459

An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link placed in a valid e-mail message...

CVE-2026-30459

An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link placed in a valid e-mail message...

CVE-2026-30459

An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link placed in a valid e-mail message...

CVE-2026-30459

An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link placed in a valid e-mail message...