CVE-2026-19875 Unauthenticated Registration POST Endpoint Permits Admin Email Overwrite and Outbound Relay Abuse in Langflow

IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to overwrite administrator email information and abuse the server as an outbound relay due to missing authentication for the registration endpoint...

CVE-2026-19875

IBM Langflow OSS versions 1.0.0 through 1.10.0 contain an authentication bypass in the POST /api/v2/registration/ endpoint (CWE-306). An unauthenticated remote attacker can overwrite the server's registered admin email address and trigger outbound telemetry calls, enabling the instance to be abus...

EUVD-2026-62606

IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to overwrite administrator email information and abuse the server as an outbound relay due to missing authentication for the registration endpoint...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

tryhackme-moniker-link

tryhackme-moniker-link TryHackMe पर पूर्ण किए गए मेरे व्यावहारिक लैब Moniker Link CVE-2024-21413 का दस्तावेज़ीकरण। Moniker Link CVE-2024-21413 — TryHackMe लैब अवलोकन यह रिपॉजिटरी TryHackMe रूम में मेरे व्यावहारिक अध्ययन का दस्तावेज़ीकरण करती है। इस अभ्यास का लक्ष्य यह समझना था कि यह भेद्यता कैसे...

CVE-2023-41652

CVE-2023-41652 RSVPMarker = 10.6.6 - अप्रमाणित SQL इंजेक्शन विवरण: WordPress के लिए RSVPMarker प्लगइन 'email' पैरामीटर के माध्यम से SQL इंजेक्शन के लिए संवेदनशील है, संस्करण 10.6.6 तक और इसमें शामिल, उपयोगकर्ता द्वारा आपूर्ति किए गए पैरामीटर पर अपर्याप्त एस्केपिंग और मौजूदा SQL क्वेरी पर पर्याप्त...

CVE-2025-3604

🚨 Flynax Bridge CVE : CVE-2025-3604 CVSS : 9.8 Critical Опубликовано : 23 апреля 2025 г. Обновлено : 24 апреля 2025 г. ⚙️ Пример вывода скрипта root@kitploit: Detected plugin version: 2.2.0 Version is vulnerable. Attempting exploit... Exploit succeeded! Email changed to: [email protected]...

Phishing 3.0: The Fight Moves to Agent Versus Agent

Most email defenses still do the job they did a decade ago. Scan the message, look for something malicious, block it. That worked when the danger sat in the payload, a bad link or an attachment. It stopped working when the danger moved into the message's intent, and it is failing now that the...

sentryexploit

استخراج معلومات MobileIron Sentry CVE-2023-38035 الميزات استخراج اسم الشركة والبريد الإلكتروني للتواصل إثبات وجود الثغرة الاستخدام root@kitploit: ./sentryexploit 192.168.0.10:8443 2023/08/24 21:29:55 Information extracted, appliance is vulnerable: 2023/08/24 21:29:55 Company: XXXX Ltd., contact:...

CVE-2024-42008-9-exploit

CVE-2024-42008-9-exploit السكربتات في هذا المستودع مُصممة لاستغلال CVE-2024-42008 و CVE-2024-42009. كلتا الثغرتين هما ثغرات وُجدت في Roundcube 1.6.7 اقرأ المزيد عن هاتين الثغرتين وكيف يمكن استغلالهما في الرابط التالي: root@kitploit:...

CVE-2026-19782

The WPS Bidouille WordPress plugin before 1.33.5 does not have proper authorisation checks in an AJAX action, allowing any authenticated user, such as a subscriber, to retrieve the email addresses of all registered users...

CVE-2026-18777

The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of its AJAX actions, allowing unauthenticated users to change the status of arbitrary appointments, as well as to trigger notification emails to the affected customers...

CVE-2026-14861

The User Verification by PickPlugins WordPress plugin through 2.0.47 does not verify that a request to resend a verification email is authorized to act on the supplied user, nor bind the protecting token to that user, allowing unauthenticated attackers to reset arbitrary users' email-verification...

CVE-2026-19782 WPS Bidouille < 1.33.5 - Subscriber+ User Email Disclosure via wps_get_users

The WPS Bidouille WordPress plugin before 1.33.5 does not have proper authorisation checks in an AJAX action, allowing any authenticated user, such as a subscriber, to retrieve the email addresses of all registered users...

CVE-2026-19782

The WPS Bidouille WordPress plugin before 1.33.5 exposes the wps_get_users AJAX action without authorisation checks, allowing any authenticated subscriber to enumerate all registered users' email addresses. CVSS 5.4 (Medium). No in-the-wild exploitation reported; upgrade to 1.33.5. https://wpscan...

EUVD-2026-62292

The WPS Bidouille WordPress plugin before 1.33.5 does not have proper authorisation checks in an AJAX action, allowing any authenticated user, such as a subscriber, to retrieve the email addresses of all registered users...

CVE-2026-18777

The TrueBooker WordPress plugin before 1.2.7 exposes an AJAX endpoint (update_appointment_status) with no authorisation checks, letting unauthenticated attackers change any appointment's status and trigger notification emails to customers. CVSS 3.1 scores 5.3 (Medium) for integrity impact only. R...

CVE-2026-18777 TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Arbitrary Appointment Status Change via update_appointment_status

The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of its AJAX actions, allowing unauthenticated users to change the status of arbitrary appointments, as well as to trigger notification emails to the affected customers...

CVE-2026-18231 WP Directory Kit < 1.5.7 - Unauthenticated User Email Disclosure via select_2_ajax_user

The WP Directory Kit WordPress plugin before 1.5.7 does not perform any authorization check on one of its public AJAX actions and returns unfiltered database rows, allowing unauthenticated attackers to retrieve the usernames and email addresses of users holding the WP Directory Kit WordPress plug...

CVE-2026-18231

The WP Directory Kit WordPress plugin (versions before 1.5.7 ) is vulnerable to unauthenticated user data disclosure. The root cause is a missing authorization check on the select_2_ajax_user public AJAX action, which returns unfiltered database rows. An unauthenticated attacker can exploit this ...