14535 matches found
CVE-2026-82043 UTMStack < 11.2.16 Account Enumeration via Password Reset Endpoint
UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...
HTB-TwoMillion-machine
Hack The Box - TwoMillion Writeup Aperçu Ce dépôt contient ma procédure pas à pas pour la machine Hack The Box - TwoMillion. L'objectif de ce writeup est de documenter ma méthodologie, d'expliquer le processus d'énumération et de démontrer la chaîne d'exploitation qui a mené aux accès User et Roo...
ragflow-audit
ragflow-audit Outil d'audit RAGFlow de trois vulnérabilités CVE-2026-28797 / CVE-2026-24770 / CVE-2025-69286 ssti : détecte et exploite la SSTI - RCE des composants StringTransform / Message zipslip : détection hors ligne des traversées de chemin Zip Slip dans les entrées zip apikey : déduction d...
Massive-Subdomain-Enumerator
Massive-Subdomain-Enumerator Cet outil utilise une combinaison de listes de mots basées sur un dictionnaire force brute et de vérifications de résolution DNS pour confirmer l'existence de sous-domaines. Fonctionnalités Traitement des listes de mots : Capable de gérer efficacement de grandes liste...
spaces-finder
Spaces finder Spaces finder est un outil pour énumérer rapidement les DigitalOcean Spaces afin d'y chercher du butin. Il est similaire à un bruteforceur de sous-domaines, mais il est conçu spécifiquement pour les DigitalOcean Spaces et dispose également de fonctionnalités supplémentaires qui vous...
UserEnumJira
لا يحتوي هذا المستودع على ملف README...
CVE-2026-104439
YesWiki before 4.6.7 contains a user enumeration vulnerability in LostPasswordAction.php that allows unauthenticated attackers to confirm registered email addresses through differing responses. Attackers can submit emails to the MotDePassePerdu recovery page without rate limiting to identify vali...
EUVD-2026-91449
YesWiki before 4.6.7 contains a user enumeration vulnerability in LostPasswordAction.php that allows unauthenticated attackers to confirm registered email addresses through differing responses. Attackers can submit emails to the MotDePassePerdu recovery page without rate limiting to identify vali...
CVE-2026-104439
YesWiki versions prior to 4.6.7 are vulnerable to a user enumeration vulnerability within the LostPasswordAction.php component. Unauthenticated attackers can confirm registered email addresses by submitting emails to the MotDePassePerdu recovery page and analyzing the differing responses. The lac...
CVE-2026-104439 YesWiki before 4.6.7 User Enumeration via Lost-Password Flow
YesWiki before 4.6.7 contains a user enumeration vulnerability in LostPasswordAction.php that allows unauthenticated attackers to confirm registered email addresses through differing responses. Attackers can submit emails to the MotDePassePerdu recovery page without rate limiting to identify vali...
CVE-2026-104439 YesWiki before 4.6.7 User Enumeration via Lost-Password Flow
YesWiki before 4.6.7 contains a user enumeration vulnerability in LostPasswordAction.php that allows unauthenticated attackers to confirm registered email addresses through differing responses. Attackers can submit emails to the MotDePassePerdu recovery page without rate limiting to identify vali...
CVE-2026-104439 YesWiki before 4.6.7 User Enumeration via Lost-Password Flow
YesWiki before 4.6.7 contains a user enumeration vulnerability in LostPasswordAction.php that allows unauthenticated attackers to confirm registered email addresses through differing responses. Attackers can submit emails to the MotDePassePerdu recovery page without rate limiting to identify vali...
CVE-2026-94432 Appointment Booking Plugin <= 5.7.1 - Insecure Direct Object Reference to Unauthenticated Unauthorized Transaction Intent Creation/Modification and Invoice Enumeration via 'invoice_id' Parameter
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.1 via the OsPaypalConnectController::createorderfortransaction action registered as a public unauthenticate...
EUVD-2026-91258
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.1 via the OsPaypalConnectController::createorderfortransaction action registered as a public unauthenticate...
CVE-2026-94432
The Appointment Booking Plugin – LatePoint for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in versions up to and including 5.7.1 . The flaw exists in the OsPaypalConnectController::create_order_for_transaction() action, which is exposed as an unauthenticated route via wp...
EUVD-2026-91127
deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TurnRuntimeManager.regeneratelastturn. A remote caller can enumerate or obtain a sessionid and trigger regenerate on another user's session...
PT-2026-104140
Name of the Vulnerable Software and Affected Versions LatePoint | Calendar & Scheduling for WordPress versions prior to 5.7.2 Description An Insecure Direct Object Reference exists via the OsPaypalConnectController::create order for transaction action, which is registered as a public route throug...
CVE-2026-94432: Authorization Bypass Through User-Controlled Key
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.1 via the OsPaypalConnectController::createorderfortransaction action registered as a public unauthenticate...
CVE-2026-82043: Observable Response Discrepancy
UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...
PT-2026-104445
UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...