CVE-2023-43154-PoC

CVE-2023-43154 - Macs Framework v1.1.4f CMS 타입 혼동 취약점 목차 1. 개요 2. 개념 증명 3. 기술 브리핑 4. 완화 대책 개요 CVE-ID : CVE-2023-43154 CVSS 3.1 : 9.8 취약점 설명 : isValidLogin 함수의 느슨한 비교로 인해 PHP 타입 혼동 취약점이 발생하며, 이를 악용하여 인증을 우회하고 관리자 계정을 탈취할 수 있습니다. 취약 매개변수 : CMS 사용자의 사용자 이름과 비밀번호. 영향을 받는 제품 : Macs Framework v1.14f -...

Seraphinite Accelerator <= 2.29.18 - Cross-Site Scripting

The Seraphinite Accelerator plugin for WordPress up to and including 2.29.18 was vulnerable to reflected cross-site scripting through the seraphaccelprep parameter. CacheExtractPreparePageParams compared the expected HMAC against the JSON-decoded nonce with PHP's loose != operator, so a JSON...

CVE-2026-15981

CVE-2026-15981 SAML Single Sign On = 5.4.4 - SAMLResponse 매개변수를 통한 인증되지 않은 인증 우회 CVE-2026-15981 SAML Single Sign On ≤ 5.4.4 — 인증되지 않은 인증 우회 개념 증명 Proof-of-Concept 익스플로잇 잘못된 서명 → opensslverify가 -1 반환 → PHP 느슨한 형변환으로 true 처리 → Administrator 권한으로 wpsetauthcookie 호출 취약점 개요 필드| 세부 정보 ---|--- CVE ID|...

CVE-2022-45599

CVE-2022-45599 CVE URL:| https://vulners.com/cve/CVE-2022-45599 ---|--- 報告者:| TanYeeTat 製品:| Aztech WMB250AC ワイヤレスメッシュルーター 影響を受けるファームウェア:| 2020年リリース topaz-linux.lzma.img ファームウェアのダウンロード:| クローズドソース 製品マニュアル: https://kylaconnect.com/download-center/ 脆弱性は、2022年6月7日に [email protected] 経由で Aztech...

CVE-2026-52767

YesWiki versions 4.6.2 through 4.6.5 are affected by a signature-verification bypass in the ActivityPub implementation. The vulnerable function HttpSignatureService::verifySignature() in tools/bazar/services/HttpSignatureService.php uses a loose boolean negation on PHP's openssl_verify(). When op...

CVE-2026-7458

🧨 CVE-2026-7458 – Bypass de OTP en PickPlugins User Verification Omisión de autenticación sin autenticación previa mediante comparación débil en la API REST de verificación OTP PickPlugins User Verification ≤ 2.0.46 📖 Descripción El plugin User Verification de PickPlugins para WordPress versiones...

hashes

Magic hashes – PHP 해시 "충돌" password 1 로 등록한 다음 password 2 로 로그인해 보세요. 로그인에 성공한다면 저장소가 지정된 알고리즘으로 비밀번호를 해시하고 PHP가 ==를 사용해 비교한다는 뜻입니다MD5, SHA-1 및 plaintext의 경우. MD5, SHA-1, SHA-224, SHA-256 및 기타 MD5 , SHA-1 및 SHA-2 계열 의 경우, 오래전부터 알려진 트릭을 사용합니다실제로는 문서화된 기능입니다. PHP 유형 비교 표 및 부동 소수점 숫자를 참조하세요. PHP에서...

CVE-2021-32648

CVE-2021-32648 October CMS の認証バイパス CVE-2021-32648 に対するコードをパッチしてください 手順 1. ファイル vendor/october/rain/src/Auth/Models/User.php を開きます 2. これらの差分ノートにあるパッチを適用します 3. ファイルを保存します 概要 2つの等号 == を3つの等号 === に置き換えることで、緩い比較を厳密な比較に変換しています。これにより、CVE-2021-32648 および CVE-2021-29487 に記載されている攻撃ベクトルをブロックします。 この問題は Octobe...

CVE-2026-17532

Seraphinite Accelerator 로 다시 에코됩니다. 단일 URL, 인증 불필요: root@kitploit: http://TARGET/?seraphaccelprep=alertdocument.domain" 사용법 Python pip install requests 필요: root@kitploit:...

CVE-2026-77998

Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO 11.0.2, SAML SP Single Sign On – Login with ADFS 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps 6.4 - This is due to the mosamlvalidatesignature function...

CVE-2026-77998 Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps < 6.4

Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO 11.0.2, SAML SP Single Sign On – Login with ADFS 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps 6.4 - This is due to the mosamlvalidatesignature function...

CVE-2026-14182

The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that an attacker can satisfy with a crafted value type, allowing unauthenticated users to verify and take over the accoun...

CVE-2026-14182

The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that an attacker can satisfy with a crafted value type, allowing unauthenticated users to verify and take over the accoun...

EUVD-2026-57726

The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that an attacker can satisfy with a crafted value type, allowing unauthenticated users to verify and take over the accoun...

Exploit for CVE-2026-7458

🧨 CVE-2026-7458 – PickPlugins User Verification OTP Bypass Un...

CVE-2026-6072

The Oliver POS – A WooCommerce Point of Sale POS plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and including 2.4.2.6. The plugin protects its entire /wp-json/pos-bridge/ REST API namespace through the oliverposrestauthentication...

CVE-2026-6498

The Five Star Restaurant Reservations plugin for WordPress is vulnerable to a payment bypass via PHP type juggling in versions up to, and including, 2.7.16 This is due to the validpayment function using a PHP loose comparison == between the attacker-controlled paymentid POST parameter and the...

CVE-2026-6498

The Five Star Restaurant Reservations plugin for WordPress is vulnerable to a payment bypass via PHP type juggling in versions up to, and including, 2.7.16 This is due to the validpayment function using a PHP loose comparison == between the attacker-controlled paymentid POST parameter and the...

PT-2026-28533

Name of the Vulnerable Software and Affected Versions AVideo versions up to and including 26.0 Description The get api video password is correct API endpoint allows any unauthenticated user to verify whether a given password is correct for any password-protected video. The endpoint returns a...

PT-2026-23648

Talishar is a fan-made Flesh and Blood project. Prior to commit a9c218e, an authentication bypass vulnerability in Talishar's game endpoint validation logic allows any unauthenticated attacker to perform authenticated game actions — including sending chat messages and submitting game inputs — by...