CVE-2026-107276 MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests

MISP contains a race condition in the email-based one-time password OTP login flow. When two HTTP requests carrying the same valid OTP are submitted concurrently, both can successfully authenticate and establish a session. The root cause is that the OTP value is read from the shared store,...

CVE-2025-63314

CVE-2025-63314 - Acora CMS의 비밀번호 재설정 토큰 부적절 처리 Crowe India의 Joby Y Daniel이 발견함 📌 개요 DDSN Interactive cm3 Acora CMS 버전 10.7.1 은 비밀번호 재설정 기능에 보안 취약점을 포함하고 있습니다. 애플리케이션은 정적이고 지속적인 비밀번호 재설정 토큰을 사용하며, 이 토큰은 사용 후 무효화되지 않고 시간이 지나도 만료되지 않습니다. 이 결함으로 인해 유효한 재설정 토큰을 획득한 공격자가 해당 토큰을 무기한 재사용할 수 있으며, 이는 권한 있는...

FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

The U.S. Federal Bureau of Investigation FBI and Secret Service USSS on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer SSL virtual private network VPN gateways. "The campaign...

Improper Access Control

Payload is vulnerable to improper access control. The vulnerability is due to insufficient enforcement of the access.update restriction, which allows an attacker with appropriate access to bypass the restriction and modify a user's password...

CVE-2020-1472

CVE-2020-1472 POC 최신 impacket을 GitHub에서 추가된 netlogon 구조와 함께 필요로 합니다. 기본적으로 이는 도메인 컨트롤러 계정의 비밀번호를 변경합니다. 예, 이로 인해 DCSync가 가능하지만, 다른 도메인 컨트롤러와의 통신이 중단되므로 주의하십시오! 더 많은 정보와 원본 연구는 여기에서 확인하세요. 익스플로잇 단계 위의 블로그/백서를 읽어서 무슨 작업을 하는지 이해하세요 DC의 IP와 netbios 이름을 사용하여 cve-2020-1472-exploit.py를 실행하세요 -just-dc 및...

CVE-2022-46484

CVE-2022-46484 Data Illusion Survey Software Solutions NGSurvey v2.4.28 및 이하 버전의 비밀번호로 보호된 설문조사에서 정보 공개 취약점으로 인해, 공격자가 설문조사에 접근할 비밀번호를 확인하고 설문조사를 임의로 제출할 수 있습니다...

GoFileX

GoFileX パスワード保護された GoFile 共有に対してワードリストを試行するための、90年代後半風 IRC クライアント TUI。 文書化された REST API とのみ通信し、レート制限を厳格なルールとして扱う。リクエストは逐次実行、控えめなデフォルト間隔、429 / error-rateLimit に対する指数バックオフ、そして 429 が繰り返された場合の自動一時停止により、クライアントが IP バンに踏み込まないようにする。 作者: @abraxasnull · github.com/abraxas · abraxaslabs.tech ·...

CVE-2026-104667

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

CVE-2026-104953

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2023-51119

CVE-2023-51119 D-Link DIR-605L 라우터의 부적절한 접근 제어 취약점 설명: 부적절한 접근 제어로 인해, 특정 상황에서 인증 없이 요청을 보내 관리자 계정을 탈취할 수 있습니다 정당한 관리자가 로그인되어 있기만 하면 됨 실제로, 웹 설정 패널에서 수행 가능한 모든 라우터 작업관리자 비밀번호 변경 포함을 수행할 수 있으며, 이는 계정 탈취로 이어집니다. 이 익스플로잇은 라우터의 관리자 사용자에 대해 임의의 비밀번호를 설정하는 전체 과정을 자동화합니다. Happy hacking : 공개 타임라인:...

CVE-2026-104953 MPG < 4.2.3 - Editor+ SQLi via Project Import

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

EUVD-2026-94184

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2026-104953

The MPG WordPress plugin (versions before 4.2.3 ) is vulnerable to SQL injection due to improper validation of imported project data before it is used in database queries. This flaw allows users with Editor privileges or higher to execute malicious queries and access sensitive information, such a...

CVE-2026-104953 MPG < 4.2.3 - Editor+ SQLi via Project Import

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2026-104667 Animated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter Order

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

CVE-2026-104667 Animated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter Order

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

EUVD-2026-94181

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

CVE-2026-104667

The Animated Number Counters WordPress plugin (versions before 3.1 ) is vulnerable to a second-order SQL injection (CWE-89). The root cause is the failure to sanitize or escape values stored by a user with Editor-level privileges before they are concatenated into a SQL query. This query is execut...

CVE-2026-103868 Pulp-container: registry credentials are reused across remotes in a worker

A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials from one remote are reused for later downloads in the same worker. A user who can sync a container remote, and can point that remote at a server they control, receives the username,...

CVE-2023-29084

CVE-2023-29084 ManageEngine ADManager Plus におけるコマンドインジェクション Poc POST /api/json/admin/saveServerSettings HTTP/1.1 Host: 10.10.10.99:8080 Content-Length: 183 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...