Linux Distros Unpatched Vulnerability : CVE-2026-92821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol...

CVE-2025-28355

CVE-2025-28355 https://github.com/Volmarg/personal-management-system アプリケーションが CSRF 攻撃に対して脆弱であることが特定されました。 攻撃者が実行できる多くのアクションの 1 つは、正当なユーザーを欺いてクロスサイトリクエストを実行させ、パスワードを変更させることです。 これにより、攻撃者はアプリケーションにアクセスできるようになります。この脆弱性には、“SameSite” Cookie 属性のデフォルト値が none である Firefox などのブラウザが必要です。 ベクター文字列 :...

Filament: Multi-factor authentication (app) management actions do not require password reauthentication

App-based multi-factor authentication management actions did not consistently require the user to confirm their current password. In particular, an authenticated session could set up app-based MFA and obtain recovery codes without password reauthentication. Disabling app-based MFA and regeneratin...

GHSA-7M6H-RG42-M449 Filament: Multi-factor authentication (app) management actions do not require password reauthentication

App-based multi-factor authentication management actions did not consistently require the user to confirm their current password. In particular, an authenticated session could set up app-based MFA and obtain recovery codes without password reauthentication. Disabling app-based MFA and regeneratin...

CVE-2024-23733

CVE-2024-23733 Software AG webMethods API Integration Server 10.15.0 부적절한 접근 제어 설명 Integration Server의 /WmAdmin/,/invoke/vm.server/login 로그인 페이지Software AG webMethods 10.15.0, CoreFix7 이전 버전에서 원격 공격자가 임의의 사용자 이름과 빈 비밀번호를 /WmAdmin//login/ URI로 전송하여 관리 패널에 접근하고 호스트 이름 및 버전 정보를 확인할 수 있습니다. 취약점 유형 부적...

CVE-2026-105785

Prior to Joplin Server 3.7.2 , a vulnerability exists in the TokenModel.ts and UserModel.ts components. The system stores CSRF, account-confirmation, email-change, and password-reset tokens without distinguishing their specific purposes. This allows an attacker to use a leaked CSRF or confirmatio...

CVE-2026-105785 Joplin Server password reset accepts tokens issued for unrelated purposes

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without a purpose, and...

CVE-2026-105785 Joplin Server password reset accepts tokens issued for unrelated purposes

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without a purpose, and...

EUVD-2026-92872

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without a purpose, and...

CVE-2026-105785 Joplin Server password reset accepts tokens issued for unrelated purposes

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without a purpose, and...

CVE-2026-105763 Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL

Twenty is an open-source CRM customer relationship management platform. From 1.20.10 until 2.7.0, the /metadata GraphQL connectedAccounts query returned connectionParameters from ConnectedAccountDTO for every connected account in a workspace, including plaintext IMAP, SMTP, and CalDAV passwords,...

CVE-2026-105763 Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL

Twenty is an open-source CRM customer relationship management platform. From 1.20.10 until 2.7.0, the /metadata GraphQL connectedAccounts query returned connectionParameters from ConnectedAccountDTO for every connected account in a workspace, including plaintext IMAP, SMTP, and CalDAV passwords,...

CVE-2026-105763

The Twenty open-source CRM platform is vulnerable to plaintext password disclosure in versions 1.20.10 through 2.7.0 . The /metadata GraphQL connectedAccounts query returns connectionParameters for all connected accounts in a workspace without enforcing the calling user's identity or account visi...

CVE-2026-105763 Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL

Twenty is an open-source CRM customer relationship management platform. From 1.20.10 until 2.7.0, the /metadata GraphQL connectedAccounts query returned connectionParameters from ConnectedAccountDTO for every connected account in a workspace, including plaintext IMAP, SMTP, and CalDAV passwords,...

CVE-2024-35468

CVE-2024-35468 제출자: Kha Do Human Resource Management System 1.0 취약점 SQL 인젝션 설명 SourceCodester Human Resource Management System 1.0의 /hrm/index.php에 존재하는 SQL 인젝션 취약점으로, 공격자가 password 매개변수를 통해 임의의 SQL 명령을 실행할 수 있습니다. 영향받는 구성 요소 /hrm/index.php 영향 공격자는 페이로드 'or'1'='1을 사용하여 자격 증명 없이 관리자 계정으로 로그인할 수...

CVE-2026-91107

openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staffid and cause the School Information update path to reset that selected account's password...

Hack-The-Box-Enigma-Findings-Report

🛡️ Hack The Box - Enigma 연구 결과 보고서 📋 개요 이 저장소는 Hack The Box 머신 Enigma에 대한 종합적인 침투 테스트 보고서를 포함합니다. 🔍 주요 발견 사항 안전하지 않은 NFS 공유로 온보딩 문서 노출 - 중간 심각도 암호화되지 않은 이메일 콘텐츠를 통한 내부 자격 증명 노출 - 중간 심각도 직원 IMAPS 계정 간 비밀번호 재사용 - 높은 심각도 OpenSTAManager 인증된 OS 명령 주입 CVE-2025-69212 - 치명적 심각도 웹 애플리케이션 구성의 평문 데이터베이스 자격 증...

CVE-2025-47227

CVE-2025-47227 CVE-2025-47227 のエクスプロイト - ScriptCase パスワードリセット（事前認証） CVE-2025-47227 は、ScriptCase Production Environment ≤ 9.12.006 における 事前認証 の認証バイパス（CVSS 9.8）です。login.php エンドポイントは、トークン、メール検証、認証を必要とせずに管理者パスワードのリセットを許可します。必要なのは、4文字のCAPTCHA（簡単に解ける）と nmaction=changepass を送信するPOSTのみです。 CVE-2025-47228...

CVE-2026-91107 openSIS Classic 9.3 - Insecure Direct Object Reference (IDOR)

openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staffid and cause the School Information update path to reset that selected account's password...

CVE-2026-91107 openSIS Classic 9.3 - Insecure Direct Object Reference (IDOR)

openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staffid and cause the School Information update path to reset that selected account's password...