Simplog-Exploit

Simplog-Exploit Questo repository contiene la configurazione, l'exploit e la patch per la vulnerabilità CSRF CVE-2009-4092 di Simplog. La vulnerabilità risiede nel file user.php di Simplog 0.9.3.2, un'applicazione web utilizzata per fornire alle persone un modo semplice per creare e mantenere un...

CVE-2026-34828

CVE-2026-34828 Persistenza delle sessioni di listmonk dopo il reset e la modifica della password Introduzione Ho trovato questo problema mentre esaminavo listmonk , un gestore open-source di newsletter e mailing list, con una semplice domanda di sicurezza in mente: Quando un utente modifica o...

CVE-2026-79673

Ech0 before 4.4.3 protects the PUT /user endpoint with the profile:read scope, a read-only scope, but allows write operations including password changes. An attacker with an admin's profile:read access token can change the admin's password and login to obtain an unrestricted session token that...

EUVD-2026-65441

Ech0 before 4.4.3 protects the PUT /user endpoint with the profile:read scope, a read-only scope, but allows write operations including password changes. An attacker with an admin's profile:read access token can change the admin's password and login to obtain an unrestricted session token that...

CVE-2026-79673 Ech0 before 4.4.3 Scope Bypass via profile:read Token

Ech0 before 4.4.3 protects the PUT /user endpoint with the profile:read scope, a read-only scope, but allows write operations including password changes. An attacker with an admin's profile:read access token can change the admin's password and login to obtain an unrestricted session token that...

CVE-2026-79673

Ech0 before 4.4.3 has a scope enforcement bypass in the PUT /user endpoint. The endpoint is guarded by the profile:read scope—a read-only permission—yet it still allows write operations, including password changes . An attacker holding an admin's profile:read access token can reset that admin's p...

CVE-2024-48887-FortiSwitch-Exploit

CVE-2024-48887-FortiSwitch-Exploit 🚨 FortiSwitch CVE-2024-48887 PoC JavaScript 🚨 🔥 Acabei de publicar um snippet JavaScript leve mostrando como alterações de senha não autorizadas podem ser acionadas em endpoints GUI vulneráveis do Fortinet FortiSwitch. 🛠️ Sobre a Vulnerabilidade: Um atacante pode...

nepstech-xpon-router-CVE-2024-40119

nepstech-xpon-router-CVE-2024-40119 Autor: Subhodeep Baroi CVE-2024-40119: Vulnerabilidade CSRF no Roteador Wi-Fi Nepstech NTPL-XPON1GFEVN v1.0 Descrição CVE-2024-40119 é uma vulnerabilidade de Cross-Site Request Forgery CSRF no roteador Wi-Fi Nepstech xpon NTPL-XPON1GFEVN v1.0, firmware v2.0.1...

CVE-2021-40101

XSS nei sondaggi combinato con CSRF porta al takeover dell'account amministratore in Concrete5 8.5.4 Un amministratore di Concrete CMS nelle versioni precedenti alla 9 non doveva fornire la propria password quando cambiava la password di un altro utente. In combinazione con CVE-2021-28145 "Concre...

CVE-2024-42850

CVE-2024-42850 Ein Problem in der Passwortänderungsfunktion von Silverpeas v6.4.2 und niedrigeren Versionen ermöglicht es, die Anforderungen an die Passwortkomplexität zu umgehen. Writeup Beim Ändern des Passworts wird das neue Passwort nach der Übermittlung zunächst in einer POST-Anfrage an eine...

CVE-2020-35846

Cockpit CMS NoSQL Injection to Esecuzione Remota di Codice : CVE-2020-35846 Descrizione Cockpit CMS presenta alcune vulnerabilità NoSQL che possono essere utilizzate per scaricare le informazioni degli utenti. Queste fughe di informazioni possono essere concatenate per modificare le password degl...

CVE-2024-42849

CVE-2024-42849 Un problema in Silverpeas v.6.4.2 e versioni precedenti consente a un attaccante remoto di causare un denial of service tramite la funzione di cambio password. Writeup Se la richiesta di cambio password viene intercettata e viene fornita una stringa sufficientemente lunga 1 MB come...

CVE-2022-27434

CVE-2022-27434 UNIT4 TETA Mobile Edition 29HF13 में errorReporting पृष्ठ के ProfileName पैरामीटर के माध्यम से SQL इंजेक्शन भेद्यता पाई गई। यह भेद्यता एप्लिकेशन द्वारा उत्पन्न त्रुटि पृष्ठ में मौजूद है इस मामले में: पासवर्ड बदलते समय। ProfileName पैरामीटर में उद्धरण चिह्न जोड़ने पर Oracle डेटाबेस...

CVE-2025-58434-PoC

CVE-2025-58434-PoC Dieses Repository enthält ein Proof of Concept PoC Python-Skript für CVE-2025-58434, das es Angreifern ermöglicht, Passwörter anderer Benutzer ohne Authentifizierungsprozess in Flowise Version 3.0.5 und niedriger aufgrund von Token-Leckage zu ändern. Verwendung Um den Exploit...

CVE-2026-15964-PoC

CVE-2026-15964 - Single Sign On For TNG = 2.0.0 Nicht authentifizierte Privilegienerweiterung durch ungeprüfte Passwortänderung im WordPress-Plugin Single Sign On For TNG. | ---|--- Schweregrad| Kritisch 9.8 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-620 Ungeprüfte Passwortänderung...

Laravel Backpack CRUD: Unverified password change in MyAccountController via mass assignment

Summary The MyAccountController::postAccountInfoForm action bound to POST /admin/edit-account-info calls $this-guard-user-update$request-except'token'. Because the controller uses except'token' rather than $request-validated or the restricted keys defined in AccountInfoRequest::validationData, an...

CVE-2026-76633

WeGIA before 3.9.2 contains an authorization bypass vulnerability in the password change flow that allows any authenticated user to change their account password without providing existing credentials by exploiting the unconditional exclusion of the alterarSenha method from permission checks in...

CVE-2026-76633

WeGIA before 3.9.2 contains an authorization bypass in the password change flow. The root cause is the unconditional exclusion of the alterarSenha method from permission checks in controle/control.php. An attacker with any authenticated session can manipulate the redir parameter to point to alter...

CVE-2026-76633 WeGIA < 3.9.2 Authorization Bypass Password Change via alterarSenha

WeGIA before 3.9.2 contains an authorization bypass vulnerability in the password change flow that allows any authenticated user to change their account password without providing existing credentials by exploiting the unconditional exclusion of the alterarSenha method from permission checks in...

EUVD-2026-63351

WeGIA before 3.9.2 contains an authorization bypass vulnerability in the password change flow that allows any authenticated user to change their account password without providing existing credentials by exploiting the unconditional exclusion of the alterarSenha method from permission checks in...