CVE-2020-1472

After reproducing, there are some small bugs; it gets stuck on the login screen for a long time after rebooting. Not sure if it's just me. Use cautiously in real environments. In practice, you can use secretsdump.py with the -use-vss and -history options to retrieve historical hashes for recovery...

CVE-2525-25748-Cross-Site-Request-Forgery-CSRF-Vulnerability-in-HotelDruid-3.0.7

CVE-2025-25748-跨站请求伪造（CSRF）漏洞-HotelDruid-3.0.7 描述 HotelDruid 3.0.7 的 gestioneutenti.php 端点存在跨站请求伪造（CSRF）漏洞，由于缺乏来源（Origin）或引用（Referer）验证以及缺少 CSRF 令牌，攻击者可利用此漏洞代表已认证用户执行未经授权的操作（例如修改用户密码）。 影响 未授权密码修改： 攻击者可覆盖用户密码，导致完全接管账户。 会话骑乘： 攻击者可利用受害者的活动会话进行未授权的管理更改。 数据泄露风险： 如果管理员账户被入侵，敏感的用户和运营数据可能会被暴露或篡改。...

nmap-nse-scripts

Repositorio para el desarrollo de NSE Nmap Scripting Engine. Encontrarás mis scripts incluyendo los no oficiales, librerías, recursos y otro material relacionado de mis talleres. TODO Finalizando la librería NSE de SMB2 Actualmente trabajando en la funcionalidad de modificación de contraseñas...

CVE-2018-13382

CVE-2018-13382 CVE-2018-13382 https://devco.re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn/ Una vulnerabilidad de autorización incorrecta en Fortinet FortiOS 6.0.0 a 6.0.4, 5.6.0 a 5.6.8 y 5.4.1 a 5.4.10 en el portal web de SSL VPN permite a un atacante no autenticado...

dirkjanm-CVE-2020-1472

CVE-2020-1472 POC 需要从 GitHub 获取最新的 impacket，并添加了 netlogon 结构。 请注意，此脚本默认会修改域控制器账户的密码。是的，这允许你进行 DCSync，但也会中断与其他域控制器的通信，请谨慎操作！ 更多信息及原始研究见 此处 安装 仅适用于 Python 3.6 及以上版本 ！如果你的操作系统已预装 impacket（如 Kali），请先卸载所有现有安装。如果此后仍然出现导入错误，请在 virtualenv 或 pipenv 中运行。 利用步骤 阅读上方的博客/白皮书，了解你在做什么 使用 DC 的 IP 和 NetBIOS 名称运行...

CVE-2023-42820

CVE-2023-42820 CVE-2023-42820 漏洞说明 JumpServer 密码重置漏洞 USAGE V2 Update 1. 全新重构 2. 新增没有接收到账户和邮箱的情况下，使用默认账户和邮箱 3. 改进对验证码的识别和计算 4. 自动修改密码 5. 屏蔽多余的logs输出 V1 计算验证码需要指定对应邮箱的用户名，运行后会自动判断是否存在漏洞，并尝试计算验证码 python CVE-2023-42820.py -t http://IP:Port -e email -u username ██████╗██╗ ██╗███████╗ ██████╗ ██████╗...

public-passwd

!WARNING Úsalo solo en sistemas que poseas o tengas autorización para probar. Se recomienda mantener una shell de root abierta si no podrás reiniciar el sistema en caso de fallo, ya que podrías no ser capaz de limpiar el caché de páginas de /etc/shadow sin root. public-passwd Usa CVE-2026-46333 y...

CVE-2026-77705

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a customer or employee record is entitled to modify the WordPress account linked to it, allowing users holding Amelia's customer or employee management permissions to set the...

CVE-2026-77705 Amelia < 2.4.10 - Amelia Manager+ WordPress Account Takeover

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a customer or employee record is entitled to modify the WordPress account linked to it, allowing users holding Amelia's customer or employee management permissions to set the...

EUVD-2026-76812

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a customer or employee record is entitled to modify the WordPress account linked to it, allowing users holding Amelia's customer or employee management permissions to set the...

CVE-2026-15479

A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function changepasswd of the file /api/login/modify of the component Administrator Password Modification Endpoint. The manipulation of the argument newPass results in weak password recovery. The attack may be...

CVE-2026-15479 H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recovery

A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function changepasswd of the file /api/login/modify of the component Administrator Password Modification Endpoint. The manipulation of the argument newPass results in weak password recovery. The attack may be...

CVE-2026-15479

The vulnerability CVE-2026-15479 affects H3C NX15 V100R017. The vulnerable component is the Administrator Password Modification Endpoint, specifically the change_passwd function at /api/login/modify. Manipulating the newPass parameter results in weak password recovery. The issue can be exploited ...

CVE-2026-15479 H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recovery

A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function changepasswd of the file /api/login/modify of the component Administrator Password Modification Endpoint. The manipulation of the argument newPass results in weak password recovery. The attack may be...

CVE-2026-15479: Weak Password Recovery Mechanism for Forgotten Password

A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function changepasswd of the file /api/login/modify of the component Administrator Password Modification Endpoint. The manipulation of the argument newPass results in weak password recovery. The attack may be...

EUVD-2026-27892

Vvveb before version 1.0.8.2 contains an XML external entity XXE injection vulnerability in the admin Tools/Import feature that allows authenticated siteadmin users to read arbitrary files and modify database records. Attackers can exploit the XML parser configuration in system/import/xml.php to...

Open Source Point of Sale 安全漏洞

Open Source Point of Sale is an open-source sales point system based on the Open Source Point of Sale framework. Versions prior to Open Source Point of Sale 3.4.2 contained security vulnerabilities. These vulnerabilities were caused by insecure direct object references, which could allow...

CVE-2026-23480

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is a privilege escalation vulnerability. The upsertUser endpoint has 3 issues: it is missing superAdminAuthMiddleware, any logged-in user can call it; the originalPassword is an optional parameter and if not provided...

The vulnerability of the microprogrammed software of EDIMAX GS-5008PL devices, related to the manipulation of inter-site requests, allows a hacker to gain access to modify passwords, restart the device, and reset system settings.

The vulnerability of the microprogrammed software of the EDIMAX GS-5008PL switches is related to the possibility of manipulating inter-site requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to modify passwords, restart the device, and reset...

CVE-2026-23480

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is a privilege escalation vulnerability. The upsertUser endpoint has 3 issues: it is missing superAdminAuthMiddleware, any logged-in user can call it; the originalPassword is an optional parameter and if not provided...