CVE-2525-25748-Cross-Site-Request-Forgery-CSRF-Vulnerability-in-HotelDruid-3.0.7

CVE-2025-25748-跨站请求伪造（CSRF）漏洞-HotelDruid-3.0.7 描述 HotelDruid 3.0.7 的 gestioneutenti.php 端点存在跨站请求伪造（CSRF）漏洞，由于缺乏来源（Origin）或引用（Referer）验证以及缺少 CSRF 令牌，攻击者可利用此漏洞代表已认证用户执行未经授权的操作（例如修改用户密码）。 影响 未授权密码修改： 攻击者可覆盖用户密码，导致完全接管账户。 会话骑乘： 攻击者可利用受害者的活动会话进行未授权的管理更改。 数据泄露风险： 如果管理员账户被入侵，敏感的用户和运营数据可能会被暴露或篡改。...

dirkjanm-CVE-2020-1472

CVE-2020-1472 POC 需要从 GitHub 获取最新的 impacket，并添加了 netlogon 结构。 请注意，此脚本默认会修改域控制器账户的密码。是的，这允许你进行 DCSync，但也会中断与其他域控制器的通信，请谨慎操作！ 更多信息及原始研究见 此处 安装 仅适用于 Python 3.6 及以上版本 ！如果你的操作系统已预装 impacket（如 Kali），请先卸载所有现有安装。如果此后仍然出现导入错误，请在 virtualenv 或 pipenv 中运行。 利用步骤 阅读上方的博客/白皮书，了解你在做什么 使用 DC 的 IP 和 NetBIOS 名称运行...

CVE-2020-1472

复现完了有点小BUG，重启后会卡在登录页面比较久。不知道是不是只有我会。谨慎在真实环境利用 实战中可以使用secretsdump.py 的 -use-vss和-history获取历史hash进行恢复. 第一步 pip3 install -r requirements.txt 查看hash secretsdump.py molecule-labs.com/administrator:[email protected] -just-dc-user 'AD$' 攻击 python3 CVE-2020-1472.py AD AD$ 192.168.175.132 查询域控hash...

CVE-2018-13382

CVE-2018-13382 CVE-2018-13382 https://devco.re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn/ Fortinet FortiOS 6.0.0 至 6.0.4、5.6.0 至 5.6.8 以及 5.4.1 至 5.4.10 版本的 SSL VPN Web 门户中存在不当授权漏洞，允许未经身份验证的攻击者通过特制的 HTTP 请求修改 SSL VPN Web 门户用户的密码。 root@kitploit: $ python...

public-passwd

!WARNING 请仅在你拥有或获授权测试的系统上使用。如果你在失败时无法重启系统，建议保持一个 root shell 打开，因为如果没有 root，你可能无法清除 /etc/shadow 的页缓存。 public-passwd 利用 CVE-2026-46333 和 CVE-2026-31431，无需提升到 root 即可更改任意用户的密码。 使用方法 root@kitploit: python passwd.py 你也可以不带参数运行该命令，以查看 shadow 文件中当前的哈希。 截图 工作原理...

CVE-2023-42820

CVE-2023-42820 CVE-2023-42820 脆弱性の説明 JumpServer パスワードリセットの脆弱性 USAGE V2 Update 1. 完全なリファクタリング 2. アカウントとメールが受信されなかった場合、デフォルトのアカウントとメールを使用する機能を追加 3. キャプチャの認識と計算の改善 4. パスワードの自動変更 5. 余分なログ出力を抑制 V1 キャプチャの計算には対応するメールアドレスのユーザー名を指定する必要があります。実行後、自動的に脆弱性が存在するかどうかを判断し、キャプチャの計算を試みます。 root@kitploit: python...

nmap-nse-scripts

用于 NSE（Nmap 脚本引擎）开发的仓库。你将在这里找到我的脚本（包括非官方脚本）、库、资源以及来自我的工作坊的其他相关材料。 待办事项 -完成 SMB2 NSE 库 -目前正在开发密码变形功能 Paulino Calderon calderonwebsec.mx http://calderonpale.com...

CVE-2026-15479

A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function changepasswd of the file /api/login/modify of the component Administrator Password Modification Endpoint. The manipulation of the argument newPass results in weak password recovery. The attack may be...

CVE-2026-15479 H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recovery

A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function changepasswd of the file /api/login/modify of the component Administrator Password Modification Endpoint. The manipulation of the argument newPass results in weak password recovery. The attack may be...

CVE-2026-15479

The vulnerability CVE-2026-15479 affects H3C NX15 V100R017. The vulnerable component is the Administrator Password Modification Endpoint, specifically the change_passwd function at /api/login/modify. Manipulating the newPass parameter results in weak password recovery. The issue can be exploited ...

EUVD-2026-27892

Vvveb before version 1.0.8.2 contains an XML external entity XXE injection vulnerability in the admin Tools/Import feature that allows authenticated siteadmin users to read arbitrary files and modify database records. Attackers can exploit the XML parser configuration in system/import/xml.php to...

Open Source Point of Sale 安全漏洞

Open Source Point of Sale is an open-source sales point system based on the Open Source Point of Sale framework. Versions prior to Open Source Point of Sale 3.4.2 contained security vulnerabilities. These vulnerabilities were caused by insecure direct object references, which could allow...

CVE-2026-23480

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is a privilege escalation vulnerability. The upsertUser endpoint has 3 issues: it is missing superAdminAuthMiddleware, any logged-in user can call it; the originalPassword is an optional parameter and if not provided...

CVE-2026-23480

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is a privilege escalation vulnerability. The upsertUser endpoint has 3 issues: it is missing superAdminAuthMiddleware, any logged-in user can call it; the originalPassword is an optional parameter and if not provided...

CVE-2026-23480 Blinko: Low Privilege User Privilege Escalation - upsertUser Endpoint

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is a privilege escalation vulnerability. The upsertUser endpoint has 3 issues: it is missing superAdminAuthMiddleware, any logged-in user can call it; the originalPassword is an optional parameter and if not provided...

CVE-2026-23480

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is a privilege escalation vulnerability. The upsertUser endpoint has 3 issues: it is missing superAdminAuthMiddleware, any logged-in user can call it; the originalPassword is an optional parameter and if not provided...

Connect CMS: Improper Authorization in the My Page Profile Update Feature Allows Modification of Arbitrary User Information

Security Advisory — My Page Profile Update Improper Authorization Summary An improper authorization issue in the My Page profile update feature may allow modification of arbitrary user information. Affected Versions - 1.x series: = 1.41.0 - 2.x series: = 2.41.0 Patched Versions - 1.41.1 - 2.41.1...

Blinko 安全漏洞

Blinko is an open-source AI-based card-based note-taking application designed for users who want to quickly capture and organize fleeting ideas. Versions of Blinko prior to 1.8.4 contained security vulnerabilities. These vulnerabilities stemmed from deficiencies in the upsertUser endpoint,...

CVE-2026-33133

WeGIA is a web manager for charitable institutions. In versions 3.6.5 and 3.6.6, the loadBackupDB function imports SQL files from uploaded backup archives without any content validation. An attacker can craft a backup archive containing arbitrary SQL statements that create rogue administrator...

PT-2026-23660

Name of the Vulnerable Software and Affected Versions AppEngine affected versions not specified Description An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical...