CVE-2023-27372

CVE-2023-27372 Exploit Exploit for CVE-2023-27372 , an unauthenticated Remote Code Execution vulnerability in the SPIP CMS affecting versions prior to 4.2.1. ⚠️ For educational purposes only. Use exclusively on systems you own or have explicit written permission to test. Unauthorized use is...

CVE-2026-40935 WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failure

WWBN AVideo is an open source video platform. In versions 29.0 and prior, objects/getCaptcha.php accepts the CAPTCHA length ql directly from the query string with no clamping or sanitization, letting any unauthenticated client force the server to generate a 1-character CAPTCHA word. Combined with...

PT-2023-27308

Name of the Vulnerable Software and Affected Versions Silverware Games versions prior to 1.3.6 Description The issue concerns the Password Recovery form in Silverware Games, a premium social network for online gaming. Prior to version 1.3.6, the form would indicate whether an email address is...

CVE-2023-40179: Observable Response Discrepancy

Silverware Games is a premium social network where people can play games online. Prior to version 1.3.6, the Password Recovery form would throw an error if the specified email was not found in our database. It would only display the "Enter the code" form if the email is associated with a member o...

CVE-2022-23619

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to guess if a user has an account on the wiki by using the "Forgot your password" form, even if the wiki is closed to guest users. This problem has been...

PT-2021-4636

Name of the Vulnerable Software and Affected Versions UserGate D500 affected versions not specified Description The issue is related to insufficient protection of registration data in the web interface for remote administration of IPMI on the UserGate D500 corporate firewall. Exploitation of this...

CVE-2016-9127

Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery CSRF. The password recovery form in Revive Adserver is vulnerable to CSRF attacks. This vulnerability could be exploited to send a large number of password recovery emails to the registered users, especially in conjunction with ...

PT-2017-9964

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 3.2.3 Description The password recovery form in Revive Adserver is susceptible to Cross-Site Request Forgery CSRF attacks. This issue could be exploited to send a large number of password recovery emails to...

CVE-2016-9127: Cross-Site Request Forgery (CSRF)

Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery CSRF. The password recovery form in Revive Adserver is vulnerable to CSRF attacks. This vulnerability could be exploited to send a large number of password recovery emails to the registered users, especially in conjunction with ...