MantisBT <=2.30 - Arbitrary Password Reset/Admin Access

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirmhash value to verify.php. id: CVE-2017-7615 THIS TEMPLATE IS ONLY FOR DETECTING To carry out further attacks, please see reference2 below. This template works by guessing user ID. MantisBT...

OctoberCMS - Account Takeover

octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. The issue has been patched in Build 472 and v1.1.5. id:...

WhatsUp Gold HasErrors SQL Injection - Authentication Bypass

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. id: CVE-2024-6670 info: name: WhatsUp Gold HasErrors SQL Injection - Authentication Bypass author: DhiyaneshDK,princechaddha severity:...

Strapi-RCE

Strapi-RCE سكربت استغلال يعرض مزيجًا من CVE-2019-18818 وCVE-2019-19609 لتنفيذ الأوامر عن بُعد دون مصادقة في Strapi CMS. الاستغلال يستغل هذا السكربت ثغرة في إصدارات Strapi CMS حتى 3.0.0-beta.17.4 وما دونها، مما يسمح بتنفيذ الأوامر عن بُعد دون مصادقة. الوصف تعمل الأداة عن طريق استغلال ثغرة إعادة...

EUVD-2026-92049

LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS lookups and paid AbstractAPI verification calls. Unauthenticated attackers can submit arbitrary addresses to exhaust the verification quota, making...

Total-Commander-FTP-Password-Recovery-Tool-Python

استعادة كلمة مرور FTP الخاصة بـ Total Commander Python Total Commander المعروف سابقًا باسم Windows Commander هو مدير ملفات كلاسيكي لنظام Windows وWindows CE وWindows Phone والآن أيضًا لنظام Android. يحتوي Total Commander على عميل FTP/FXP مدمج ويحتفظ ببيانات تسجيل الدخول وكلمات المرور المشفرة لـ F...

fufu-sec

fufu-sec fufu-sec Framework for Uninvited Frequency Usage هو إطار عمل أمني لشبكات WiFi من الجيل التالي مخصص لتدقيق الشبكات اللاسلكية الشخصية والمؤسسية. يغطي كامل سطح الهجوم لشبكات 802.11 من لوحة تحكم واحدة في المتصفح. اكتشاف الشبكات، التقاط المصافحة، استخراج PMKID، استغلال WPS، نقاط الوصول المارق...

CVE-2026-105127: Allocation of Resources Without Limits or Throttling

LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS lookups and paid AbstractAPI verification calls. Unauthenticated attackers can submit arbitrary addresses to exhaust the verification quota, making...

PT-2026-104626

A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/system.func.php of the component MD5 Handler. Executing a manipulation of the argument pass can lead to password hash with insufficient computational effort. The attack may be launch...

CVE-2026-86817: Undefined Security Weakness

The Five Star Business Profile and Schema WordPress plugin before 2.4.0 does not properly restrict the callbacks used to resolve schema field default values, allowing authenticated users with Author-level access and above to store input that discloses sensitive data, including other users' passwo...

PT-2026-104609

Name of the Vulnerable Software and Affected Versions Five Star Business Profile and Schema WordPress plugin versions prior to 2.4.0 Description Insufficient restriction of callbacks used to resolve schema field default values allows authenticated users with Author-level access and above to store...

CVE-2026-105156: Use of Password Hash With Insufficient Computational Effort

A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/system.func.php of the component MD5 Handler. Executing a manipulation of the argument pass can lead to password hash with insufficient computational effort. The attack may be launch...

CVE-2026-105127 LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints

LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS lookups and paid AbstractAPI verification calls. Unauthenticated attackers can submit arbitrary addresses to exhaust the verification quota, making...

CVE-2026-105127 LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints

LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS lookups and paid AbstractAPI verification calls. Unauthenticated attackers can submit arbitrary addresses to exhaust the verification quota, making...

CVE-2026-105127 LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints

LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS lookups and paid AbstractAPI verification calls. Unauthenticated attackers can submit arbitrary addresses to exhaust the verification quota, making...

CVE-2026-105127

The LaraDashboard software (versions 1.4.2 before 1.4.8 ) is vulnerable to a resource exhaustion issue within its unauthenticated forgot-password and reset-password endpoints. The root cause is the application's use of advanced email validation, which triggers external DNS lookups and paid Abstra...

CVE-2026-27626-POC

CVE-2026-27626: حقن أوامر عبر وسيط كلمة مرور في OliveTin تتيح OliveTin للمسؤول تعريف «إجراءات»: أوامر شل مع وسائط معلمة يمكن للمستخدمين تشغيلها من واجهة ويب أو API. قبل تضمين قيمة مقدمة من المستخدم في أمر الشل، يُفترض أن تمررها OliveTin عبر checkShellArgumentSafety. تفحص هذه الدالة أربعة أنواع من...

CVE-2026-45332-PoC

CVE-2026-45332: Broken Access Control in Automad CMS Proof of concept for CVE-2026-45332 , a Broken Access Control vulnerability in Automad CMS that allows any unauthenticated attacker to dump the bcrypt password hash and TOTP secret of every administrator account through the setup endpoint, whic...

CVE-2023-32784-keepass-linux

KeePass 2.53/cmdline files and store the pid of ones with the keyword KeePass in their commandline argument. It'll then acquire the adresses of memory maps in /proc//maps that aren't directly associated with a library, meaning they have an empty file path. It'll then store the memory of all those...

CVE-2023-7028

CVE-2023-7028: CVE-2023-7028 Exploitation Tool Description: This Python script automates the exploitation of a hypothetical security vulnerability CVE-2023-7028 on GitLab instances. It facilitates password reset attacks on specified target email addresses, demonstrating a potential security risk...