CVE-2024-34327

Vérificateur de vulnérabilité SQL Injection CVE-2024-34327 Ce script V-24-02-001SQLiCheck.py est un outil proof-of-concept PoC pour vérifier la présence d'une vulnérabilité d'injection SQL aveugle basée sur le temps affectant le point de terminaison password-reset-token.php, identifiée comme...

CVE-2024-10508

Неаутентифицированное повышение привилегий через восстановление пароля в RegistrationMagic = 6.0.2.6 Отказ от ответственности : Эта информация предоставлена только в образовательных целях. Этот документ направлен на повышение осведомленности об уязвимостях безопасности и не должен использоваться...

CVE-2022-24181

CVE-2022-24181 и CVE-2022-26616, вероятно, одинаковы Уязвимость Open-journal-system XSS через инъекцию заголовка Host и кража токена сброса пароля другого пользователя Шаги для воспроизведения: 1. Перейдите на этот сайт: https://who's-using-ojs-software.com 2. Захватите этот запрос в Burp и...

HTB-Silentium-Writeup

HTB - Разбор Silentium Информация о машине Название: Silentium ОС: Linux Сложность: Easy CVE: CVE-2025-58434, CVE-2025-59528, CVE-2025-8110 Энумерация Nmap-скан nmap -sC -sV -p- --min-rate 5000 -oN nmap.txt Открытые порты: 22 SSH, 80 HTTP Виртуальные хостыstaging.silentium.htb работает под...

CVE-2025-63314

CVE-2025-63314 - Gestion inappropriée du jeton de réinitialisation de mot de passe dans Acora CMS Découvert par Joby Y Daniel de Crowe India 📌 Présentation cm3 Acora CMS version 10.7.1 de DDSN Interactive contient une vulnérabilité de sécurité dans sa fonctionnalité de réinitialisation de mot de...

FOSKiller

███████╗ ██████╗ ███████╗██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██╔════╝██╔═══██╗██╔════╝██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ █████╗ ██║ ██║███████╗█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██╔══╝ ██║ ██║╚════██║██╔═██╗ ██║██║ ██║ ██╔══╝ ██╔══██╗ ██║ ╚██████╔╝███████║██║ ██╗██║███████╗███████╗███████╗██║ ██║...

Flowise-CVE-2025-58434-Chain-59528

Chaîne de CVEs FlowiseAI - ATO CVE-2025-58434 et RCE CVE-2025-59528 ⚠️ À des fins éducatives et de recherche en sécurité autorisée uniquement. L'utilisation de cet outil contre des systèmes que vous ne possédez pas ou pour lesquels vous n'avez pas d'autorisation écrite est illégale. Table des...

CVE-2025-50433

CVE-2025-50433 — Vulnérabilité critique de prise de contrôle de compte affectant les plateformes cloud Monnit .imonnit.com Résumé Une vulnérabilité d'authentification critique existe sur .imonnit.com qui permet une prise de contrôle totale du compte ATO sur n'importe quel compte utilisateur sans...

PrestaShop - Information Disclosure

User enumeration vulnerability in the AdminLogin controller in PrestaShop 1.7 through 8.2.2 allows remote attackers to obtain administrators user email addresses via manipulation of the idemployee and resettoken parameters. An attacker who has access to the Back Office login URL can trigger the...

CVE-2026-18550

The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6. This is due to insufficient reset token validation in the nokriresetpassword function, which allows empty attacker-supplied reset tokens to...

EUVD-2026-69021

The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6. This is due to insufficient reset token validation in the nokriresetpassword function, which allows empty attacker-supplied reset tokens to...

CVE-2026-18550 Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter

The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6. This is due to insufficient reset token validation in the nokriresetpassword function, which allows empty attacker-supplied reset tokens to...

CVE-2026-18550 Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter

The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6. This is due to insufficient reset token validation in the nokriresetpassword function, which allows empty attacker-supplied reset tokens to...

PT-2026-84146

Name of the Vulnerable Software and Affected Versions Nokri - Job Board WordPress Theme versions prior to 1.6.7 Description Insufficient reset token validation in the nokri reset password function allows unauthenticated attackers to perform privilege escalation via account takeover. By providing ...

Information Exposure

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Information Exposure due to the storage of password reset tokens in a publicly accessible tracking file when user tracking is enabled. An attacker can...

CVE-2026-75918

phpMyFAQ before 4.1.7 stores password reset tokens in a publicly accessible tracking file when user tracking is enabled. Unauthenticated attackers can read the tracking file at content/core/data/trackingDDMMYYYY to extract reset tokens and replay them against the password reset API to take over...

CVE-2026-75918 phpMyFAQ before 4.1.7 Authentication Bypass via Tracking File

phpMyFAQ before 4.1.7 stores password reset tokens in a publicly accessible tracking file when user tracking is enabled. Unauthenticated attackers can read the tracking file at content/core/data/trackingDDMMYYYY to extract reset tokens and replay them against the password reset API to take over...

CVE-2026-39923 Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /reset

Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability that allows unauthenticated attackers to reuse expired password reset tokens by submitting them directly to the reset processing endpoint. The SavePasswordController::handle method calls PasswordToken::findOrFail...

CVE-2026-39923: Use of a Key Past its Expiration Date

Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability that allows unauthenticated attackers to reuse expired password reset tokens by submitting them directly to the reset processing endpoint. The SavePasswordController::handle method calls PasswordToken::findOrFail...

CVE-2026-18363

A logic vulnerability in the password reset token validation routine implemented by osTicket in versions prior to v1.17.8 and v1.18.4. During the password reset process, the application retrieves the timestamp associated with the provided token and checks whether the configured validity period ha...