CVE-2026-5076

☠️ CVE-2026-5076 ARMember Premium = 7.3.1 असुरक्षित पासवर्ड रीसेट तंत्र → पूर्ण व्यवस्थापक खाता अधिग्रहण प्लेनटेक्स्ट पासवर्ड रीसेट कुंजियाँ डेटाबेस में संग्रहीत + SQL इंजेक्शन = पूर्ण व्यवस्थापक अधिग्रहण 📋 भेद्यता जानकारी आइटम| विवरण ---|--- CVE ID| CVE-2026-5076 प्लगइन| ARMember – सदस्यता प्लगइन...

redash-reset

redash-reset Questo utilizzerà una chiave REDASHSECRETKEY predefinita di c292a0a3aa32397cdb050e233733900f; ciò consente di reimpostare la password dell'ID utente, ma dovrai conoscere l'indirizzo email associato ad esso. Informazioni...

cve-2023-44487-demo

⚡ CVE-2023-44487 Demo – HTTP/2 Rapid Reset Attack Dieses Projekt demonstriert die HTTP/2 „Rapid Reset“-Sicherheitslücke CVE-2023-44487, die es Angreifern ermöglicht, Server mit RSTSTREAM-Frames zu überlasten und einen Denial-of-Service DoS zu verursachen. Es beinhaltet: ✅ Exploit-Test mit...

CVE-2025-22381

CVE-2025-22381: Iniezione dell'header Host in Aggie Analisi dettagliata e Proof-of-Concept per CVE-2025-22381, una vulnerabilità di Iniezione dell'header Host scoperta nel progetto open-source Aggie. Panoramica della vulnerabilità+ CVE ID: CVE-2025-22381 Pubblicata: ottobre 2025 assegnazione MITR...

CVE-2023-7028

CVE-2023-7028 ⚠️ Questo exploit è a scopo difensivo e dovrebbe essere utilizzato da professionisti della cybersecurity per identificare possibili server GitLab vulnerabili. Descrizione CVE-2023-7028 - Account Takeover tramite Password Reset senza interazione dell'utente in GitLab Community Edition...

CVE-2026-6741

CVE-2026-6741 CVE-2026-6741 ist eine Schwachstelle mit CVSS-Score 8.8 High zur Authenticated Agent+ Privilege Escalation im LatePoint – Calendar Booking Plugin CVE-2026-6741 — LatePoint-Privilege-Escalation-Scanner Plugin: LatePoint – Calendar Booking Plugin for Appointments and Events latepoint...

cve-2023-22515

CVE-2023-22515 Hier wird die Vorgehensweise zur Ausnutzung der Schwachstelle über Burp Suite beschrieben. Für die Ausnutzung ist es erforderlich, den Wert des Attributs bootstrapStatusProvider.applicationConfig.setupComplete auf false zu ändern, also die folgende Anfrage auszuführen: Anfrage zum...

CVE-2026-18963

CVE-2026-18963 Keycloak Reset-Credentials State Bypass Detector https://github.com/user-attachments/assets/005fab89-339a-4e4e-881c-da6a626f6c9e root@kitploit: python3 kc-resetforge.py -h usage: kc-resetforge.py -h --target TARGET --targets-file TARGETSFILE --port PORT --realm REALM --client-id...

CVE-2020-28874

Dieses Repository enthält die Beschreibung der gefundenen Sicherheitslücke CVE-2020-28874 in der Version r1270 von ProjectSend. Vielen Dank an meine Kollegen von Entelgy Innotec Security, die mich dazu angespornt haben, besser zu werden! CVE-2020-28874: Privilege Escalation Beschreibung Die...

tplink-CVE-2017-11519

tplink-CVE-2017-11519 POC per TP-Link Archer C9 - Reset della password amministratore e RCE CVE-2017-11519 Vedi il writeup su https://devcraft.io/posts/2017/07/21/tp-link-archer-c9-admin-password-reset.html...

CVE-2024-10508

Escalação de Privilégio Não Autenticada via Recuperação de Senha no RegistrationMagic = 6.0.2.6 Aviso Legal : Essas informações são fornecidas apenas para fins educacionais. Este documento visa conscientizar sobre vulnerabilidades de segurança e não deve ser usado para atividades não autorizadas ...

CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC

CVE-2023-44487 - Checker PoC per HTTP/2 Rapid Reset Descrizioni Questo script è una Proof of Concept PoC per CVE-2023-44487 , nota anche come attacco HTTP/2 Rapid Reset. La vulnerabilità consente agli attaccanti di eseguire un attacco Denial of Service DoS inviando rapidamente frame RSTSTREAM su...

CVE-2026-27886-PoC-Account-Takeover

CVE-2026-27886 Exploração Automatizada - Guia de Uso O Que Este Script Faz Automatiza toda a cadeia de comprometimento de conta em 4 grupos de requisições HTTP: 1. Verificação de Vulnerabilidade - Confirma se o alvo é vulnerável 2. Enumeração de E-mail - Extrai o e-mail do administrador via...

CVE-2023-4169_CVE-2023-3306_CVE-2023-4415

Ruijie-RG-EW1200G CVE-2023-4169CVE-2023-3306CVE-2023-4415 1. RG-EW1200G后台远程代码执行漏洞CVE-2023-3306 2. CVE-2023-4169 未授权任意密码修改CVE-2023-4169 3. 锐捷RG-EW1200G 登录绕过CVE-2023-4415 Atenção 我开发了一个用于本地测试和POC开发的工具，仅供技术学习参考。请不要将其用于非法目的。个人或组织使用本文提供的信息所造成的任何直接或间接后果和损失均由用户自行负责，与作者无关！！！ I have developed a tool for...

zerologon-CVE-2020-1472

CVE-2020-1472 - Zero-Logon POC Este exploit requer que você use o impacket mais recente do GitHub. Certifique-se de que a instalação do impacket seja feita com as estruturas netlogon adicionadas. Nota : 1. Por padrão, a exploração bem-sucedida altera a senha da conta do DC. 2. Permite DCSync 3...

EUVD-2026-67324

go-wind-cms GoWind before 1.0.0 has a missing authorization vulnerability. The NewAuthorizer function in app/admin/service/internal/data/data.go and app/app/service/internal/data/data.go returns a no-op authorization engine noop.State, so the authz middleware always allows requests. Any...

EUVD-2026-67295

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...

CVE-2023-7028

CVE-2023-7028 | खाता-अधिग्रहण गिटलैब अस्वीकरण यह कोड भेद्यता का एक प्रूफ ऑफ कॉन्सेप्ट है, मैं किसी को भी इसे उन गिटलैब इंस्टेंस पर उपयोग करने के लिए प्रोत्साहित नहीं कर रहा हूँ जिनके वे मालिक नहीं हैं। यह उपकरण केवल अनुसंधान और शैक्षिक उद्देश्यों के लिए विकसित किया गया है और मैं इसके किसी भी उपयो...

CVE-2025-47227_CVE-2025-47228

ScriptCase - تنفيذ أوامر عن بُعد قبل المصادقة سلاسل إعادة تعيين كلمة مرور المسؤول تجاوز المصادقة، CVE-2025-47227 وحقن الأوامر تنفيذ أوامر عن بُعد بعد المصادقة، CVE-2025-47228 يتم تحقيق تنفيذ الأوامر عن بُعد قبل المصادقة من خلال ربط ثغرتين: الأولى هي القدرة على إعادة تعيين كلمة مرور مسؤول وحدة...

CVE-2026-77977

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...