CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below

CVE-2023-37755 - Credencial de administrador codificada en i-doit Pro 25 y versiones anteriores i-doit Pro 25 y versiones anteriores son vulnerables a una vulnerabilidad de credencial de administrador codificada. Estas vulnerabilidades permiten que cualquier persona inicie sesión como administrad...

CVE-2022-40470

CVE-2022-40470 Cross Site Scripting en el Sistema de Gestión de Donantes de Sangre usando CodeIgniter - 1.0 Descripción sugerida Phpgurukul Sistema de Gestión de Donantes de Sangre 1.0 permite Cross Site Scripting a través de la función Agregar Nombre de Grupo Sanguíneo. Información Adicional PoC...

Breacher

Breacher Un script para encontrar páginas de inicio de sesión de administrador y vulnerabilidades EAR. Características Multihilo a demanda Lista grande de rutas 482 rutas Soporta extensiones php, asp y html Verifica posibles vulnerabilidades EAR Verifica robots.txt Soporte para rutas personalizad...

CVE-2024-10924

Exploit para CVE-2024-10924 Plugin Really Simple Security de WordPress - Bypass de Autenticación 📌 Descripción General CVE-2024-10924 es una vulnerabilidad crítica de omisión de autenticación en el plugin Really Simple Security para WordPress versiones 9.0.0 a 9.1.1.1. Esta vulnerabilidad permite...

Alumni Management System 1.0 - SQL Injection

SourceCodester Alumni Management System 1.0 contains a sqlinjection caused by unsanitized input in admin/login.php, letting attackers bypass authentication, exploit requires injection of malicious SQL payload. id: CVE-2020-29214 info: name: Alumni Management System 1.0 - SQL Injection author:...

JFrog Artifactory 6.7.3 - Admin Login Bypass

JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...

CVE-2023-7172

CVE-2023-7172 Overview This project contains a vulnerable version of a Hospital Management System HMS that is susceptible to SQL Injection CVE-2023-7172. SQL Injection is a critical web application vulnerability that can have severe impacts on the security and functionality of a system. CVE Detai...

CVE-2024-9933

CVE-2024-9933 WatchTowerHQ = 3.10.1 - Omisión de Autenticación a Administrador debido a la Falta de Verificación de Valor Vacío Descripción: El plugin WatchTowerHQ para WordPress es vulnerable a una omisión de autenticación en versiones hasta la 3.9.6 inclusive. Esto se debe a que el valor...

CVE-2025-41646---Critical-Authentication-Bypass-

CVE-2025-41646---Bypass-Crítico-de-Autenticación- CVE-2025-41646 - Bypass crítico de autenticación 🔓 CVE-2025-41646 - RevPi WebStatus Bypass de Autenticación PoC Una vulnerabilidad crítica de bypass de autenticación CVE-2025-41646 en RevPi WebStatus ≤ v2.4.5 permite a un atacante iniciar sesión...

CVE-2026-27546

An unauthenticated remote attacker can exploit an authentication bypass in the accountlog function to log in as an admin, even when accounts are properly configured...

CVE-2026-27546 Authentication Bypass in _account_log

An unauthenticated remote attacker can exploit an authentication bypass in the accountlog function to log in as an admin, even when accounts are properly configured...

EUVD-2026-80229

An unauthenticated remote attacker can exploit an authentication bypass in the accountlog function to log in as an admin, even when accounts are properly configured...

CVE-2026-27546

CVE-2026-27546 is an authentication bypass in the _account_log function , allowing an unauthenticated remote attacker to log in as an admin even when accounts are properly configured. The vulnerability is rated CVSS 9.8 (CRITICAL) by CERT-VDE (CNA), with references to advisories VDE-2026-028, VDE...

ABO.CMS-Login-SQLi-CVE-2024-25227

ABO.CMS-Login-SQLi-CVE-2024-25227 SQLi sin autenticación y Bypass de inicio de sesión CVE-2024-25227 Fecha: 23/02/2024 Probado en ABO.CMS 5.8 Vendedor: ABO.CMS URL del vendedor:https://abocms.ru ABO.CMS 5.8 es vulnerable a inyección SQL a través del parámetro tblogin, página de inicio de sesión d...

CVE-2025-60375

CVE-2025-60375 CVE-2025-60375 — Bypass de autenticación / control de acceso incorrecto en PerfexCRM 3.3.1 inicio de sesión de administrador Resumen Tipo de vulnerabilidad: Control de acceso incorrecto — Bypass de autenticación Producto afectado: PerfexCRM 3.3.1 CVE: CVE-2025-60375 Publicada...

Bludit-3-9-2-bb

Bludit-3-9-2-bb Bludit 3.9.2 - bypass de fuerza bruta - CVE-2019-17240 Script muy sencillo basado en CVE-2019-17240. POC original y explicación: https://github.com/bludit/bludit/pull/1090. root@kitploit: usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u...

PrestaShop - Information Disclosure

User enumeration vulnerability in the AdminLogin controller in PrestaShop 1.7 through 8.2.2 allows remote attackers to obtain administrators user email addresses via manipulation of the idemployee and resettoken parameters. An attacker who has access to the Back Office login URL can trigger the...

CVE-2026-77995 Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...

CVE-2026-78246

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

EUVD-2026-64828

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...