CVE-2017-13872-Patch

CVE-2017-13872-Patch 下载此软件并执行，它会要求您为 root 用户设置新密码。密码可能不同，但我认为，在默认选项下，它与 Admin 密码相同。 更新 您可以通过升级操作系统来修复此漏洞。...

tplink-CVE-2017-11519

tplink-CVE-2017-11519 TP-Link Archer C9 管理员密码重置与 RCE（CVE-2017-11519）的 POC 漏洞分析详见 https://devcraft.io/posts/2017/07/21/tp-link-archer-c9-admin-password-reset.html...

CVE-2024-57429

CVE-2024-57429 Una vulnerabilidad de falsificación de solicitudes entre sitios CSRF en la función pjActionUpdate de PHPJabbers Cinema Booking System v2.0 permite a atacantes remotos escalar privilegios engañando a un administrador autenticado para que envíe una solicitud no autorizada. Impacto: L...

CVE-2019-9053-port-py3

CVE-2019-9053 漏洞利用 - Python 3 这是 CVE-2019-9053 漏洞利用的 Python 3 移植版本，针对 CMS Made Simple CMSMS 2.2.10 之前的版本。该漏洞允许通过 News 模块接口进行 SQL 注入。 示例输出 已在 TryHackMe Simple CTF Challenge 上测试。 描述 该利用程序利用了 CMS Made Simple 的 News 模块中的 SQL 注入漏洞。它可以： 提取 CMS 的 salt 导出管理员用户名 导出管理员邮箱 导出管理员密码哈希 可选使用提供的字典破解密码 快速开始...

CVE-2020-2733

CVE-2020-2733 - La contraseña de administrador de JD Edwards EnterpriseOne Tools no está protegida adecuadamente Imagen 1: Descifrar la cadena Imagen 2: Descifrar proporcionando la URL CVE-2020-2733 Aplicación: JD Edwards EnterpriseOne Tools Versiones afectadas: JD Edwards EnterpriseOne Tools 9.2...

CVE-2024-48887-Exploit

CVE-2024-48887-未经验证的密码更改 CWE-620 概述 Fortinet FortiSwitch GUI 中存在一个未经验证的密码更改漏洞，允许远程未认证攻击者通过特制请求更改管理员密码 漏洞利用： 在此下载 详细信息 CVE ID : CVE-2024-48887 发布 ：2025年8月4日 影响 ：严重 漏洞利用可用性 ：未公开，仅限私有。 CVSS ：9.8 补丁可用 ：（尚无官方补丁） 影响 此严重漏洞允许外部攻击者完全破坏 Fortinet FortiSwitch 设备的管理访问权限，无需任何身份验证。攻击者可： 任意更改管理员密码 可能完全控制网络交换机...

CVE-2023-44811

CVE-2023-44811 mooSocial v3.1.8 存在跨站请求伪造（CSRF）漏洞，一旦经过身份验证的管理员用户点击恶意构造的 HTML 页面，攻击者即可更改管理员密码。 我提供了 2 个 HTML 页面，当经过身份验证的管理员用户点击它们时，将更改其密码。...

CVE-2024-5009

CVE-2024-5009 Progress WhatsUp Gold SetAdminPassword 权限提升漏洞（CVE-2024-5009）的PoC 关于该漏洞的根本原因分析可在我的博客中找到： https://summoning.team/blog/progress-whatsup-gold-privesc-setadminpassword-cve-2024-5009/ 使用方法 root@kitploit: python3 CVE-2024-5009.py --target https://192.168.0.231/ | | | | | | | | | | | | \ | ...

CVE-2024-40617

CVE-2024-40617 针对 CVE-2024-40617 的利用 PoC 描述 有关详细描述，请参阅 Medium 文章 Fujitsu M2M GW1500：从 M2M 到 M2M2P0wn 用法 root@kitploit: | / | \ | | \ / \ | |/| | | ' \ | | | | | \ \ /\ / / ' \ | | | |/ /| | | | | |/ /| /| || |\ V V /| | | | || |||| || |||| / // || || usage: CVE-2024-40617-PoC.py -h --version...

CVE-2023-24035

CVE-2023-24035 affects Nagios XI before 5.9.3 . The vulnerable component is the "Insecure Backend Ticket" Authentication mechanism, specifically the is_insecure_login_authenticated function, which uses a timing-unsafe comparison of the admin password. An attacker can exploit this by measuring tim...

EUVD-2023-60635

An issue was discovered in Nagios XI before 5.9.3. The isinsecureloginauthenticated function uses a insecure timing comparison that leads to an attacker being able to bruteforce the admin password, by measuring timing differences in the comparison...

CVE-2020-11444

CVE-2020-11444 Script de explotación de la vulnerabilidad de acceso no autorizado en Nexus 3 Para más scripts, consulte: https://github.com/zhzyker/exphub Readme root@kitploit: +-----------------------------------------------------------------------------------------------+ + DES: by zhzyker as...

Tautulli <= 2.16.1 - Path Traversal

Tautulli is a monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /newsletter/image/images endpoint joins user-controlled path segments onto the newsletter image directory without containment validation. Authentication is not required for this endpoint, allowing...

Payara Server - Cross-Site Scripting

Payara Server versions 4.1.2.191.54, 5.83.0, 6.34.0, and 7.2026.1 contain a stored XSS vulnerability caused by improper input sanitization in the REST Management Interface. This allows attackers to mislead administrators into changing the admin password via a URL payload; however, the exploit...

EUVD-2026-76737

The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file containing that hash is written with permissions allowing it to be read by any local user. This is inconsistent with a separate, stronger hashing...

CVE-2026-90457

The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file containing that hash is written with permissions allowing it to be read by any local user. This is inconsistent with a separate, stronger hashing...

CVE-2026-90457

The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file containing that hash is written with permissions allowing it to be read by any local user. This is inconsistent with a separate, stronger hashing...

CVE-2026-90457

CVE-2026-90457 involves an inconsistency in administrative password hashing across authentication paths in an ICS product (per CISA advisory ICSA-26-254-01). One path uses a weak, fast hashing algorithm , and the resulting hash file is written with permissions readable by any local user . A separ...

EUVD-2026-76350

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer setattribute populates the security area of the BIOS attribute request buffer with the current admin password via populatesecuritybuffer, then dumps the whol...

CVE-2026-89444

CVE-2026-89444 affects the Linux kernel's platform/x86: dell-wmi-sysman driver. The set_attribute() function populates the security area of the BIOS attribute request buffer with the current admin password via populate_security_buffer(), then calls print_hex_dump_bytes() to dump the entire reques...