Breacher

Breacher 一个用于查找管理员登录页面和EAR漏洞的脚本。 功能特性 按需多线程 大型路径列表（482条路径） 支持 php、asp 和 html 扩展名 检查潜在的EAR漏洞 检查 robots.txt 支持自定义路径 使用方法 检查所有 php 扩展名的路径 python breacher -u example.com --type php 使用线程检查所有 php 扩展名的路径 python breacher -u example.com --type php --fast 不使用线程检查所有路径 python breacher -u example.com...

Alumni Management System 1.0 - SQL Injection

SourceCodester Alumni Management System 1.0 contains a sqlinjection caused by unsanitized input in admin/login.php, letting attackers bypass authentication, exploit requires injection of malicious SQL payload. id: CVE-2020-29214 info: name: Alumni Management System 1.0 - SQL Injection author:...

JFrog Artifactory 6.7.3 - Admin Login Bypass

JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...

CVE-2022-40470

CVE-2022-40470 基于 CodeIgniter 的血型捐赠管理系统 - 1.0 中的跨站脚本漏洞 建议描述 Phpgurukul 血型捐赠管理系统 1.0 允许通过添加血型名称功能进行跨站脚本攻击。 附加信息 PoC: https://drive.google.com/file/d/1UDuez2CTscdWXYzyXLi3x8CMs9IWLL11/view?usp=sharing 漏洞类型 跨站脚本（XSS） 产品供应商 Phpgurukul 受影响产品代码库 基于 CodeIgniter 的血型捐赠管理系统 - 1.0 受影响组件 源代码 攻击类型 远程 影响代码执行 是...

CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below

CVE-2023-37755 - Credencial de administrador codificada en i-doit Pro 25 y versiones anteriores i-doit Pro 25 y versiones anteriores son vulnerables a una vulnerabilidad de credencial de administrador codificada. Estas vulnerabilidades permiten que cualquier persona inicie sesión como administrad...

CVE-2024-10924

CVE-2024-10924 漏洞利用 WordPress Really Simple Security 插件 - 身份验证绕过 📌 概述 CVE-2024-10924 是一个关键的身份验证绕过漏洞，存在于 WordPress 的 Really Simple Security 插件中（版本 9.0.0 到 9.1.1.1）。该漏洞允许未经身份验证的攻击者通过利用双因素认证（2FA）API 中的缺陷，以任何用户（包括管理员）身份登录。 CVE 编号: CVE-2024-10924 严重程度: 🔥 严重 CVSS 9.8 受影响版本: Really Simple Security 9.0.0...

CVE-2025-60375

CVE-2025-60375 CVE-2025-60375 — Bypass de autenticación / control de acceso incorrecto en PerfexCRM 3.3.1 inicio de sesión de administrador Resumen Tipo de vulnerabilidad: Control de acceso incorrecto — Bypass de autenticación Producto afectado: PerfexCRM 3.3.1 CVE: CVE-2025-60375 Publicada...

Bludit-3-9-2-bb

Bludit-3-9-2-bb Bludit 3.9.2 - bypass de fuerza bruta - CVE-2019-17240 Script muy sencillo basado en CVE-2019-17240. POC original y explicación: https://github.com/bludit/bludit/pull/1090. usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u ./usernamesfilelist.txt -p...

CVE-2023-7172

CVE-2023-7172 Resumen Este proyecto contiene una versión vulnerable de un Sistema de Gestión Hospitalaria HMS que es susceptible a Inyección SQL CVE-2023-7172. La Inyección SQL es una vulnerabilidad crítica de aplicaciones web que puede tener impactos graves en la seguridad y funcionalidad de un...

CVE-2024-9933

CVE-2024-9933 WatchTowerHQ = 3.10.1 - Omisión de Autenticación a Administrador debido a la Falta de Verificación de Valor Vacío Descripción: El plugin WatchTowerHQ para WordPress es vulnerable a una omisión de autenticación en versiones hasta la 3.9.6 inclusive. Esto se debe a que el valor...

CVE-2025-41646---Critical-Authentication-Bypass-

CVE-2025-41646---Bypass-Crítico-de-Autenticación- CVE-2025-41646 - Bypass crítico de autenticación 🔓 CVE-2025-41646 - RevPi WebStatus Bypass de Autenticación PoC Una vulnerabilidad crítica de bypass de autenticación CVE-2025-41646 en RevPi WebStatus ≤ v2.4.5 permite a un atacante iniciar sesión...

ABO.CMS-Login-SQLi-CVE-2024-25227

ABO.CMS-Login-SQLi-CVE-2024-25227 Unauthenticated SQLi and Login Bypass CVE-2024-25227 Date: 23/02/2024 Tested on ABO.CMS 5.8 Vendor: ABO.CMS Vendor URL:https://abocms.ru ABO.CMS 5.8 is vulnerable to SQL Injection via the tblogin parameter, admin login page. The affected component is "tblogin"...

EUVD-2026-85674

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96601

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96601 Abdurrab5 online-makeup-store Admin Login index.php sql injection

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96601

A SQL injection vulnerability exists in the Admin Login Handler component of Abdurrab5 online-makeup-store . The flaw is located within an unknown function of the index.php file and is triggered by manipulating the id/password arguments. This vulnerability can be exploited remotely , and the expl...

CVE-2026-96601 Abdurrab5 online-makeup-store Admin Login index.php sql injection

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

CVE-2026-96601: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may...

PT-2026-97606

Name of the Vulnerable Software and Affected Versions Abdurrab5 online-makeup-store affected versions not specified Description An issue exists in the Admin Login Handler component within the index.php file. Remote attackers can perform SQL injection, a technique used to manipulate database...

CVE-2026-93980 code-projects Internship Management System Admin Login Form login.php sql injection

A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Login Form. Executing a manipulation of the argument Password can lead to sql injection. The attack may be performed from...