CVE-2026-94379: Improper Input Validation

The login function in MISP's UsersController.php contained insufficient HTTP method validation for several security-critical code paths. The original code used an allowlist approach, checking only for specific HTTP methods POST and PUT before enforcing bruteforce protection, email one-time-passwo...

Bludit-3-9-2-bb

Bludit-3-9-2-bb Bludit 3.9.2 - ブルートフォースバイパス - CVE-2019-17240 CVE-2019-17240 に基づく非常にシンプルなスクリプト。 元のPOCと解説: https://github.com/bludit/bludit/pull/1090. root@kitploit: usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u ./usernamesfilelist.txt -p ./passwordsfilelist.txt -l :...

CVE-2025-36758 Bypass of bruteforce protection in SolaX Cloud

It is possible to bypass the clipping level of authentication attempts in SolaX Cloud through the use of the 'Forgot Password' functionality as an oracle...