ninja-forms-brute

Ninja Forms 3.6.8 - 인증되지 않은 이메일 주소 노출 설명 이 플러그인은 제출 항목을 내보낼 때 생성된 임시 파일을 삭제하지 않습니다. 그 결과, 해당 파일이 공개적으로 접근 가능하고 이름을 추측할 수 있는 경우, 인증되지 않은 공격자가 파일을 다운로드하여 양식을 제출한 사용자의 이메일 주소와 같은 민감한 정보를 얻을 수 있습니다. 개념 증명 내보낸 CSV"모든 제출 항목 다운로드" 버튼을 통해 모든 제출 항목을 내보낼 때 생성됨는 다음 형식을 사용하여 /wp-content/uploads// 폴더에 저장됩니다:...

Whoisleak

Whoisleak 이 도구는 도메인을 등록한 이메일을 조회하고 해당 이메일이 데이터 유출에 노출되었는지 확인합니다. 설치 방법 root@kitploit: $ apt-get install nodejs-legacy $ pip install -r requirements.txt 사용 예 root@kitploit: python whoisleak.py -u securityattack.com.br 연락처 / 블로그 root@kitploit: Eddy Oliveira SecurityAttack...

CVE-2023-6444-POC

CVE-202306444-POC 인증되지 않은 관리자 이메일 노출CVE-2023-6444에 대한 PoC 사용법: python3 cve-2023-6444.py $URL https://vulners.com/cvelist/CVELIST:CVE-2023-6444...

CVE-2023-5612

Tags RSS 피드에서 공개 이메일 노출 https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ root@kitploit: An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read the user email...

CVE-2026-92594

Craft CMS 5.0.0-RC1 through versions before 5.11.0 incorrectly authorize the GraphQL draftCreator and revisionCreator fields: instead of requiring the user-data scope enforced by Gql::canQueryUsers usergroups.:read, these fields are gated only on the elements.drafts:read / elements.revisions:read...

CVE-2026-53959

CVE-2026-53959 - 4gaBoards 3.3.9 - 사용자 정보 노출 이 저장소에는 CVE-2026-53959에 대한 PoC개념 증명 익스플로잇이 포함되어 있습니다. 면책 조항 이 프로젝트는 교육 목적 및 승인된 보안 테스트용으로만 제공됩니다. 소유하지 않았거나 테스트 권한이 없는 시스템에 사용하지 마십시오. 개요 4gaBoards는 실시간 프로젝트 관리를 위한 보드 시스템입니다. 3.3.9 이전 버전에서 4gaBoards는 인증된 모든 사용자가 GET /api/users를 통해 모든 사용자의 계정 정보를 열거하고...

CVE-2026-89030

Adenion Blog2Social plugin for WordPress before 9.1.0 exposes the email addresses of all registered WordPress users to low-privileged accounts. The b2ssearchuser AJAX handler in includes/Ajax/Get.php invokes B2STools::searchUser in includes/Tools.php, which returns the email address of every...

CVE-2026-90934 EspoCRM before 10.0.4 Field-level Security Bypass via Attendees

EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read restricted email addresses. Attackers can recover hidden attendee emails by exploiting incorrect ACL scope validation that checks parent...

CVE-2026-90934

EspoCRM before 10.0.4 is affected by a field-level security bypass in the meeting and call attendees endpoints. The root cause is incorrect ACL scope validation that checks parent event permissions instead of attendee entity permissions, allowing authenticated users to recover restricted email ad...

CVE-2026-86407

The User Registration & Membership WordPress plugin before 5.2.8 fails to verify that a visitor requesting its membership confirmation (thank you) page actually owns the account named in the request or that any registration/purchase occurred. This allows unauthenticated users to retrieve another ...

CVE-2025-59843-CVE-2025-59932

CVE-2025-59843 & CVE-2025-59932 1. 사용자 이메일 주소 공개 노출 CVE-2025-59843 범위 내 / 영향 받는 애플리케이션: FlagForge 웹 애플리케이션 API 엔드포인트: /api/user/username 세부사항: 이 엔드포인트는 인증 없이 사용자 이메일 주소를 반환합니다. 모든 사용자 이름을 공개적으로 조회할 수 있습니다. 근본 원인 / 코드 참조: root@kitploit: const user = await UserSchema.findOne name: $regex: new...

CVE-2026-78152

The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing unauthenticated visitors to obtain the email address of any user who has published content...

CVE-2026-78152 SureRank 1.6.2 - 1.10.0 - Unauthenticated Author Email Disclosure via Person Schema

The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing unauthenticated visitors to obtain the email address of any user who has published content...

CVE-2026-78152

SureRank SEO WordPress plugin versions 1.6.2 through 1.10.0 fail to exclude registered account email addresses from the Person Schema structured data it outputs on public pages by default. This allows unauthenticated visitors to enumerate the email addresses of any user who has published content,...

EUVD-2026-76809

The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing unauthenticated visitors to obtain the email address of any user who has published content...

GHSA-CQR2-H44G-V75V n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints

Impact The endpoints /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members checked only that the caller could manage the role type, not that they could see the project named in the request. A user holding role-management permission could therefore name any project on...

JetBrains YouTrack < 2026.2.18769 Information Disclosure (CVE-2026-86496)

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18769. It is, therefore, affected by an information disclosure vulnerability: - In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses...

EUVD-2026-75137

Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 magefan/module-blog-graph-ql through 2.2.1 allows remote unauthenticated attackers to obtain blog commenter email addresses and internal customer and admin identifiers via a POST request to /graphql...

CVE-2026-79323

Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 magefan/module-blog-graph-ql through 2.2.1 allows remote unauthenticated attackers to obtain blog commenter email addresses and internal customer and admin identifiers via a POST request to /graphql...

CVE-2026-86085

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints checked only whether the caller could manage the role type. A caller with role:manageProject could name a project the...