CVE-2024-9441

CVE-2024-9441 취약점 설명: 이 코드는 PHP 기반 웹 애플리케이션의 부적절한 입력 검증으로 인해 발생하는 원격 코드 실행RCE 취약점을 악용합니다. 이 취약점은 "비밀번호 찾기" 기능index.php?c=user&m=forgotpassword에 있으며, 사용자 입력이 제대로 검증되지 않아 공격자가 서버에 임의의 PHP 코드를 주입할 수 있습니다. 이 스크립트는 PHP 기반 애플리케이션의 취약점을 악용하여 악성 PHP 스크립트를 서버에 업로드하고 HTTP 요청을 통해 시스템 명령을 실행합니다. 사용 방법: pytho...

CVE-2025-58434-PoC

CVE-2025-58434 PoC Python प्रूफ-ऑफ-कॉन्सेप्ट स्क्रिप्ट POST /api/v1/account/forgot-password को ट्रिगर करने के लिए। ⚠️ केवल शैक्षिक और अधिकृत सुरक्षा अनुसंधान के लिए। इस उपकरण को उन सिस्टमों के विरुद्ध चलाना जिनके आप मालिक नहीं हैं या जिनके परीक्षण के लिए आपके पास लिखित अनुमति नहीं है, अवैध है।...

Flowise <= 3.0.5 - Account Takeover

Flowise versions 3.0.5 and earlier had a vulnerability in the forgot-password endpoint, which returned valid reset tokens without authentication—allowing attackers to reset passwords and take over accounts. id: CVE-2025-58434 info: name: Flowise = 3.0.5 - Account Takeover author:...

CVE-2025-58434-Unauthenticated-Password-Reset-Flowwise

Flowise - Prise de contrôle de compte via réinitialisation de mot de passe ATO À des fins de recherche et de test uniquement ! Je ne suis pas responsable des dommages causés à une infrastructure en production si cet outil n'est pas utilisé comme prévu. Utilisez-le uniquement sur des systèmes que...

CVE-2025-58434_CVE-2025-59528

CVE-2025-58434CVE-2025-59528 Script PoC CVE-2025-58434 Flowise -lp...

CVE-2026-31283

CVE-2026-31283 Descrição O recurso "Forgot password" pode ser usado para lançar um ataque de bombardeio de e-mail contra o e-mail da vítima. Pontuação CVSS 3: 7.5 Alta Tipo de ataque Remoto Não autenticado Versões afetadas Versões anteriores a 19.1.5 Descoberto por: Yazan Abu-Nadi...

CVE-2024-34582

CVE-2024-34582 Interessa le versioni più recenti dei browser web Mozilla e Chrome, e i dispositivi Sunhillo Rici5k e Sureline Le versioni più recenti dei server web in esecuzione sui dispositivi Sunhillo sono suscettibili a XSS riflesso. La vulnerabilità risiede nel parametro useridchange...

holehe

Holehe OSINT - Email para Contas Registradas 👋 Olá! Para quaisquer consultas profissionais ou colaborações, entre em contato comigo em: [email protected] 📧 Preferencialmente, use seu e-mail profissional para correspondência. Vamos manter isso breve e conciso, e tudo em inglês! Versão Online ...

EUVD-2026-66609

Automatisch reveals whether an address is registered through the response to its forgot-password request. The controller at packages/backend/src/controllers/internal/api/v1/users/forgot-password.js looks the address up and chains a not-found throw onto the query, so an address with no account...

CVE-2026-81033

Automatisch (through v0.15.0 ) exposes a user enumeration vulnerability through its forgot-password endpoint. The controller at packages/backend/src/controllers/internal/api/v1/users/forgot-password.js returns a not-found status for unregistered addresses but a no-content status for registered on...

CVE-2025-58434-59528

CVE-2025-58434 + CVE-2025-59528 Catena di exploit per due vulnerabilità che interessano Flowise = 3.0.5. Vulnerabilità CVE-2025-58434 — Acquisizione Account Non Autenticata L'endpoint di recupero password restituisce un token valido per il reset della password nella risposta API senza richiedere...

PT-2026-82221

Name of the Vulnerable Software and Affected Versions Automatisch affected versions not specified Description An information disclosure issue exists in the forgot-password functionality. The endpoint '/api/v1/users/forgot-password' allows an unauthenticated user to determine if a specific address...

POC-CVE-2026-18963

CVE-2026-18963 — PoC zur Umgehung der Authentifizierung im „Passwort vergessen“-Ablauf von Keycloak Proof of Concept für CVE-2026-18963 , eine Schwachstelle im „Passwort vergessen“-/ Anmeldedaten-Auswahl-Ablauf von Keycloak, die es einem Angreifer ermöglicht, den Schritt UPDATEPASSWORD zu erreich...

CVE-2025-46047

CVE-2025-46047 Silverpeas = 6.4.2 Benutzernamen-Enumeration – PoC Proof-of-Concept-Skript zur Demonstration einer Benutzernamen-Enumeration-Schwachstelle in Silverpeas Versionen 6.4.1 und 6.4.2. Details zur Schwachstelle Betroffene Software: Silverpeas Betroffene Versionen: 6.4.1, 6.4.2 und...

CVE-2026-64635

Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to...

CVE-2026-64635

Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to...

CVE-2026-64635

Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to...

EUVD-2026-51018

Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to...

GHSA-XVC3-826V-XF47 Pterodactyl's shared global rate-limit key on login and 2FA checkpoint enables unauthenticated panel-wide authentication lockout (DoS)

Summary The authentication rate limiter used for the login and two-factor checkpoint endpoints applies a single global bucket shared by every client, instead of keying per IP or per account. An unauthenticated attacker sending 10 requests per minute from one IP exhausts the shared bucket and caus...

CVE-2026-64829

Question2Answer through 1.8.8 contains a session invalidation vulnerability that allows attackers with a previously obtained remember-me cookie to retain authenticated access by exploiting the forgot-password reset flow's failure to clear the sessioncode field in qa-include/app/users-edit.php...