Ofbiz-RCE

📌 Apache OFBiz RCE Exploit CVE-2024-38856 이 Python 스크립트는 /webtools/control/forgotPassword/ProgramExport 엔드포인트에 대한 인증되지 않은 접근을 통해 Apache OFBiz 버전 18.12.15의 원격 코드 실행RCE 취약점을 악용합니다. 🛠️ 설명 CVE : CVE-2024-38856 유형 : 잘못된 권한 부여 → 원격 코드 실행 구성 요소 : Apache OFBiz 영향을 받는 버전 : 18.12.15 이전 악용 방법 : 유니코드\uXXXX로...

CVE-2025-29529

SQLi ITC Multiplan CVE-2025-29529 発見 2025年2月21日、クライアントエンゲージメント中にITC Systemsが開発した「Multiplan」プラットフォームにおいてSQLインジェクションの脆弱性が特定されました。 影響を受けるバージョン この脆弱性はv3.7.4.1002でのみテストされています。 攻撃ベクトル...

CVE-2026-5779 Multiple vulnerabilities in MphRx's Minerva

An insecure direct object reference IDOR vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/user/updateUserProfile' endpoint. This allows an authenticated user to modify the information of other registered users. Successful exploitation of this vulnerability allows an...

Silverpeas Core Username Enumeration Vulnerability

A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers to determine valid usernames via the Login parameter...

PT-2025-35568

Name of the Vulnerable Software and Affected Versions: Silverpeas versions 6.4.1 through 6.4.2 Description: A user enumeration issue exists in the /CredentialsServlet/ForgotPassword endpoint. This allows remote attackers to determine valid usernames via the Login parameter. Recommendations:...

PT-2025-3969 · Facile Sistemas · Facile Sistemas Cloud Apps

Name of the Vulnerable Software and Affected Versions: Facile Sistemas Cloud Apps up to 20250107 Description: A vulnerability was found in the Password Reset Handler component of Facile Sistemas Cloud Apps, affecting an unknown function of the file /account/forgotpassword. The manipulation of the...

PT-2024-27750 · Gladinet · Gladinet Centrestack

Name of the Vulnerable Software and Affected Versions: Gladinet CentreStack version 13.12.9934.54690 Description: A reflected cross-site scripting XSS issue allows attackers to inject malicious JavaScript into a victim's web browser via the sessionId parameter at the "/portal/ForgotPassword.aspx"...