CVE-2025-24071

Отчёт об уязвимости безопасности: CVE-2025-24071 - Уязвимость подмены в проводнике Windows Обзор NSFOCUS CERT обнаружила, что Microsoft недавно выпустила обновление безопасности для устранения критической уязвимости подмены в проводнике Windows, идентифицированной как CVE-2025-24071. Эта уязвимос...

CVE-2025-24071-PoC

CVE-2025-24071 - Доказательство концепции уязвимости подмены в проводнике Windows Обзор CVE-2025-24071 — это уязвимость подмены в проводнике Windows, которая позволяет неаутентифицированному злоумышленнику раскрывать конфиденциальную информацию по сети. Уязвимость возникает из-за неявного доверия...

CVE-2025-65900

CVE-2025-65900: Kalmia CMS v0.2.0 — уязвимость к некорректному контролю доступа Обзор уязвимости CVE ID: CVE-2025-65900 Продукт: DifuseHQ Kalmia CMS Затронутая версия: 0.2.0 Тип уязвимости: Некорректный контроль доступа Необходимые привилегии: Низкие учётная запись только для чтения Влияние Эта...

CVE-2023-22074

CVE-2023-22074 CVE-2023-22074 vulnérabilité dans le composant de sharding d'Oracle Database 19c,21c,23c https://databasesecurityninja.wordpress.com/2023/10/25/cve-2023-22074-oracle-database-password-hash-exposure-in-sharding-component/...

CVE-2017-14262

SamsungNVRvul CVE-2017-14262 xfuturesec Co., Ltd Сначала получите MD5-хеш пароля учетной записи 'admin'. Отправьте: GET http://192.168.1.14/cgi-bin/main-cgi?json="cmd":201,"szUserNameQry":"admin","szUserName":"","u32UserLoginHandle":0 HTTP/1.1 Host: 192.168.1.14 User-Agent: Mozilla/5.0 Windows NT...

CVE-2025-63666

CVE-2025-63666 — Tenda AC15 Résumé Le firmware Tenda AC15 V15.03.05.18multi émet un cookie d'authentification sous la forme password= et le renvoie sans les indicateurs HttpOnly, Secure ou SameSite, exposant ainsi le hachage du mot de passe au client. Le suffixe à faible entropie agit comme un...

CVE-2026-45332-PoC

CVE-2026-45332 : Contrôle d'accès défaillant dans Automad CMS Preuve de concept pour CVE-2026-45332 , une vulnérabilité de contrôle d'accès défaillant dans Automad CMS qui permet à tout attaquant non authentifié de récupérer le hash bcrypt du mot de passe et le secret TOTP de chaque compte...

PT-2026-91243

novel-plus through 5.3.3 contains an information disclosure vulnerability in the /sys/user/list endpoint that lacks proper permission annotations. Authenticated attackers can retrieve password hashes and personal data including email addresses and phone numbers for users within their data scope,...

CVE-2026-90533 Flowise before 3.1.4 Broken Access Control via organizationuser

Flowise before 3.1.4 contains a broken access control vulnerability in GET /api/v1/organizationuser that allows any authenticated organization member to retrieve the organization owner's full user record including bcrypt password hash and temporary tokens. Attackers can query the endpoint with an...

CVE-2026-90533

Flowise before 3.1.4 is affected by a broken access control vulnerability in the GET /api/v1/organizationuser endpoint. Any authenticated organization member can query the endpoint with an arbitrary user ID to retrieve the organization owner's full user record, including the bcrypt password hash ...

PT-2026-90638

Flowise before 3.1.4 contains a broken access control vulnerability in GET /api/v1/organizationuser that allows any authenticated organization member to retrieve the organization owner's full user record including bcrypt password hash and temporary tokens. Attackers can query the endpoint with an...

CVE-2026-89012

Dolibarr 24.0.0 before 24.0.1 contains a case-sensitive denylist bypass vulnerability in the sqlfilters API query parameter that allows authenticated attackers to recover protected database fields by supplying uppercase variants of denylist-protected field names. Attackers can exploit the...

EUVD-2026-76141

Dolibarr 24.0.0 before 24.0.1 contains a case-sensitive denylist bypass vulnerability in the sqlfilters API query parameter that allows authenticated attackers to recover protected database fields by supplying uppercase variants of denylist-protected field names. Attackers can exploit the...

CVE-2026-38058

ST Engineering iDirect iQ200 VSAT terminals are affected by an information exposure flaw where an endpoint returns the complete device configuration as JSON, including the SECURITY section containing MD5-crypt password hashes for the root SSH and web administration accounts. Any user with valid w...

CVE-2026-88893

OpenPanel through 2.3.0 share lookup procedures fail to validate access controls and return password hashes and protected report definitions to unauthenticated callers. Attackers with a share link can retrieve argon2id password hashes and full report configurations including event names, filters,...

CVE-2026-88893

OpenPanel 's share lookup procedures fail to validate access controls, allowing unauthenticated callers who possess a share link to retrieve argon2id password hashes and full report configurations (event names, filters, breakdown dimensions). This enables offline password cracking and theft of bu...

PT-2026-89404

OpenPanel share lookup procedures fail to validate access controls and return password hashes and protected report definitions to unauthenticated callers. Attackers with a share link can retrieve argon2id password hashes and full report configurations including event names, filters, and breakdown...

LOYTEC L-IP BACnet/IP Routers Exposure of Sensitive Information to an Unauthorized Actor (CVE-2015-7906)

LOYTEC L-IP BACnet/IP router devices allow a remote, unauthenticated attacker to download a device backup file that exposes the hash of the device's user passwords. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

CVE-2026-86190

WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user records including password hashes, recovery tokens, and live session identifiers to unauthenticated callers when a hash parameter is provided. Attackers can use the disclosed session...

CVE-2026-86190 WWBN AVideo Broken Access Control via videoViewsInfo hash Parameter

WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user records including password hashes, recovery tokens, and live session identifiers to unauthenticated callers when a hash parameter is provided. Attackers can use the disclosed session...