Arkeia Appliance - lang Cookie LFI Detection (CVE-2014-2846)

Detects CVE-2014-2846 by POSTing to /login/doLogin with Cookie lang=aaa..././..././etc/passwd%00. !/usr/bin/env python3 -- coding: utf-8 -- """Arkeia Appliance lang cookie path traversal CVE-2014-2846.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Embedthis GoAhead - Host Header Injection Detection (CVE-2019-16645)

Detects CVE-2019-16645 by POSTing to /goform/login and related paths with a crafted Host header and looking for that host in Location / moved-to responses. !/usr/bin/env python3 -- coding: utf-8 -- """Embedthis GoAhead Host header injection CVE-2019-16645.""" import secrets from kittysploit impor...

Edimax Router - Default Credentials (admin/1234)

Detects Edimax and similar routers advertising Basic realm "Default: admin/1234" and accepts login with those credentials CVE-2004-1791. !/usr/bin/env python3 -- coding: utf-8 -- """Edimax router HTTP Basic default credentials admin:1234 CVE-2004-1791.""" import base64 from kittysploit import fro...

eXtplorer - password[] Auth Bypass Detection

Detects eXtplorer auth bypass via password= empty array login as admin. !/usr/bin/env python3 -- coding: utf-8 -- """eXtplorer password authentication bypass.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'eXtplorer...

ColdFusion - RDS Auth Bypass Detection (CVE-2013-0632)

Detects CVE-2013-0632 by POSTing adminpassword=&rdsPasswordAllowed=1 to administrator.cfc?method=login and accessing the admin homepage. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe ColdFusion RDS auth bypass CVE-2013-0632.""" import re from kittysploit import from...

MySQL/MariaDB - Auth Bypass Detection (CVE-2012-2122)

Detects CVE-2012-2122 by repeatedly attempting root login with a wrong password until memcmp returns success or max attempts. !/usr/bin/env python3 -- coding: utf-8 -- """MySQL/MariaDB memcmp authentication bypass CVE-2012-2122.""" import socket import struct from kittysploit import from...

CVE-2026-18470

The Login & Register Forms WordPress plugin (versions before 4.0.2 ) is vulnerable to unauthenticated email address disclosure . The root cause is a failure to verify that password reset requests originate from the actual account owner, combined with inadequate redaction of the response address. ...

CVE-2026-18468

The Login & Register Forms WordPress plugin, in versions prior to 4.0.2 , is vulnerable to an unauthenticated account takeover . The root cause is that the plugin fails to bind the password reset verification state to the specific account being reset or the party completing the verification; inst...

CVE-2026-18469

The Login & Register Forms WordPress plugin (versions before 4.0.2 ) is vulnerable to an unauthenticated account takeover. The flaw exists because the plugin fails to enforce password reset attempt limits against a server-derived value; instead, it keys both the verification code and the per-sour...

CVE-2026-18468

The Login & Register Forms WordPress plugin before 4.0.2 does not bind the password reset verification state to the account being reset or to the party that completed the verification, keying it instead on a value the client controls, allowing unauthenticated attackers to take over the account of...

CVE-2026-18468 Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Verification State Keyed on a Client-Supplied Address Header

The Login & Register Forms WordPress plugin before 4.0.2 does not bind the password reset verification state to the account being reset or to the party that completed the verification, keying it instead on a value the client controls, allowing unauthenticated attackers to take over the account of...

CVE-2026-18469 Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Code Brute Force

The Login & Register Forms WordPress plugin before 4.0.2 does not enforce its password reset attempt limit against a server-derived value, keying both the verification code and the per-source attempt counter on client-controlled data, allowing unauthenticated attackers to reset the limit at will...

CVE-2026-18470 Login & Register Forms < 4.0.2 - Unauthenticated Registered User Email Address Disclosure via Lost Password Response

The Login & Register Forms WordPress plugin before 4.0.2 does not verify that a password reset request comes from the account's owner, and does not adequately redact the address returned in its response, allowing unauthenticated users to obtain registered users' email addresses, including...

CVE-2026-18470 Login & Register Forms < 4.0.2 - Unauthenticated Registered User Email Address Disclosure via Lost Password Response

The Login & Register Forms WordPress plugin before 4.0.2 does not verify that a password reset request comes from the account's owner, and does not adequately redact the address returned in its response, allowing unauthenticated users to obtain registered users' email addresses, including...

CVE-2026-18469: Improper Authentication

The Login & Register Forms WordPress plugin before 4.0.2 does not enforce its password reset attempt limit against a server-derived value, keying both the verification code and the per-source attempt counter on client-controlled data, allowing unauthenticated attackers to reset the limit at will...

CVE-2026-66405: Active Debug Code

DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be leveraged to log in to the affected products...

CVE-2026-64940: Permissive Regular Expression

Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may allow an attacker who can access the affected product to log in to the management console. As a result, the attacker may perform any operations available from...

CVE-2026-18470: Exposure of Sensitive Information to an Unauthorized Actor

The Login & Register Forms WordPress plugin before 4.0.2 does not verify that a password reset request comes from the account's owner, and does not adequately redact the address returned in its response, allowing unauthenticated users to obtain registered users' email addresses, including...

CVE-2026-18468: Improper Authentication

The Login & Register Forms WordPress plugin before 4.0.2 does not bind the password reset verification state to the account being reset or to the party that completed the verification, keying it instead on a value the client controls, allowing unauthenticated attackers to take over the account of...

PT-2026-69372

Name of the Vulnerable Software and Affected Versions Login & Register Forms versions prior to 4.0.2 Description The plugin fails to verify if a password reset request originates from the actual account owner. Additionally, it does not properly redact the address in the response, which enables...