CVE-2026-86710 Login with QR <= 1.0.0 - Unauthenticated Authentication Bypass via 'autologin_code' Parameter

The Login with QR WordPress plugin through 1.0.0 does not verify that the code used to log a user in is one it issued, matching any stored user metadata value instead, which allows unauthenticated attackers to log in as any user, including administrators...

CVE-2026-86709

The Pressengine WordPress plugin (versions ≤ 1.0) contains an unauthenticated authentication bypass caused by its login handler issuing a session token even when authentication fails. An unauthenticated attacker can exploit this to log in as any user, including administrators , effectively gainin...

CVE-2026-86709 The Pressengine <= 1.0 - Unauthenticated Authentication Bypass

The Pressengine WordPress plugin through 1.0 does not stop its login handler from issuing a session when authentication fails, allowing unauthenticated attackers to log in as any user, including administrators...

EUVD-2026-81340

The Pressengine WordPress plugin through 1.0 does not stop its login handler from issuing a session when authentication fails, allowing unauthenticated attackers to log in as any user, including administrators...

EUVD-2026-81341

The Login with QR WordPress plugin through 1.0.0 does not verify that the code used to log a user in is one it issued, matching any stored user metadata value instead, which allows unauthenticated attackers to log in as any user, including administrators...

Zimbra-Valid-Login-Checker

Zimbra-Valid-Login-Checker Python 2.7 Compra un café : Bitcoin $: 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money $: U22270614 ¿Cómo instalar Python??? Instala python 2.7.16 / 2.7.17 Instala pip : pip install requests pip install colorama pip install futures ¿Cómo ejecutarlo??? Lista de ejemplo...

CVE-2026-41940-cPanel-WHM-Verification-Tool

CVE-2026-41940 cPanel & WHM Verification Tool This repository contains a Python verification script for CVE-2026-41940, a critical authentication bypass vulnerability disclosed in cPanel & WHM. This project is intended for authorized defensive validation only. It is not intended for exploit...

hashes

Hashes mágicos – «colisiones» de hash en PHP Regístrate con contraseña 1 y luego inicia sesión con contraseña 2. Si consigues entrar, entonces el almacenamiento usa el algoritmo especificado para aplicar hash a la contraseña y PHP usa == para compararlas para MD5, SHA-1 y texto plano. MD5, SHA-1,...

CVE-2026-7567-POC

Description This repository contains a Proof of Concept PoC for CVE-2026-7567. The vulnerability affects Wordpress Temporary Login Plugin = 1.0.0 and allows an attacker to authentication bypass to account takeover. I only developed the exploit/PoC for educational and research purposes. How to use...

CVE-2023-7173

CVE-2023-7173: Stored Cross-Site Scripting XSS in Hospital Management System Vulnerability Details CVE ID: CVE-2023-7173 Vulnerability Type: Stored XSS Affected Component: User login page Vulnerable Parameter: Fullname Ventor Details: phpgurukul.com Vulnerable Version: Hospital Management System...

CVE-2023-7172

CVE-2023-7172 Overview This project contains a vulnerable version of a Hospital Management System HMS that is susceptible to SQL Injection CVE-2023-7172. SQL Injection is a critical web application vulnerability that can have severe impacts on the security and functionality of a system. CVE Detai...

CVE-2026-24061

CVE-2026-24061 - telnetd auth bypass What it's about Argument injection in telnetd from GNU InetUtils. Versions 1.9.3 to 2.7. CVSS 9.8. On the CISA KEV list since 26.01.2026, meaning it's actively exploited in the wild. The whole trick is that telnetd takes the value of the USER environment...

CVE-2021-32099_SQLi

CVE-2021-32099 SQLi Bypass login Útil al intentar leer la User Flag en Pandora.htb CVE-2021-32099 SQLi permite al atacante omitir el inicio de sesión. Objetivo Explotar en: Pandora FMS v7.0NG.742FIXPERL2020 Análisis Leído desde cvedetail. Sabemos el endpoint del objetivo:...

CVE-2026-24061-Scanner

CVE-2026-24061 Scanner: GNU Inetutils Telnet Exploit Checker CVE-2026-24061 Scanner is a Bash Script-based tool for performing detection reconnaissance and active verification active exploitation check of the Authentication Bypass vulnerability in the telnetd service of the GNU Inetutils package...

CVE-2026-6182-SQLI-auth

SQL Injection Authentication Bypass - Simple Content Management System PHP Description A SQL Injection vulnerability exists in the admin login page of Simple Content Management System PHP. The user parameter is not sanitized before being passed to the SQL query, allowing an unauthenticated attack...

Ashwesker-CVE-2026-24061

🚨 CVE-2026-24061 : Critical Remote Authentication Bypass in GNU InetUtils telnetd 🧠 Overview CVE-2026-24061 is a critical vulnerability affecting the telnetd service in GNU InetUtils. It allows an unauthenticated remote attacker to log in as root by exploiting improper handling of environment...

SUSE SLED15 / SLES15 Security Update : kbd (SUSE-SU-2026:4211-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4211-1 advisory. This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect...

SUSE SLES15 Security Update : kbd (SUSE-SU-2026:4207-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4207-1 advisory. This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner...

Linux Distros Unpatched Vulnerability : CVE-2026-19607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a...

CVE-2025-60375

CVE-2025-60375 — PerfexCRM Authentication Bypass Advisory ID: perfexcrm-auth-bypass-2025 CVE: CVE-2025-60375 Product: PerfexCRM Affected versions: versions prior to 3.3.1 3.3.1 Reported by: Ajansha Shankar, Ahamed Yaseen References: OWASP Authentication Cheat Sheet —...