CVE-2026-77752

The Temporary Login Without Password WordPress plugin before 1.9.9 does not verify that the user requesting a temporary login holds network super admin rights before granting the new account those rights, allowing an administrator of a single site on a multisite network to take over the whole...

CVE-2026-77753

The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowing the recipient of a temporary login to retain working access to the site ov...

EUVD-2026-76800

The Zonify WordPress plugin before 1.0.5 does not perform any capability or authentication check before returning the site's stored account login token, allowing unauthenticated attackers to retrieve it and authenticate to the site owner's linked service account...

CVE-2026-87842

Zonify WordPress plugin (versions before 1.0.5 ) lacks a capability or authentication check before returning the site's stored account login token . This allows an unauthenticated attacker over the network to retrieve the token and authenticate to the site owner's linked service account, resultin...

CVE-2026-87842 Zonify < 1.0.5 - Unauthenticated Account Login Token Disclosure

The Zonify WordPress plugin before 1.0.5 does not perform any capability or authentication check before returning the site's stored account login token, allowing unauthenticated attackers to retrieve it and authenticate to the site owner's linked service account...

CVE-2026-77752

Temporary Login Without Password is a WordPress plugin for managing temporary user access. Versions 1.5 through 1.9.8 fail to verify that a user requesting a temporary login already holds network super admin rights before granting those rights to the new or existing account. In a multisite networ...

EUVD-2026-76811

The Temporary Login Without Password WordPress plugin before 1.9.9 does not verify that the user requesting a temporary login holds network super admin rights before granting the new account those rights, allowing an administrator of a single site on a multisite network to take over the whole...

CVE-2026-77752 Temporary Login Without Password 1.5 - 1.9.8 - Multisite Subsite Admin+ Network Super Admin Privilege Escalation

The Temporary Login Without Password WordPress plugin before 1.9.9 does not verify that the user requesting a temporary login holds network super admin rights before granting the new account those rights, allowing an administrator of a single site on a multisite network to take over the whole...

EUVD-2026-76810

The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowing the recipient of a temporary login to retain working access to the site ov...

CVE-2026-77753 Temporary Login Without Password < 1.9.9 - Authenticated Temporary Access Revocation Bypass via Application Passwords

The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowing the recipient of a temporary login to retain working access to the site ov...

CVE-2026-77753

The Temporary Login Without Password WordPress plugin before 1.9.9 fails to prevent a temporary user from creating an Application Password and does not revoke one when the temporary access expires or is disabled. As a result, the recipient of a temporary login retains working access to the site o...

CVE-2023-26469-Jorani

CVE-2023-26469 漏洞利用工具 概述 这是一个针对 Jorani 1.0.0 版本的漏洞利用工具（PoC），该漏洞允许攻击者通过路径遍历和日志注入技术实现远程代码执行。 ⚠️ 警告：此工具仅用于安全研究和授权测试。未经授权使用此工具进行攻击是非法的。 漏洞描述 CVE-2023-26469 是 Jorani 1.0.0 中的一个严重安全漏洞，结合了以下两个攻击向量： 1. 日志注入 ：通过登录表单向应用程序日志文件注入恶意 PHP 代码 2. 路径遍历 ：利用路径遍历漏洞访问并执行被注入的日志文件 攻击者可以利用这个漏洞在目标服务器上执行任意系统命令。 功能特性 自动获取...

CVE-2024-7593

CVE-2024-7593 检测 这种检测方法的工作原理是什么？ 该模板会匹配以下版本，如果匹配到，则认为主机存在漏洞： root@kitploit: - "22.2" - "22.3" - "22.3R2" - "22.5R1" - "22.6R1" - "22.7R1" 为了防止产生误报，它还会匹配以下内容： root@kitploit: - type: word part: body words: - "Login Virtual Traffic Manager" 如何运行此脚本？ 1. 从这里下载Nuclei 2. 将模板复制到本地系统 3. 运行以下命令：nuclei -u...

CVE-2026-24061-payload

CVE-2026-24061 - Bypass de Autenticación por Inyección de Argumentos en telnetd de GNU InetUtils Las versiones 1.9.3 a 2.7 de GNU InetUtils son vulnerables a un bypass de autenticación remota en el servidor telnetd. El demonio telnetd no sanea adecuadamente la variable de entorno USER antes de...

research-cve-2026-85649

CVE-2026-85649 | Holloway Chew, Kean Ho's Knowledge Research El 2026-08-26, se reportó una vulnerabilidad de seguridad CVSS: 7.9, Alta7 en Holloway Chew, Kean Ho's Actualizer v1.2.0 y versiones anteriores. La herramienta asumía que el comando mkpasswd siempre produce un hash de contraseña yescryp...

CVE-2025-47646

CVE-2025-47646 PoC Unauthenticated Privilege Escalation exploit for WordPress PSW Front-end Login Registration Plugin ≤ 1.12 📖 Description This Python script is a proof-of-concept PoC exploit for CVE-2025-47646 , targeting a vulnerability in the WordPress PSW Front-end Login Registration Plugin ≤...

CVE-2026-90449

CVE-2026-90449 affects a reverse proxy/gateway in an ICS/OT deployment (per the referenced CISA advisory icsa-26-254-01 ). When a particular authentication mode is configured, the reverse proxy forwards requests to a bundled third-party administrative interface without first applying the gateway'...

EUVD-2026-38208

Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion...

CVE-2026-4480-exploit-poc

用法： 匿名登录： python3 exploit.py --lhost --lport -t -N 适用于匿名登录 通过凭据登录： python3 exploit.py --lhost --lport -t -u -p root@kitploit: ! 错误：缺少必需参数：-s/--sharename 注意：如果用户为匿名且无密码，则只需添加 -N，无需 -u 或 -p 用法： exploit.py -h -t 目标 -Lh 监听主机 -Lp 监听端口 -s 共享名 -c 命令 -N | -u 用户名 -p 密码 选项： -h, --help 显示此帮助信息并退出 -t, --targ...

CVE-2026-54047

Laci Synchroni is a decentralized mod and appearance sync server and plugin for Dalamud. Versions of the backend prior to 1.2.3 have an improper authentication vulnerability in the application's OAuth2 login flow. The application relies on client-side state by trusting the UID field inside the...