CVE-2026-64857 tirreno has Session Fixation in Login Authentication

tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. During authentication, tirreno validates the user's credentials and establishes the authenticated session, but it does not call sessionregenerateid afterward. As a result, the session identifier is not rotate...

CVE-2026-64857

tirreno , a security framework, is affected by a session fixation vulnerability in versions prior to 0.10.0 . During login, tirreno validates credentials and establishes the authenticated session but fails to call session_regenerate_id(), leaving the session identifier unchanged before and after ...

CVE-2026-64857 tirreno has Session Fixation in Login Authentication

tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. During authentication, tirreno validates the user's credentials and establishes the authenticated session, but it does not call sessionregenerateid afterward. As a result, the session identifier is not rotate...

CVE-2026-86770

Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication. Due to the default utf8mb4_unicode_ci database collation, an attacker who registers IdP accounts with accent or case variants of a victim's username can bypass username matching and achieve account takeo...

EUVD-2026-74947

Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication, allowing attackers to authenticate as different users by registering IdP accounts with accent or case variants of victim usernames. Attackers can exploit the default utf8mb4unicodeci database collation t...

CVE-2026-86770 Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation

Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication, allowing attackers to authenticate as different users by registering IdP accounts with accent or case variants of victim usernames. Attackers can exploit the default utf8mb4unicodeci database collation t...

EUVD-2026-74910

PocketMine-MP versions before 5.43.1 fail to properly validate the Certificate field during offline login authentication. Unauthenticated players can trigger an uninitialized property access error that crashes the server...

CVE-2026-86199 PocketMine-MP before 5.43.1 Denial of Service via unauthenticated login

PocketMine-MP versions before 5.43.1 fail to properly validate the Certificate field during offline login authentication. Unauthenticated players can trigger an uninitialized property access error that crashes the server...

CVE-2026-86199

PocketMine-MP versions before 5.43.1 fail to properly validate the Certificate field during offline login authentication. An unauthenticated player can trigger an uninitialized property access error that crashes the server , resulting in a denial of service. The issue is resolved in version 5.43....

CVE-2026-86199 PocketMine-MP before 5.43.1 Denial of Service via unauthenticated login

PocketMine-MP versions before 5.43.1 fail to properly validate the Certificate field during offline login authentication. Unauthenticated players can trigger an uninitialized property access error that crashes the server...

CVE-2026-24061

CVE-2026-24061 GNU Inetutils telnetd Remote Authentication Bypass ¿En serio, telnet en 2026? Vamos, amigos, ya es hora de pasar página. SSH existe desde 1995. 🤦 Descripción Una vulnerabilidad crítica de omisión de autenticación en GNU Inetutils telnetd que afecta a las versiones 1.9.3 hasta 2.7. ...

CVE-2024-9933

CVE-2024-9933 WatchTowerHQ = 3.10.1 - 因缺少空值检查导致认证绕过至管理员 描述： WatchTowerHQ 的 WordPress 插件在 3.9.6 及之前版本中存在认证绕过漏洞。这是由于 'watchtowerotatoken' 的默认值为空，且 'PasswordLessAccess::login' 函数中缺少非空检查。这使得未认证的攻击者可以登录为 WatchTowerHQ 客户端管理员用户。 root@kitploit: State: PUBLISHED Score: 9.8 CVSS:...

CVE-2024-50478

CVE-2024-50478 1-Click Login: Passwordless Authentication 1.4.5 - 认证绕过通过账户接管 描述: WordPress 的 1-Click Login: Passwordless Authentication 插件在 1.4.5 版本中存在认证绕过漏洞。这是由于插件在认证用户之前未正确验证用户身份。这使得未经身份验证的攻击者能够以其他用户（例如管理员）的身份登录，前提是他们拥有访问电子邮件的权限。 root@kitploit: CVE: CVE-2024-50478 CVSS:...

CVE-2014-0195

XML-RPC WordPress 暴力破解利用脚本 该仓库包含一个基于Python的概念验证（PoC）脚本，用于对存在CVE-2014-0195漏洞的WordPress实例进行登录凭据暴力破解。该漏洞利用XML-RPC的system.multicall函数，可以在单个HTTP请求中尝试多次登录请求，可能导致拒绝服务。此脚本旨在供网络安全专业人员评估WordPress安装的安全性。 免责声明 此代码仅供在授权系统上合法使用。未经授权使用此代码属违法行为，可能导致严重后果。在测试或利用不属于您的系统之前，始终获取明确许可。 漏洞概述 漏洞存在于WordPress的XML-RPC...

CVE-2025-55462

CVE-2025-55462 Vulnerability Summary A Cross-Origin Resource Sharing CORS misconfiguration was identified in Eramba Community and Enterprise Editions v3.26.0. The application reflects attacker-controlled Origin headers in the Access-Control-Allow-Origin response header on the /system-api/login...

CVE-2021-43650

CVE-2021-43650 Webrun = 3.6.0.42 SQLi Descripción Webrun es una aplicación de gestión basada en web. En la versión 3.6.0.42 fue posible identificar y reportar una vulnerabilidad de inyección SQL que ocurre durante el proceso de inicio de sesión; más específicamente, inyectaremos el payload en el...

CVE-2025-47646

🔐 CVE-2025-47646 – PSW 前端登录与注册插件 pswform 是请求所需的 nonce 字段。 该 nonce 由前端的 pswregistration 短代码动态生成。 ✅ 成功响应 root@...

CVE-2024-4701-POC

CVE-2024-4701-PoC CVE-2024-4701 的 PoC 从 https://netflix.github.io/genie/docs/4.3.0/demo/docker-compose.yml 或此仓库下载 genie docker 文件 运行 docker-compose up 下载附带的 http 载荷文件 loadlib 运行以下命令 nc -w 5 localhost 8080 loadlib 你可能需要安装 netcat nc 这将向运行在 docker 中的 genie 应用发送载荷，该应用会上传 pe.so 和 ld.so.upload 文件。 然后登录...

CVE-2023-2982-POC

CVE-2023-2982 WordPress Social Login and Register Discord, Google, Twitter, LinkedIn = 7.6.4 - Authentication Bypass WordPress社交登录和注册（Discord，Google，Twitter，LinkedIn）=7.6.4-绕过身份验证 Info The WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin for WordPress is vulnerable to...

CVE-2018-10933

重现并改进 CVE-2018-10933 场景 说明 root@kitploit: 此内容仅用于教育目的，针对 CVE-2018-10933，即 libSSH 绕过认证漏洞！ libssh 0.6 及以上版本在服务器代码中存在认证绕过漏洞。 通过向服务器发送 SSH2MSGUSERAUTHSUCCESS 消息，而不是服务器期望用来发起认证的 SSH2MSGUSERAUTHREQUEST 消息， 攻击者可以在没有任何凭据的情况下成功认证。 "patch" 文件夹包含用于测试目的的服务器修改代码（在任何认证过程中注入 SSH2MSGUSERAUTHSUCCESS 数据包）， 由于此漏洞已在...