Lucene search
+L

37216 matches found

Patchstack
Patchstack
added 2026/09/08 8:12 a.m.4 views

WordPress SureCart plugin < 4.7.0 - Unauthenticated Account Creation with Automatic Login vulnerability

Unauthenticated Account Creation with Automatic Login vulnerability discovered by Jakub Herman in WordPress Plugin SureCart versions 4.7.0...

6.5CVSS0.00164EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/09/08 7:42 a.m.5 views

CVE-2026-66418-OpenClaw-Dashboard-v3.0.0-Stored-XSS-via-Failed-Login-Username-Field

Security Advisory: Unauthenticated Stored Cross-Site Scripting Leading To Administrator Account Takeover openclaw-dashboard Title: OpenClaw Dashboard v3.0.0 Stored XSS via Failed Login Username Field Assigned CVE ID: CVE-2026-66418 Target Repository:...

9.3CVSS5.9AI score0.00511EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/08 2:22 a.m.5 views

CVE-2025-10035

CVE-2025-10035 ¿Cómo funciona este método de detección? Detecta instancias vulnerables de GoAnywhere MFT extrayendo números de versión de la página de inicio de sesión y comparándolos con los rangos de versiones afectadas. ¿Cómo ejecuto este script? 1. Descarga Nuclei desde aquí 2. Copia la...

10CVSS8.4AI score0.99799EPSS
SaveExploits3References1
CVE
CVE
added 2026/09/08 2:04 a.m.26 views

CVE-2026-19397

CVE-2026-19397 is a missing authentication vulnerability in ASUS Control Center Express Agent . When the host has an active login session, an unauthenticated user on the adjacent network can directly connect to the agent and control the host. The flaw affects a critical function within the agent ...

7.7CVSS0.00205EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 1:38 a.m.8 views

pritunl-CVE-2020-25200

CVE-2020-25200 Servidor Pritunl VPN - Versión afectada: Pritunl v1.29.2145.25 553bbd ========================= Pritunl 1.29.2145.25 permite a los atacantes enumerar nombres de usuario VPN válidos mediante una serie de intentos de inicio de sesión en /auth/session. Inicialmente, el servidor devuel...

5.3CVSS5.9AI score0.0747EPSS
SaveExploits1
EUVD
EUVD
added 2026/09/08 12:00 a.m.7 views

EUVD-2026-72850

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...

0.00139EPSS
SaveExploits0References1
NOZOMI
NOZOMI
added 2026/09/08 12:00 a.m.6 views

Cross-site request forgery in the Guardian/CMC login before 26.3.0

Summary A cross-site request forgery vulnerability was discovered in the login functionality both standard and SAML due to missing validation of the anti-CSRF token. Impact An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any...

5.1CVSS0.00099EPSS
SaveExploits0Affected Software2
CVE
CVE
added 2026/09/08 12:00 a.m.12 views

CVE-2026-79577

CVE-2026-79577 affects the /cas/login component of sso-master v1.0.0 , a single-sign-on application. The vulnerability allows an attacker to authenticate into the application without a password by sending a crafted POST request to the login endpoint, effectively bypassing normal credential checks...

0.00139EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 12:00 a.m.9 views

CVE-2026-79576

Digital-Infrastructure v9.6.7 has a vulnerability in its Single-Sign On (SSO) component that allows an unauthenticated, remote attacker to authenticate as any user, including the Admin, without a password . The flaw is network-exploitable with no user interaction or prior privileges required, rat...

9.8CVSS0.00334EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/07 6:10 p.m.7 views

CVE-2020-35590

Información del exploit Título del exploit: Plugin de WordPress Limit Login Attempts Reloaded 2.13.0 - Bypass del límite de inicio de sesión CVE: CVE-2020-35590 Fecha: 2020-06-09 Autor del exploit: N4nj0 Enlace del software: https://wordpress.org/plugins/limit-login-attempts-reloaded/ Versión:...

9.8CVSS8AI score0.04348EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/07 3:43 p.m.7 views

CVE-2024-28999

CVE-2024-28999 Exploit para CVE-2024-28999 Vulnerabilidad de condición de carrera en SolarWinds Platform - página de inicio de sesión Se determinó que SolarWinds Platform está afectada por una vulnerabilidad de condición de carrera que afecta a la página de inicio de sesión de la consola web...

7.5CVSS7AI score0.13913EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/07 3:26 p.m.9 views

CVE-2021-26088

PoC para CVE-2021-26084 escrito en PowerShell Descripción Una vulnerabilidad de autenticación inadecuada en FSSO Collector puede permitir que un usuario no autenticado eluda cualquier regla de autenticación del firewall y acceda a la red protegida mediante el envío de paquetes UDP de notificación...

9.8CVSS7.8AI score0.99999EPSS
SaveExploits46
NVD
NVD
added 2026/09/07 2:16 p.m.4 views

CVE-2026-14444

The WP Fusion Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.47.13. This is due to insufficient authorization checks on the role parameter in the ThriveCart Auto Login handler's thrivecart function. This makes it possible for authenticated...

7.5CVSS0.00214EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/07 1:28 p.m.6 views

EUVD-2026-72403

The WP Fusion Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.47.13. This is due to insufficient authorization checks on the role parameter in the ThriveCart Auto Login handler's thrivecart function. This makes it possible for authenticated...

7.5CVSS0.00214EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/07 1:28 p.m.27 views

CVE-2026-14444 WP Fusion (Pro) <= 3.47.13 - Authenticated (Subscriber+) Privilege Escalation via ThriveCart Auto Login 'role' Parameter

The WP Fusion Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.47.13. This is due to insufficient authorization checks on the role parameter in the ThriveCart Auto Login handler's thrivecart function. This makes it possible for authenticated...

7.5CVSS0.00214EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/07 1:17 p.m.4 views

CVE-2022-51016

PocketMine-MP 3.x before 3.27.0 does not implement Minecraft Bedrock protocol encryption, so the server cannot verify that a connecting client possesses the private key corresponding to its login token. An attacker who captures a valid login from another player's session for example by tricking t...

6.1CVSS0.00226EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/07 12:55 p.m.14 views

CVE-2022-51016

PocketMine-MP 3.x (before 3.27.0) fails to implement Minecraft Bedrock protocol encryption, allowing an attacker who captures a valid login token to replay it and impersonate the victim through XBOX Live authentication until the JWT token expires (typically 2–3 days). The attack requires the targ...

6.1CVSS0.00226EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/07 12:55 p.m.3 views

CVE-2022-51016 PocketMine-MP 3.x before 3.27.0 Authentication Bypass via Login Replay

PocketMine-MP 3.x before 3.27.0 does not implement Minecraft Bedrock protocol encryption, so the server cannot verify that a connecting client possesses the private key corresponding to its login token. An attacker who captures a valid login from another player's session for example by tricking t...

5.3CVSS5.8AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/07 12:55 p.m.34 views

CVE-2022-51016 PocketMine-MP 3.x before 3.27.0 Authentication Bypass via Login Replay

PocketMine-MP 3.x before 3.27.0 does not implement Minecraft Bedrock protocol encryption, so the server cannot verify that a connecting client possesses the private key corresponding to its login token. An attacker who captures a valid login from another player's session for example by tricking t...

6.1CVSS0.00226EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/07 12:18 p.m.5 views

CVE-2017-7921-EXPLOIT

CVE-2017-7921 - Vulnerabilidad de Autenticación Inadecuada en la Serie de Cámaras Hikvision Una falla de seguridad identificada como CVE-2017-7921 que afecta a varios modelos de cámaras Hikvision. La vulnerabilidad fue descubierta en los dispositivos de las series DS-2CD2xx2F-I V5.2.0 build 14072...

9.8CVSS8.2AI score0.99998EPSS
SaveExploits14
Rows per page
Query Builder