CVE-2022-29056

CVE-2022-29056 Exploit Automation 교육 목적 🚨 📌 설명 로그인 엔드포인트에 대한 자동화된 요청 전송을 테스트할 수 있는 그래픽 인터페이스Tkinter를 갖춘 Python 스크립트입니다. 서버가 다양한 페이로드 크기에 어떻게 응답하는지 시뮬레이션하고 잠재적 결함을 분석하는 것이 목적입니다. ⚠️ 이 코드는 엄격히 교육 및 학습 목적으로만 제공됩니다. 오용은 불법이거나 보안 정책에 위반될 수 있습니다. 저자는 부적절한 사용에 대해 책임을 지지 않습니다. 🛠 기능 ✅ 대상 IP를 입력하고 페이로드 크기를...

CVE-2023-26208

CVE-2023-26208 Exploit Automation 교육 목적 🚨 📌 설명 이것은 사용자가 로그인 엔드포인트에 자동화된 요청 전송을 테스트할 수 있게 해주는 그래픽 인터페이스Tkinter가 있는 Python 스크립트입니다. 목표는 서버가 다양한 페이로드 크기에 어떻게 응답하는지 시뮬레이션하고 잠재적 결함을 분석하는 것입니다. ⚠️ 이 코드는 엄격히 교육 및 학습 목적으로만 제공됩니다. 오용은 불법이거나 보안 정책에 위배될 수 있습니다. 저자는 부적절한 사용에 대해 책임을 지지 않습니다. 🛠 기능 ✅ 대상 IP를 입력하고...

CVE-2023-26209

CVE-2023-26209 Exploit Automation（教育目的）🚨 📌 説明 これは、ログインエンドポイントへの自動化されたリクエスト送信をテストできる、グラフィカルインターフェース（Tkinter）を備えたPythonスクリプトです。目的は、サーバーがさまざまなペイロードサイズにどのように応答するかをシミュレートし、潜在的な障害を分析することです。 ⚠️ このコードは、厳密に教育および学習目的のためのものです。不正使用は違法となる可能性があり、セキュリティポリシーに反する場合があります。作者は、不適切な使用について一切の責任を負いません。 🛠 機能 ✅...

CVE-2025-3388

A vulnerability classified as problematic was found in hailey888 oasystem up to 2025.01.01. This vulnerability affects the function loginCheck of the file cn/gson/oasys/controller/login/LoginsController.java of the component Frontend. The manipulation of the argument Username leads to cross site...

CVE-2025-3388 hailey888 oa_system Frontend LoginsController.java loginCheck cross site scripting

A vulnerability classified as problematic was found in hailey888 oasystem up to 2025.01.01. This vulnerability affects the function loginCheck of the file cn/gson/oasys/controller/login/LoginsController.java of the component Frontend. The manipulation of the argument Username leads to cross site...

PT-2025-15307 · Unknown · Hailey888 Oa System

Name of the Vulnerable Software and Affected Versions: hailey888 oa system up to 2025.01.01 Description: A vulnerability was found in hailey888 oa system, affecting the function loginCheck of the file cn/gson/oasys/controller/login/LoginsController.java of the component Frontend. The manipulation...

PT-2024-15441 · Unknown · Kashipara Food Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Food Management System versions up to 1.0 Description: A critical issue was found in the Kashipara Food Management System, affecting some unknown functionality of the file loginCheck.php. The manipulation of the password argument...

CVE-2022-34046

An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser;...

CVE-2022-34046

An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser;...

PT-2022-21983 · Wavlink · Wavlink Wn533A8

Name of the Vulnerable Software and Affected Versions: Wavlink WN533A8 version M33A8.V5030.190716 Description: An access control issue allows attackers to obtain usernames and passwords via the API endpoint "http://IP ADDRESS/sysinit.shtml?r=52300" by searching for logincheckuser. Recommendations...

Fortinet FortiOS 6.0.4 - Unauthenticated SSL VPN User Password Modification

Exploit Title: Fortinet FortiOS 6.0.4 - Unauthenticated SSL VPN User Password Modification Google Dork: intitle:"Please Login" "Use FTM Push" Date: 15/11/2020 Exploit Author: Ricardo Longatto Details: This exploit allow change users password from SSLVPN web portal Vendor Homepage:...

Fortinet FortiOS 6.0.4 Password Modification

Exploit Title: Fortinet FortiOS 6.0.4 - Unauthenticated SSL VPN User Password Modification Google Dork: intitle:"Please Login" "Use FTM Push" Date: 15/11/2020 Exploit Author: Ricardo Longatto Details: This exploit allow change users password from SSLVPN web portal Vendor Homepage:...

Tenda AC18 Remote Code Execution Vulnerability

Ac18 is a wireless router from Tenda. A remote code execution vulnerability exists in the Tenda AC18. The vulnerability stems from incorrect authentication handling of the logincheck function in the /usr/lib/lua/ngxauthserver/ngxwdas.lua file when the administrator UI is set to "radius". An...

CVE-2020-24987

Tenda AC18 Router through V15.03.05.05EN and through V15.03.05.196318 CN devices could cause a remote code execution due to incorrect authentication handling of vulnerable logincheck function in /usr/lib/lua/ngxauthserver/ngxwdas.lua file if the administrator UI Interface is set to "radius"...

Authentication flaw

Tenda AC18 Router through V15.03.05.05EN and through V15.03.05.196318 CN devices could cause a remote code execution due to incorrect authentication handling of vulnerable logincheck function in /usr/lib/lua/ngxauthserver/ngxwdas.lua file if the administrator UI Interface is set to "radius"...

PT-2020-15878 · Tenda · Tenda Ac18 Router

Name of the Vulnerable Software and Affected Versions: Tenda AC18 Router versions through V15.03.05.05 EN Tenda AC18 Router versions through V15.03.05.196318 CN Description: The issue is related to incorrect authentication handling of the logincheck function in the /usr/lib/lua/ngx authserver/ngx...

CVE-2020-24987: Improper Authentication

Tenda AC18 Router through V15.03.05.05EN and through V15.03.05.196318 CN devices could cause a remote code execution due to incorrect authentication handling of vulnerable logincheck function in /usr/lib/lua/ngxauthserver/ngxwdas.lua file if the administrator UI Interface is set to "radius"...

zzcms SQL Injection Vulnerability (CNVD-2019-13260)

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in the /user/logincheck.php file in ZZCMS version 8.3. The vulnerability can be exploited by a remote attacker to execute SQL commands with the help of the 'X-Forwarded' parameter in the HTTP...

SQL Injection Vulnerability in ZZCMS /admin/logincheck.php File

Webmaster Merchants Content Management System ZZCMS developed by the ZZCMS team, into the database optimization, content caching, AJAX and other technologies, open source, independent functional modules, to facilitate secondary development. ZZCMS /admin/logincheck.php file SQL injection...

SQL Injection Vulnerability in Zzcms admin/logincheck.php Page

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in the zzcms admin/logincheck.php page. Due to the failure to filter variables coming from $SERVER, an attacker can exploit the vulnerability to obtain sensitive database data...