Lucene search
+L

18 matches found

Kitploit
Kitploit
•added 2026/10/12 6:49 p.m.•24 views

CVE-2020-7247-POC

Foreword Key facts about the exploit Installing the vulnerable server Configuration Environment disclaimers Exploit Manual Exploitation Scripted Exploitation Foreword This repository should serve as a base to set up and exploit CVE-2020-7247 in a controlled and private environment. All of the...

10CVSS8.3AI score0.98972EPSS
SaveExploits28References1
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•5 views

PT-2026-105912

Impact The partial-pipeline resume mechanism accepted partial token as a bearer credential without binding it to the browser session that created it. Applications using resumable partial pipeline steps could allow an attacker to start an authentication flow, obtain a valid partial token and...

4.2CVSS5.8AI score0.00158EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•6 views

PT-2026-98191

Name of the Vulnerable Software and Affected Versions Python Social Auth versions prior to 5.0.0 Description The partial-pipeline resume mechanism accepts the partial token as a bearer credential without binding it to the browser session that created it. This allows an attacker to initiate an...

4.2CVSS5.8AI score0.00158EPSS
SaveExploits0References18
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•29 views

EUVD-2023-1803

Malicious code in bioql PyPI...

5.3CVSS5.7AI score0.00649EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2025/05/23 6:06 a.m.•20 views

CVE-2023-34099

Shopware is an open source e-commerce software. The mail validation in the registration process had some flaws, so it was possible to construct different mail addresses, that in the end result in the same address, which is shared by multiple accounts. This issue has been addressed in version 5.7....

5.3CVSS6.9AI score0.00649EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/20 12:00 a.m.•34 views

CVE-2024-48533

A discrepancy between responses for valid and invalid e-mail accounts in the Forgot your Login? module of eSoft Planner 3.24.08271-USA allows attackers to enumerate valid user e-mail accounts...

0.0041EPSS
SaveExploits1References1
OSV
OSV
•added 2023/06/28 10:34 p.m.•95 views

GHSA-GH66-FP7J-98V5 Shopware improper mail validation vulnerability

Impact The mail validation in the registration process had some flaws, so it was possible to construct different mail addresses, that in the end result in the same address, which is shared by multiple accounts. Patches We recommend updating to the current version 5.7.18. You can get the update to...

5.3CVSS5.2AI score0.00649EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2023/06/28 10:34 p.m.•42 views

Shopware improper mail validation vulnerability

Impact The mail validation in the registration process had some flaws, so it was possible to construct different mail addresses, that in the end result in the same address, which is shared by multiple accounts. Patches We recommend updating to the current version 5.7.18. You can get the update to...

5.3CVSS7AI score0.00649EPSS
SaveExploits0References7Affected Software1
Prion
Prion
•added 2023/06/27 5:15 p.m.•34 views

Input validation

Shopware is an open source e-commerce software. The mail validation in the registration process had some flaws, so it was possible to construct different mail addresses, that in the end result in the same address, which is shared by multiple accounts. This issue has been addressed in version 5.7....

5CVSS5.2AI score0.00649EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2023/06/27 4:29 p.m.•18 views

CVE-2023-34099 Improper mail validation in Shopware

Shopware is an open source e-commerce software. The mail validation in the registration process had some flaws, so it was possible to construct different mail addresses, that in the end result in the same address, which is shared by multiple accounts. This issue has been addressed in version 5.7....

5.3CVSS7.1AI score0.00649EPSS
SaveExploits0References4
Mend
Mend
•added 2023/06/27 4:29 p.m.•4 views

CVE-2023-34099

Shopware is an open source e-commerce software. The mail validation in the registration process had some flaws, so it was possible to construct different mail addresses, that in the end result in the same address, which is shared by multiple accounts. This issue has been addressed in version 5.7....

6.9CVSS0.00649EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2023/06/27 4:29 p.m.•52 views

CVE-2023-34099 Improper mail validation in Shopware

Shopware is an open source e-commerce software. The mail validation in the registration process had some flaws, so it was possible to construct different mail addresses, that in the end result in the same address, which is shared by multiple accounts. This issue has been addressed in version 5.7....

5.3CVSS5.5AI score0.00649EPSS
SaveExploits0References4
CVE
CVE
•added 2023/06/27 4:29 p.m.•74 views

CVE-2023-34099

Shopware 5.x (prior to 5.7.18) contains an improper mail validation in the registration process. The flaw allows constructing different email addresses that resolve to the same address, causing multiple accounts to be shared under a single email. The issue has been fixed in version 5.7.18; users ...

5.3CVSS5.1AI score0.00649EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2023/06/27 4:29 p.m.•27 views

CVE-2023-34099 Improper mail validation in Shopware

Shopware is an open source e-commerce software. The mail validation in the registration process had some flaws, so it was possible to construct different mail addresses, that in the end result in the same address, which is shared by multiple accounts. This issue has been addressed in version 5.7....

5.3CVSS5.5AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/27 12:00 a.m.•3 views

CVE-2023-34099: Improper Check for Unusual or Exceptional Conditions

Shopware is an open source e-commerce software. The mail validation in the registration process had some flaws, so it was possible to construct different mail addresses, that in the end result in the same address, which is shared by multiple accounts. This issue has been addressed in version 5.7....

5.3CVSS5.8AI score0.00649EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/06/27 12:00 a.m.•20 views

PT-2023-24671 · Shopware · Shopware

Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 5.7.18 Description: The mail validation in the registration process had flaws, allowing the construction of different mail addresses that result in the same address, which can be shared by multiple accounts...

5.3CVSS5.1AI score0.00649EPSS
SaveExploits0References10
Packet Storm
Packet Storm
•added 2020/11/26 12:00 a.m.•373 views

BigBlueButton 2.2.29 E-mail Validation Bypass

Title: BigBlueButton E-mail Validation Bypass Google Dork: N/A Date: 24.11.2020 Author: Seccops https://seccops.com Vendor Homepage: bigbluebutton.org Version: 2.2.29 and previous versions CVE: CVE-2020-29043 === Summary === An issue was discovered in BigBlueButton through 2.2.29. When at attacke...

0.0145EPSS
SaveExploits2
xssed
xssed
•added 2010/09/11 12:00 a.m.•23 views

Unfixed Redirect vulnerability at phome.net

Security researcher Wong Chieh Yie, has submitted on 09/11/2010 a Redirect vulnerability affecting phome.net, which at the time of submission ranked 6559 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently unfixed. If yo...

0.1AI score
SaveExploits0References1
Rows per page
Query Builder