CVE-2026-107276 MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests

MISP contains a race condition in the email-based one-time password OTP login flow. When two HTTP requests carrying the same valid OTP are submitted concurrently, both can successfully authenticate and establish a session. The root cause is that the OTP value is read from the shared store,...

CVE-2025-63314

CVE-2025-63314 - Некорректная обработка токена сброса пароля в Acora CMS Обнаружено Джоби Й. Дэниелом из Crowe India 📌 Обзор DDSN Interactive cm3 Acora CMS версии 10.7.1 содержит уязвимость безопасности в функции сброса пароля. Приложение использует статический и постоянный токен сброса пароля,...

FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

The U.S. Federal Bureau of Investigation FBI and Secret Service USSS on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer SSL virtual private network VPN gateways. "The campaign...

Improper Access Control

Payload is vulnerable to improper access control. The vulnerability is due to insufficient enforcement of the access.update restriction, which allows an attacker with appropriate access to bypass the restriction and modify a user's password...

CVE-2020-1472

CVE-2020-1472 POC Требуется последняя версия impacket с GitHub с добавленными структурами netlogon. Обратите внимание: по умолчанию этот эксплойт изменяет пароль учётной записи контроллера домена. Да, это позволяет выполнить DCSync, но также нарушает связь с другими контроллерами домена, так что...

CVE-2022-46484

CVE-2022-46484 Раскрытие информации в защищенных паролем опросах в Data Illusion Survey Software Solutions NGSurvey v2.4.28 и ниже позволяет злоумышленникам просматривать пароль для доступа и произвольно отправлять опросы...

GoFileX

GoFileX 비밀번호로 보호된 GoFile 공유를 대상으로 워드리스트를 순회하기 위한 90년대 후반풍 IRC 클라이언트 TUI. 문서화된 REST API하고만 통신하며, 속도 제한을 엄격한 규칙으로 취급한다: 순차 요청, 보수적인 기본 간격, 429 / error-rateLimit 발생 시 지수적 쿨다운, 그리고 반복적인 429 이후 자동 일시정지로 클라이언트가 IP 차단에 빠지지 않도록 한다. 작성자: @abraxasnull · github.com/abraxas · abraxaslabs.tech ·...

CVE-2026-104667

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

CVE-2026-104953

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2023-51119

CVE-2023-51119 Некорректный контроль доступа на маршрутизаторе D-Link DIR-605L Объяснение эксплуатации: Из-за некорректного контроля доступа возможен захват учётной записи администратора без какой-либо аутентификации при отправке запроса при определённых условиях достаточно, чтобы легитимный...

EUVD-2026-94184

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2026-104953 MPG < 4.2.3 - Editor+ SQLi via Project Import

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2026-104953

The MPG WordPress plugin (versions before 4.2.3 ) is vulnerable to SQL injection due to improper validation of imported project data before it is used in database queries. This flaw allows users with Editor privileges or higher to execute malicious queries and access sensitive information, such a...

CVE-2026-104953 MPG < 4.2.3 - Editor+ SQLi via Project Import

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

EUVD-2026-94181

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

CVE-2026-104667

The Animated Number Counters WordPress plugin (versions before 3.1 ) is vulnerable to a second-order SQL injection (CWE-89). The root cause is the failure to sanitize or escape values stored by a user with Editor-level privileges before they are concatenated into a SQL query. This query is execut...

CVE-2026-104667 Animated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter Order

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

CVE-2026-104667 Animated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter Order

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

CVE-2026-103868 Pulp-container: registry credentials are reused across remotes in a worker

A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials from one remote are reused for later downloads in the same worker. A user who can sync a container remote, and can point that remote at a server they control, receives the username,...

CVE-2023-29084

CVE-2023-29084 Инъекция команд в ManageEngine ADManager Plus PoC POST /api/json/admin/saveServerSettings HTTP/1.1 Host: 10.10.10.99:8080 Content-Length: 183 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...