perl-CVE-2013-1775

CVE-2013-1775 Apple Mac OSX 10.8.4 - 権限昇格 CVE-2013-1775 Apple Mac OSX 10.8.4 - 権限昇格エクスプロイトのPerlバージョン。 参考文献: https://www.exploit-db.com/exploits/27965/ https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/sudopasswordbypass.rb http://www.exploit-db.com/exploits/279...

EUVD-2026-78272

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.16.20 via the 'id' parameter. This makes it possible for unauthenticated attackers to extract sensitive data...

CVE-2021-36808

CVE-2021-36808 A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115. Advisory: https://www.sophos.com/en-us/security-advisories/sophos-sa-20211029-ssw-pw-bypass Write Up:...

CVE-2026-66916

通过 JSON 格式绕过 JoomGallery 中的密码保护分类 JoomGallery ≤ 4.3.0-stable — 未认证攻击者绕过密码门禁下载受保护图片 摘要 JoomGallery 的分类 JSON 视图中存在一个未认证的访问控制绕过漏洞。当某个图库分类受密码保护时，HTML 视图会正确实施密码门禁——但 JSON 视图（format=json）完全跳过了该检查。 无需任何凭据的远程攻击者即可获取分类的标题、描述以及所有受保护图片的随机化文件名，然后直接下载这些图片。仅需一个 HTTP 请求即可绕过密码保护功能。 此绕过仅影响 Joomla ACL 访问级别设置为 Publ...

stegcrack

Stegcrack Stegcrackは、Steghideの脆弱性（具体的にはCVE-2021-27211）を悪用するためのオープンソースプログラムです。 Stegcrackは、指定されたファイルにSteghideで隠されたデータが含まれているかどうかを検出し、パスワードなしで隠されたデータを完全に抽出できる場合もあります。 インストール このリポジトリをクローンする root@kitploit: git clone https://github.com/b4shfire/stegcrack ソースディレクトリに移動する root@kitploit: cd stegcrack/src...

coldfusion-10-11-xss

ColdFusion 10.x 11.x XSS - RCE PoC エクスプロイト このリポジトリには、CVE-2015-0345（APSB15-07）のXSSベクターが含まれており、ColdFusion インストールに対してリモートコマンド実行を可能にします。 このエクスプロイトは、ColdFusion 10 および 11 のインストールでのみ有効です。具体的には、ColdFusion 11 Update 11 および ColdFusion 10 Update 16 により、これらの問題は両方修正されています。この開示に関する詳細情報はこちらを参照してください。 Payload 1...

copyfail-alpine

これは、Copy Fail...

CVE-2026-14559

CVE-2026-14559 affects the teddy-bear-customize-addon WordPress plugin through version 1.0.5 . The root cause is the absence of password verification before user authentication, allowing an unauthenticated attacker to log in as any registered user—including administrators—by supplying only that u...

CVE-2026-14559 Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Account Takeover

The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user's password before authenticating them, allowing unauthenticated attackers to log in as any registered user, including administrators, by supplying only that user's email address...

unshackle

サポート終了 ⚠ このプロジェクトは現在アーカイブされており、維持に必要な時間と、あまり性能の良くないPC上でのVMwareでのテストが困難なため、今後は開発されません。 Unshackle - パスワードバイパスツール Unshackleは、Linuxベースの起動可能USBからWindowsおよびLinuxのユーザーパスワードをバイパスするためのオープンソースツールです。 コントリビューションを歓迎します。 To-Doリスト: 機能| ステータス ---|--- 使いやすさ| ✅ Windows対応| ✅ シンプルなCLI| ✅ Linux対応| ✅ チュートリアル動画| 🟡...

PT-2026-89775

The advanced-customized-prompts WordPress plugin through 1.0.1 does not verify the password before issuing an authenticated session for a supplied email address in an unauthenticated action, allowing unauthenticated attackers to log in as any registered user, including administrators, or to creat...

EUVD-2026-75426

AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in plugin/PlayerSkins/seo.php that allows unauthenticated attackers to access password-protected video sources by calling getSources without password validation. Attackers can request t...

EUVD-2026-75424

AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 master, 2026-08-23 does not enforce the Live stream password check on the stats endpoint or on the HLS origin. Live::getStats plugin/Live/Live.php returns a password-protected transmission's RTMP stream key, its isPasswordProtected...

PT-2026-89385

AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 master, 2026-08-23 does not enforce the Live stream password check on the stats endpoint or on the HLS origin. Live:: getStats plugin/Live/Live.php returns a password-protected transmission's RTMP stream key, its isPasswordProtected...

GHSA-VPJW-WF5H-CGPQ SiYuan: Graph endpoints omit the publish-password tier: anonymous readers receive block-level content of password-protected documents

CVE: This vulnerability corresponds to CVE-2026-72804. Summary getGraph and getLocalGraph filter reader sessions against the visibility tier only and never check the publish password. Password-protected documents are Visible = true, so their graph nodes survive the filter and graph nodes are...

EUVD-2026-57464

SiYuan: Graph endpoints omit the publish-password tier: anonymous readers receive block-level content of password-protected documents...

GHSA-6MCF-G667-W3QV SiYuan: Password (protected) tier omitted in the attribute-view/database publish filter: Reader receives rows of protected documents without the password (publish mode)

CVE: This vulnerability corresponds to CVE-2026-72806. Summary FilterViewByPublishAccess, the filter renderAttributeView applies for Reader sessions drops rows using only the hidden/forbidden check and never checks the publish password. Its three sibling filters all check both tiers. As a result,...

CVE-2025-8945

The Wp Edit Password Protected WordPress plugin before 1.3.5 allows protecting page content, but this protection can be bypassed by using the REST API...

CVE-2025-15489 Passster < 4.2.24 - Password Protection Bypass

The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content...

CVE-2025-15489

The Passster WordPress plugin before version 4.2.24 contains an improper input handling flaw in an AJAX action , allowing unauthenticated users to retrieve the value of password-protected content. This constitutes a password protection bypass , with a CVSS 3.1 score of 5.3 (Medium) reflecting net...