CVE-2018-13382

CVE-2018-13382 CVE-2018-13382 https://devco.re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn/ Una vulnerabilità di autorizzazione impropria in Fortinet FortiOS 6.0.0 a 6.0.4, 5.6.0 a 5.6.8 e 5.4.1 a 5.4.10 nel portale web SSL VPN consente a un attaccante non autenticato ...

CVE-2020-1472

Dopo la replica ho notato un piccolo bug: al riavvio la schermata di login resta bloccata per un po'. Non so se capiti solo a me. Usare con cautela in ambienti reali. In un ambiente reale, puoi usare secretsdump.py con le opzioni -use-vss e -history per recuperare gli hash storici. Primo passo...

dirkjanm-CVE-2020-1472

CVE-2020-1472 POC Requer a versão mais recente do impacket do GitHub com as estruturas netlogon adicionadas. Observe que, por padrão, isto altera a senha da conta do controlador de domínio. Sim, isso permite que você faça DCSync, mas também interrompe a comunicação com outros controladores de...

nmap-nse-scripts

Repository per lo sviluppo di NSE Nmap Scripting Engine. Troverai i miei script inclusi quelli non ufficiali, librerie, risorse e altro materiale correlato dai miei workshop. TODO -Completamento libreria NSE SMB2 -Attualmente sto lavorando sulla funzionalità di password mangling Paulino Calderon...

CVE-2525-25748-Cross-Site-Request-Forgery-CSRF-Vulnerability-in-HotelDruid-3.0.7

CVE-2025-25748 - Vulnerabilità Cross Site Request Forgery CSRF in HotelDruid 3.0.7 Descrizione Una vulnerabilità di Cross Site Request Forgery CSRF nell'endpoint gestioneutenti.php di HotelDruid 3.0.7 consente agli attaccanti di eseguire azioni non autorizzate ad esempio, modificare le password...

CVE-2023-42820

CVE-2023-42820 CVE-2023-42820 Descrizione della vulnerabilità Vulnerabilità di reset della password di JumpServer USAGE V2 Update 1. Completamente ricostruito 2. Aggiunta la possibilità di utilizzare account ed email predefiniti quando non vengono ricevuti account ed email. 3. Migliorato il...

public-passwd

!WARNING Usa questo solo su sistemi di tua proprietà o per cui hai autorizzazione al test. Si consiglia di tenere aperta una shell di root se non potrai riavviare il sistema in caso di fallimento, poiché potresti non essere in grado di cancellare la cache di pagina per /etc/shadow senza root...

CVE-2026-15479

A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function changepasswd of the file /api/login/modify of the component Administrator Password Modification Endpoint. The manipulation of the argument newPass results in weak password recovery. The attack may be...

CVE-2026-15479 H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recovery

A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function changepasswd of the file /api/login/modify of the component Administrator Password Modification Endpoint. The manipulation of the argument newPass results in weak password recovery. The attack may be...

CVE-2026-15479

The vulnerability CVE-2026-15479 affects H3C NX15 V100R017. The vulnerable component is the Administrator Password Modification Endpoint, specifically the change_passwd function at /api/login/modify. Manipulating the newPass parameter results in weak password recovery. The issue can be exploited ...

EUVD-2026-27892

Vvveb before version 1.0.8.2 contains an XML external entity XXE injection vulnerability in the admin Tools/Import feature that allows authenticated siteadmin users to read arbitrary files and modify database records. Attackers can exploit the XML parser configuration in system/import/xml.php to...

Open Source Point of Sale 安全漏洞

Open Source Point of Sale is an open-source sales point system based on the Open Source Point of Sale framework. Versions prior to Open Source Point of Sale 3.4.2 contained security vulnerabilities. These vulnerabilities were caused by insecure direct object references, which could allow...

CVE-2026-23480

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is a privilege escalation vulnerability. The upsertUser endpoint has 3 issues: it is missing superAdminAuthMiddleware, any logged-in user can call it; the originalPassword is an optional parameter and if not provided...

CVE-2026-23480

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is a privilege escalation vulnerability. The upsertUser endpoint has 3 issues: it is missing superAdminAuthMiddleware, any logged-in user can call it; the originalPassword is an optional parameter and if not provided...

CVE-2026-23480 Blinko: Low Privilege User Privilege Escalation - upsertUser Endpoint

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is a privilege escalation vulnerability. The upsertUser endpoint has 3 issues: it is missing superAdminAuthMiddleware, any logged-in user can call it; the originalPassword is an optional parameter and if not provided...

CVE-2026-23480

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, there is a privilege escalation vulnerability. The upsertUser endpoint has 3 issues: it is missing superAdminAuthMiddleware, any logged-in user can call it; the originalPassword is an optional parameter and if not provided...

Connect CMS: Improper Authorization in the My Page Profile Update Feature Allows Modification of Arbitrary User Information

Security Advisory — My Page Profile Update Improper Authorization Summary An improper authorization issue in the My Page profile update feature may allow modification of arbitrary user information. Affected Versions - 1.x series: = 1.41.0 - 2.x series: = 2.41.0 Patched Versions - 1.41.1 - 2.41.1...

Blinko 安全漏洞

Blinko is an open-source AI-based card-based note-taking application designed for users who want to quickly capture and organize fleeting ideas. Versions of Blinko prior to 1.8.4 contained security vulnerabilities. These vulnerabilities stemmed from deficiencies in the upsertUser endpoint,...

CVE-2026-33133

WeGIA is a web manager for charitable institutions. In versions 3.6.5 and 3.6.6, the loadBackupDB function imports SQL files from uploaded backup archives without any content validation. An attacker can craft a backup archive containing arbitrary SQL statements that create rogue administrator...

PT-2026-23660

Name of the Vulnerable Software and Affected Versions AppEngine affected versions not specified Description An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical...