CVE-2025-56132-Liquidfiles

CVE-2025-56132 - LiquidFiles User Enumeration POC Vulnerability Description This vulnerability was identified in LiquidFiles version 4.1 and below. When initiating a password reset via the “POST /passwordreset” endpoint, the application responds differently depending on whether the supplied email...

ResetNightmare

ResetNightmare Proof-of-concept POC tool for ResetNightmare CVE-2026-27912. ResetNightmare is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched...

ZeroLogon

ZeroLogon CVE-2020-1472 C++ version. This tool directly resets the machine account password. It does not have recovery functionality. Use with caution in real-world scenarios. Referencing the BOF version: ZeroLogon-BOF, this is a modified single-file EXE version. After compilation, it is only abo...

CVE-2026-72898

🔴 CVE-2026-72898 - Unauthenticated SQL Injection Metabase — Unauthenticated SQL Injection → Full Administrator Takeover 📌 Overview CVE-2026-72898 is a maximum-severity CVSS 10.0 unauthenticated SQL injection vulnerability in Metabase that allows a remote attacker to inject arbitrary SQL into the...

HikPasswordHelper

HikPasswordHelper A tool which exploits a backdoor in Hikvision camera firmwares circa 2014-2016 ICSA-17-124-01 to help the owner change a forgotten password. Usage Download HikvisionPasswordResetHelper.exe from the releases tab and run the exe. There are 5 simple steps to reset a password, and y...

CVE-2022-1597

CVE-2022-1597 The plugin, used as a companion for the Discy and Himer themes, does not sanitise and escape a parameter on its reset password form which makes it possible to perform Reflected Cross-Site Scripting attacks Affected Plugins: WPQA history.pushState'', '', '/' Nuclei Template:...

CVE-2026-18963-Exploit

CVE-2026-18963 — Keycloak reset-credentials bypass → unauthenticated account takeover Knowing only a username or e-mail address , an unauthenticated attacker sets an arbitrary password on any Keycloak account. The password-reset e-mail is delivered to the real victim and is never needed — the...

hijagger

hijagger - check package registries for hijackable packages This tool checks every maintainer from every package in the NPM and Python Pypi registry for unregistered domains or unregistered MX records on those domains. If a domain is unregistered you can grab the domain and initiate a password...

CVE-2026-19632

TranslatePress Password Reset Link Disclosure to Administrator Account Takeover CVE: CVE-2026-19632 | CVSS: 9.8 Critical Unauthenticated account-takeover via TranslatePress plugin for wordpress. Time from CVE publication to working Day-One PoC: 5 hours, 9 minutes, 40 seconds Up to and including...

CVE-2024-55591-POC

--port 443 --ssl Then use the prompt: FortiOS get system status FortiOS exit Reset admin password: python3 poc.py --host --port 443 --ssl \ --reset-user Admin2 --new-pass Forti2024! Developer Telegram: @chernyzhizn Disclaimer: This tool is provided for educational and authorized testing purposes...

CVE-2021-27651

Summary An attacker can bypass all stages of the password reset flow and reset any user's account on Pega infinity. This is done by 1 initiating the password reset flow and typing in the victim email, then 2 forcing the HTTP POST request to update the password through. An attacker could login usi...

gitlab-exploit

gitlab-exploit GitLab CVE-2023-7028 GitLab CVE-2023-7028 The vulnerability was caused by a bug in how GitLab handled email verification during password reset. An attacker could provide two email addresses during a password reset request, and the reset code would be sent to both addresses. This...

redash-reset

redash-reset This will use a default REDASHSECRETKEY key of c292a0a3aa32397cdb050e233733900f this allows you to reset the password of the user ID but you will need to know the email address assocaited with it. Info https://github.com/getredash/redash/security/advisories/GHSA-g8xr-f424-h2rv Setup...

CVE-2023-7028

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

cve-2023-42820

cve-2023-42820 JumpServer Affected Versions v2.24 - v3.6.4 Impact With knowledge of the email associated with the JumpServer admin user account default: admin/[email protected], it is possible to reset the admin password through this vulnerability, and by combining it with JumpServer's...

CVE-2019-18818

CVE-2019-18818 Usage : url Reference : https://vulners.com/cve/CVE-2019-18818 https://thatsn0tmysite.wordpress.com/2019/11/15/x05/...

CVE-2019-15107

CVE-2019-15107 Webmin RCE Error - Perl execution Failed Your password has expired, and a new one must be chosen.uid=0root gid=0root groups=0root Failed to change password : The current password is incorrectuid=0root gid=0root groups...

CVE-2024-13513.py

Usage Basic Usage bash python3 exploit.py -l targets.txt -e [email protected] Advanced Usage bash python3 exploit.py -l targets.txt -e [email protected] -t 100 -o /path/to/results Parameters Explanation Parameter Description Required Default -l, --list Path to file containing target URL...

CVE-2026-18963-keycloak

CVE-2026-18963 — Keycloak Reset-Credentials Bypass → Account Takeover Unauthenticated account takeover in Keycloak's reset-credentials flow. An attacker who knows only a username/email can reset any user's password — including admins — without ever receiving the verification email. ⚠️ Disclaimer —...

CVE-2019-19609-POC-Python

The script will try to reset the password to the one declared in the "updatedpass" variable, if it succeeds - it will give a JWT token from Strapi and use it to execute commands. Executing bind commands won't work unless sending a reverse shell payload, with bash or python or whatever. You can...