CVE-2025-65900

CVE-2025-65900: Kalmia CMS v0.2.0 - è vulnerabile a un controllo di accesso errato Panoramica della vulnerabilità ID CVE: CVE-2025-65900 Prodotto: DifuseHQ Kalmia CMS Versione interessata: 0.2.0 Tipo di vulnerabilità: Controllo di accesso errato Privilegi richiesti: Basso account utente di sola...

CVE-2019-9053-Exploit-Python-3

CVE-2019-9053 Exploit Python 3 Questo repository contiene un exploit per la vulnerabilità CVE-2019-9053 presente nel software CMS Made Simple CMSMS. L'exploit è stato modificato per funzionare con Python 3 ed è compatibile con CMSMS versione 2.2.9 e precedenti. Descrizione CVE-2019-9053 è una...

CVE-2019-9053-exploit

CVE-2019-9053 — Unauthhentifizierte SQL-Injection in CMS Made Simple Beschreibung CVE-2019-9053 ist eine time-based blind SQL-Injection-Schwachstelle, die CMS Made Simple in Versionen ≤ 2.2.9 betrifft. Sie erfordert keine Authentifizierung. Der anfällige Parameter ist m1idlist im Modul News...

CVE-2019-9053-Exploit-in-Python-3

CVE-2019-9053-Exploit-in-Python-3 Questo è un exploit utilizzato in TryHackMe's EasyCTF Tuttavia, il codice installato in Kali Linux o presente su exploitDB è basato sul vecchio codice Python 2. Questa è una riscrittura di quel codice, con alcune revisioni apportate durante il cracking dell'hash...

hello-ReGrade-security

hello-ReGrade-security Una demo pratica di scoperta di zero-day conReGrade. Punterai una normale suite di test su ReGrade, la registrerai contro un piccolo servizio, la riprodurrai contro una seconda copia dello stesso servizio , e userai Claude Code + gli strumenti MCP di ReGrade per far emerger...

woo

Woocommerce 3.3 से 5.5 - बिना प्रमाणीकरण के SQL Injection https://wpscan.com/vulnerability/1212fec8-1fde-41e5-af70-abdd7ffe5379 woocommerce SQLI का शोषण करें और उपयोगकर्ता तथा पासवर्ड हैश प्राप्त करें कमांड्स root@kitploit: usage: woo.py -h -u URL -f FILE -p PROXY -i WID optional arguments: -h,...

vxworks_hash

vxworkshash codice per invertire gli hash delle password vxworks 5.x Questo è davvero vecchio ormai! : Vedi il mio post sul blog per maggiori informazioni: http://cvk.posthaven.com/how-to-crack-vxworks-password-hashes...

CVE-2005-2428-IBM-Lotus-Domino-R8-Password-Hash-Extraction-Exploit

Dieses Repository hat keine README-Datei...

CVE-2021-36460

CVE-2021-36460 NVD CVE-2021-36460: https://nvd.nist.gov/vuln/detail/CVE-2021-36460 MITRE CVE-2021-36460: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-36460 CWE-836: Uso dell'hash della password al posto della password per l'autenticazione L'app VeryFitPro Android: com.veryfit2hr.second, iO...

CVE-2026-19715

The WP OAuth Server (Login with WordPress) WordPress plugin, in versions before 6.3.1 , fails to restrict access to its debug log file , which is written to a fixed and publicly reachable location. When debug logging is enabled, unauthenticated attackers can read OAuth tokens , authorization code...

CVE-2026-19715 WP OAuth Server < 6.3.1 - Unauthenticated OAuth Token and User Data Disclosure via Debug Log File

The WP OAuth Server Login with WordPress WordPress plugin before 6.3.1 does not restrict access to the debug log it writes, which is stored at a fixed and publicly reachable location, allowing unauthenticated users to read the OAuth tokens and authorisation codes it has issued as well as user...

CVE-2019-9053-port-py3

CVE-2019-9053 漏洞利用 - Python 3 这是 CVE-2019-9053 漏洞利用的 Python 3 移植版本，针对 CMS Made Simple CMSMS 2.2.10 之前的版本。该漏洞允许通过 News 模块接口进行 SQL 注入。 示例输出 已在 TryHackMe Simple CTF Challenge 上测试。 描述 该利用程序利用了 CMS Made Simple 的 News 模块中的 SQL 注入漏洞。它可以： 提取 CMS 的 salt 导出管理员用户名 导出管理员邮箱 导出管理员密码哈希 可选使用提供的字典破解密码 快速开始...

CVE-2026-45332-PoC

CVE-2026-45332 : Contrôle d'accès défaillant dans Automad CMS Preuve de concept pour CVE-2026-45332 , une vulnérabilité de contrôle d'accès défaillant dans Automad CMS qui permet à tout attaquant non authentifié de récupérer le hash bcrypt du mot de passe et le secret TOTP de chaque compte...

CVE-2020-2969

CVE-2020-2969 Il PoC per CVE-2020-2969 è documentato qui: https://packetstormsecurity.com/files/179027/Oracle-Database-Password-Hash-Unauthorized-Access.html...

CVE-2023-22074

CVE-2023-22074 CVE-2023-22074 vulnerabilità nel componente di sharding di Oracle Database 19c,21c,23c https://databasesecurityninja.wordpress.com/2023/10/25/cve-2023-22074-oracle-database-password-hash-exposure-in-sharding-component/...

Exploit_CVE-2021-24762

exploitcve-2021-24762 Dieses Repository zeigt einen Exploit für CVE-2021-24762. Es handelt sich um einen Blind-SQLi-Exploit, der in der Standardkonfiguration das Admin-Passwort ausliest. Während ich ein Labor auf Basis von WordPress mit dem PerfectSurvey-Plugin durchführte, blieb ich bei einer...

CVE-2026-77127

The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privileged backend user can supply arbitrary table, field and record parameters, and trigger an error response that discloses the current databa...

EUVD-2026-65348

The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privileged backend user can supply arbitrary table, field and record parameters, and trigger an error response that discloses the current databa...

CVE-2026-53525

A flaw was found in WeeChat, a free chat client. The relay authentication mechanism uses a non-constant-time comparison when verifying password hashes. This vulnerability allows a remote attacker to exploit subtle timing differences during the authentication process. By analyzing these timing...

Astra Linux – Vulnerability in sudo

In Sudo version 1.8.29, the fact that a user has been blocked for example, by using the “!” character in the shadow file instead of a password hash was not taken into consideration. This allows an attacker who has access to a Runas ALL sudoer account to impersonate any blocked user. NOTE: The...