CVE-2024-10508

تصعيد الامتيازات دون مصادقة عبر استعادة كلمة المرور على RegistrationMagic = 6.0.2.6 إخلاء مسؤولية : يتم توفير هذه المعلومات لأغراض تعليمية فقط. تهدف هذه الوثيقة إلى رفع الوعي حول الثغرات الأمنية ولا ينبغي استخدامها في أي أنشطة غير مصرح بها أو خبيثة. إن القيام بأفعال تستغل هذه الثغرات دون إذن هو أ...

gitlab-exploit

gitlab-exploit GitLab CVE-2023-7028 GitLab CVE-2023-7028 La vulnerabilità è stata causata da un bug nel modo in cui GitLab gestiva la verifica dell'email durante la reimpostazione della password. Un attaccante poteva fornire due indirizzi email durante una richiesta di reimpostazione della passwo...

HikPasswordHelper

HikPasswordHelper Ein Tool, das eine Hintertür in Hikvision-Kamera-Firmwares aus der Zeit etwa 2014 bis 2016 ausnutzt ICSA-17-124-01, um dem Besitzer zu helfen, ein vergessenes Passwort zu ändern. Verwendung Lade HikvisionPasswordResetHelper.exe von der Releases-Registerkarte herunter und führe d...

CVE-2023-42820

CVE-2023-42820 CVE-2023-42820 Descrizione della vulnerabilità Vulnerabilità di reset della password di JumpServer USAGE V2 Update 1. Completamente ricostruito 2. Aggiunta la possibilità di utilizzare account ed email predefiniti quando non vengono ricevuti account ed email. 3. Migliorato il...

CVE-2017-8295-WordPress-4.7.4---Unauthorized-Password-Reset

CVE-2017-8295-WordPress-4.7.4---अनधिकृत-पासवर्ड-रीसेट भेद्यता की जानकारी वर्डप्रेस में एक पासवर्ड रीसेट सुविधा है जिसमें एक भेद्यता है जो कुछ मामलों में हमलावरों को पूर्व प्रमाणीकरण के बिना पासवर्ड रीसेट लिंक प्राप्त करने दे सकती है। ऐसा हमला हमलावर को पीड़ित के वर्डप्रेस खाते तक अनधिकृत पहुँच...

CVE-2019-12476

ADSelfService-Plus-PoC CVE-2019-12476 ADSelfService Plus संस्करण 4.3.3 Windows 10 पर प्रमाणीकरण बायपास के लिए PoC। Windows के सभी संस्करणों को प्रभावित करता है। PoC वीडियो पुनरुत्पादन के चरण 1. अपने एंटरप्राइज़ नेटवर्क से डिस्कनेक्ट करें 2. अपने स्वयं के हॉटस्पॉट से कनेक्ट करें 3. पासवर्ड रीसेट प...

self-service-password

LDAP Tool Box Self Service Password Presentazione Self Service Password è un'applicazione PHP che consente agli utenti di modificare la propria password in una directory LDAP. L'applicazione può essere utilizzata con directory LDAPv3 standard OpenLDAP, OpenDS, ApacheDS, Sun Oracle DSEE, Novell,...

CVE-2020-1472

CVE-2020-1472 Controllo e Codice Exploit per CVE-2020-1472 noto anche come Zerologon Verifica se un controller di dominio è vulnerabile all'attacco Zerologon; se vulnerabile, reimposta la password dell'account del controller di dominio a una stringa vuota. NOTA: È probabile che rompa cose negli...

zerologon

ZeroLogon exploitation script Exploit code based on https://www.secura.com/blog/zero-logon and https://github.com/SecuraBV/CVE-2020-1472. Original research and scanner by Secura, modifications by RiskSense Inc. To exploit, clear out any previous Impacket installs you have and install Impacket fro...

CVE-2026-81034

Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose skip-verify field is set to true unconditionally, directly beneath a comment stating that the setting should be false in production. No...

CVE-2026-81034 Netmaker through 1.6.0 Improper Certificate Validation in SMTP Client

Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose skip-verify field is set to true unconditionally, directly beneath a comment stating that the setting should be false in production. No...

HTB-Silentium-Writeup

HTB - Writeup di Silentium Informazioni sulla macchina Nome: Silentium OS: Linux Difficoltà: Facile CVE: CVE-2025-58434, CVE-2025-59528, CVE-2025-8110 Enumerazione Scansione Nmap root@kitploit: nmap -sC -sV -p- --min-rate 5000 -oN nmap.txt Porte aperte: 22 SSH, 80 HTTP Host...

Strapi-RCE

Strapi-RCE Script di exploit che mostra una combinazione di CVE-2019-18818 e CVE-2019-19609 per l'esecuzione remota di codice non autenticata in Strapi CMS. Exploit Questo script sfrutta una vulnerabilità nelle versioni di Strapi CMS 3.0.0-beta.17.4 e precedenti, consentendo l'esecuzione remota d...

CVE-2025-58434-59528-htb-ctf

CVE-2025-58434-59528-htb-ctf Silentium Exploit Chain Questa repository contiene la catena di sfruttamento completa per la macchina Silentium su Hack The Box. L'exploit sfrutta una vulnerabilità a due stadi che coinvolge l'enumerazione degli utenti e l'iniezione JavaScript per ottenere Remote Code...

cve-2023-42820

cve-2023-42820 JumpServer Versioni interessate v2.24 - v3.6.4 Impatto Se si conosce l'email associata all'account utente della console di amministrazione di JumpServer per impostazione predefinita: admin/[email protected] è possibile reimpostare la password dell'utente amministratore della...

CVE-2025-2304_POC

CVE-2025-2304POC CVE-2025-2304 POC - Camaleon CMS विशेषाधिकार वृद्धि यह POC Camaleon CMS के विशेषाधिकारों को प्रशासक स्तर तक बढ़ाने के लिए उपयोग किया जाता है। यह शोषण एक प्रमाणित उपयोगकर्ता के पासवर्ड रीसेट फ़ंक्शन में भूमिका इंजेक्ट करके काम करता है। पूर्वापेक्षाएँ और मान्यताएँ आपके पास लक्ष्य...

CVE-2026-80196

Kimai before 2.58.0 contains an authentication bypass vulnerability where password reset links remain valid after password changes because the LoginLink signature covers only the user id, not the password hash. Attackers who intercept or cache a password reset link can use it up to 2 additional...

CVE-2026-19632 TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the 'trpgettranslationsregular' AJAX action. This makes it possible for unauthenticated attackers to extract t...

EUVD-2026-66230

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the 'trpgettranslationsregular' AJAX action. This makes it possible for unauthenticated attackers to extract t...

CVE-2026-19632

CVE-2026-19632 affects the TranslatePress – Multilingual WordPress plugin (all versions ≤ 3.3.1). An unauthenticated attacker can retrieve a plaintext administrator password-reset URL via the trp_get_translations_regular AJAX action, which exposes dictionary rows from the secondary-language trans...