CVE-2012-2122-Home-Lab

ENGLISCH UNTEN CVE-2012-2122 MySQL Authentication Bypass Heimlabor Dieses Labor ist eine Demonstration der Schwachstelle CVE-2012-2122 - MySQL Authentication Bypass Sie entsteht durch einen Fehler beim Vergleich der Passwortwerte in MySQL Version 5.5.23 oder niedriger Wenn ein Angreifer wiederhol...

EUVD-2026-94402

Gophish through 0.12.1 contains a rate limit bypass vulnerability that allows unauthenticated attackers to evade /login throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can send a different forwarded address per request so the limiter keyed on rewritten RemoteAddr never...

CVE-2026-107271 Gophish through 0.12.1 Login Rate Limit Bypass via X-Forwarded-For Spoofing

Gophish through 0.12.1 contains a rate limit bypass vulnerability that allows unauthenticated attackers to evade /login throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can send a different forwarded address per request so the limiter keyed on rewritten RemoteAddr never...

CVE-2026-107271 Gophish through 0.12.1 Login Rate Limit Bypass via X-Forwarded-For Spoofing

Gophish through 0.12.1 contains a rate limit bypass vulnerability that allows unauthenticated attackers to evade /login throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can send a different forwarded address per request so the limiter keyed on rewritten RemoteAddr never...

CVE-2026-107276 MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests

MISP contains a race condition in the email-based one-time password OTP login flow. When two HTTP requests carrying the same valid OTP are submitted concurrently, both can successfully authenticate and establish a session. The root cause is that the OTP value is read from the shared store,...

CVE-2025-63314

CVE-2025-63314 - Gestione non corretta dei token di reimpostazione password in Acora CMS Scoperto da Joby Y Daniel di Crowe India 📌 Panoramica DDSN Interactive cm3 Acora CMS versione 10.7.1 contiene una vulnerabilità di sicurezza nella funzionalità di reimpostazione della password. L'applicazione...

FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

The U.S. Federal Bureau of Investigation FBI and Secret Service USSS on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer SSL virtual private network VPN gateways. "The campaign...

Improper Access Control

Payload is vulnerable to improper access control. The vulnerability is due to insufficient enforcement of the access.update restriction, which allows an attacker with appropriate access to bypass the restriction and modify a user's password...

CVE-2020-1472

CVE-2020-1472 POC Richiede l'ultima versione di impacket da GitHub con le strutture netlogon aggiunte. Nota che, per impostazione predefinita, questo script modifica la password dell'account del domain controller. Sì, questo ti permette di fare DCSync, ma interrompe anche la comunicazione con gli...

CVE-2022-46484

CVE-2022-46484 La divulgazione di informazioni nei sondaggi protetti da password in Data Illusion Survey Software Solutions NGSurvey v2.4.28 e versioni precedenti consente agli aggressori di visualizzare la password per accedere e inviare sondaggi in modo arbitrario...

GoFileX

GoFileX TUI in stile client IRC di fine anni '90 per provare wordlist contro una condivisione GoFile protetta da password. Comunica esclusivamente con la REST API documentata e tratta i rate limit come una regola ferrea: richieste sequenziali, un intervallo predefinito conservativo, cooldown...

CVE-2026-104667

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

CVE-2026-104953

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2023-51119

CVE-2023-51119 Unzureichende Zugriffskontrolle auf dem D-Link DIR-605L Router Erklärung der Ausnutzung: Aufgrund einer fehlerhaften Zugriffskontrolle kann eine Übernahme des Admin-Kontos ohne jegliche Authentifizierung durchgeführt werden, indem unter bestimmten Umständen eine Anfrage gesendet wi...

EUVD-2026-94184

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2026-104953 MPG < 4.2.3 - Editor+ SQLi via Project Import

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2026-104953

The MPG WordPress plugin (versions before 4.2.3 ) is vulnerable to SQL injection due to improper validation of imported project data before it is used in database queries. This flaw allows users with Editor privileges or higher to execute malicious queries and access sensitive information, such a...

CVE-2026-104953 MPG < 4.2.3 - Editor+ SQLi via Project Import

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

EUVD-2026-94181

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

CVE-2026-104667

The Animated Number Counters WordPress plugin (versions before 3.1 ) is vulnerable to a second-order SQL injection (CWE-89). The root cause is the failure to sanitize or escape values stored by a user with Editor-level privileges before they are concatenated into a SQL query. This query is execut...