Concrete CMS: Password Reset link hijacking via Host Header Poisoning

Summary Concrete5 uses the Host header when sending out password reset links. This allows an attacker to insert a malicious host header, leading to password reset link / token leakage. Impact The victim will receive the malicious link in their email, and, when clicked, will leak the user's passwo...

CVE-2017-3563

creationtimestamp| type| source ---|---|--- 2017-04-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41908...

CVE-2017-2459

creationtimestamp| type| source ---|---|--- 2017-04-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41810...

CVE-2017-2483

creationtimestamp| type| source ---|---|--- 2017-04-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41797...

CVE-2017-6465

creationtimestamp| type| source ---|---|--- 2017-03-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41511 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/ftpshell51pwdreply.rb 2025-10-23 21:12:58+00:00| see...

CVE-2016-7225

creationtimestamp| type| source ---|---|--- 2016-11-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40764 2026-07-29 12:01:30+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:55+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPB...

CVE-2016-0079

creationtimestamp| type| source ---|---|--- 2016-10-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40608 2026-07-29 12:01:34+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:56+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPB...

Slack: [Screenhero] Subdomain takeover

Hi, I found out some neglected DNS records that can be exploited to takedown the subdomain of Slack's acquisition feedback.screenhero.com The security issue is that you have CNAME record that points feedback.screenhero.com to a screenhero.uservoice.com, but the problem is that the service is...

CVE-2015-6086

creationtimestamp| type| source ---|---|--- 2016-04-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39698...

CVE-2016-1720

creationtimestamp| type| source ---|---|--- 2016-01-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39367...

ABB AC 800M 弱口令

参考链接: https://library.e.abb.com/public/f355a67551218ae7c1257dc0003298c5/3BDS021515-600-enAC800M6.0PROFINETIOConfiguration.pdf...

Contemporary Control Systems BASRT-B 弱口令

参考链接: http://www.ccontrols.com/pdf/TD0712000I2.pdf...

Emerson ROCLINK™ 800 弱口令

参考链接: http://www.documentation.emersonprocess.com/groups/public/documents/instructionmanuals/d301159x012.pdf...

BinTec W2002T-n 弱口令

参考链接: http://www.bintec-elmeg.com/download.php?src=portal/downloadcenter/dateien/w2002tn/documentation/Notes-default-password-standard-passwort.pdf&systemid=138324...

BinTec X1200 II 弱口令

参考链接: http://www.router-defaults.com/Router/BinTec--x1200-ip-password-username...

BinTec R230aw 弱口令

参考链接: http://www.tomshw.it/forum/banda-larga/154194-router-bintec.html...

ENTES EMG-10, EMG-02 , EMG-12 弱口令

参考链接: http://www.entes.com.tr/dosyalar/EMGSeriesEN-ver22.pdf...

eWON all Device 弱口令

参考链接: http://ewon.biz/sites/default/files/aug-004-0-en-ewongettingstarted.pdf...

Emerson Control Link Refrigeration System Controller 弱口令

参考链接: http://foodservice.structuralconcepts.com/media/comsccmanager/temp-controller-info/emerson-control-link-cpc-controller.pdf...

B&B ELECTRONICS UR5i v2 弱口令

参考链接: http://www.cd.lucom.de/vpn-industrie-router/dokumentation/handbuch/ur5iv2-guide.pdf...