277 matches found
CVE-2026-11117-WPA2-4-Way-Handshake-Reinstallation-KRACK-Sim-
CVE-2026-11117 – WPA2 4ウェイハンドシェイク再インストール KRACK Sim プログラムコード Python kracksim.py - Simulates reinstallation of an already-used PTK import hashlib, os class AccessPoint: def initself: self.anonce = os.urandom32 self.ptk = None def sendmsg3self, snonce: Normally would install PTK, but here we resend...
CVE-2025-14364
CVE-2025-14364 Demo Importer Plus 인증된 구독자 →do-reinstall AJAX 액션을 통한 관리자 〔 1 〕 취약점 | ---|--- CVE| CVE-2025-14364 CVSS v3.1| 8.8 높음 — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CNA| Wordfence 플러그인| Demo Importer Plus 영향받는 버전| 모든 버전 ≤ 2.0.8 필요한 권한| 구독자 최하위 등록 역할 유형| 누락된 권한 검사 → 전체 사이트 재설정 → 권한 상승...
CVE-2026-73849 emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.
Emlog is an open source website building system. In 2.6.26 and earlier, install.php accepts action=reinstall without authentication and deliberately skips the already-installed check because the guard runs only when $act != 'reinstall'. A remote attacker can submit hostname, dbuser, dbpasswd,...
CVE-2026-73849 emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.
Emlog is an open source website building system. In 2.6.26 and earlier, install.php accepts action=reinstall without authentication and deliberately skips the already-installed check because the guard runs only when $act != 'reinstall'. A remote attacker can submit hostname, dbuser, dbpasswd,...
CVE-2026-73849 emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.
Emlog is an open source website building system. In 2.6.26 and earlier, install.php accepts action=reinstall without authentication and deliberately skips the already-installed check because the guard runs only when $act != 'reinstall'. A remote attacker can submit hostname, dbuser, dbpasswd,...
CVE-2026-14261
The Xerte Online Toolkits e-learning authoring suite contains an authentication bypass and remote code execution (RCE) vulnerability. The flaw exists because the /setup/ directory persists after installation without proper access controls. An unauthenticated attacker can access /setup/index.php t...
CVE-2026-14261
A vulnerability in the Xerte Online Tools allows for authentication bypass and remote code execution via reinstallation through the /setup/ folder, enabling attackers to reinstall the service to a remote database they control...
CVE-2026-14261 CVE-2026-14261
A vulnerability in the Xerte Online Tools allows for authentication bypass and remote code execution via reinstallation through the /setup/ folder, enabling attackers to reinstall the service to a remote database they control...
CVE-2026-14261: Undefined Security Weakness
A vulnerability in the Xerte Online Tools allows for authentication bypass and remote code execution via reinstallation through the /setup/ folder, enabling attackers to reinstall the service to a remote database they control...
CVE-2025-59895
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-of-service DoS vulnerability in the configuration restore functionality. The issue is due to insufficient validation of user-supplied data during this process. An attacker could send malicious reques...
CVE-2025-59895
CVE-2025-59895 affects Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. The vulnerability is a remote DoS in the configuration restore function caused by insufficient validation of user-supplied data, leading to an unresponsive service. In a successful scenario, the serv...
CVE-2020-36949
CVE-2020-36949 affects TapinRadio 2.13.7. A denial-of-service vulnerability exists in the application proxy settings: processing oversized input in username and address fields (reported with a 20,000-character buffer) can cause the program to become unresponsive and require reinstallation. The av...
EUVD-2026-2766
RDP Manager 4.9.9.3 contains a denial of service vulnerability in connection input fields that allows local attackers to crash the application. Attackers can add oversized entries in Verbindungsname and Server fields to permanently freeze and crash the software, potentially requiring full...
CVE-2019-16655
joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available...
EUVD-2017-4602
Malware in sbrugna...
EUVD-2017-4600
Malware in sbrugna...
EUVD-2017-4595
Malware in sbrugna...
EUVD-2020-9445
Malware in sbrugna...