CVE-2019-12476

ADSelfService-Plus-PoC CVE-2019-12476 ADSelfService Plus версии 4.3.3 PoC для обхода аутентификации на Windows 10. Влияет на все версии Windows PoC Видео Шаги для воспроизведения 1. Отключитесь от корпоративной сети 2. Подключитесь к своей собственной точке доступа 3. Нажмите на сброс пароля;...

CVE-2023-7028

Эксплойт CVE-2023-7028 - Уязвимость отравления сброса пароля GitLab Обзор Этот репозиторий содержит эксплойт для CVE-2023-7028 , критической уязвимости в GitLab , которая позволяет атакующему злоупотребить функцией сброса пароля и получить контроль над учётными записями, включая учётные записи...

CVE-2026-37072

CVE-2026-37072 Проект Veno File Manager Project версии 4.4.9 уязвим к некорректному контролю доступа в admin-head-updates.php Неаутентифицированный злоумышленник может использовать уязвимость локального включения файлов Local File Inclusion в параметре GET 'lang'. Отправив специально сформированн...

CVE-2026-5076

☠️ CVE-2026-5076 ARMember Premium = 7.3.1 Ненадёжный механизм сброса пароля → Полный захват учётной записи администратора Ключи сброса пароля в открытом виде хранятся в базе данных + SQL-инъекция = Полный захват администратора 📋 Информация об уязвимости Связанные CVE та же рекомендация CVE| Тип|...

CVE-2026-57229

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SMTP MIME parser in rust/src/mime/smtp.rs does not fully reset state when processing Content-Type: message/rfc822 encapsulation. An outer MIME part's...

CVE-2026-57229 Suricata smtp/mime: incomplete state reset allows detection bypass

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SMTP MIME parser in rust/src/mime/smtp.rs does not fully reset state when processing Content-Type: message/rfc822 encapsulation. An outer MIME part's...

CVE-2026-57229

Suricata's SMTP MIME parser (rust/src/mime/smtp.rs) in versions 8.0.0 through 8.0.6 fails to fully reset state when processing Content-Type: message/rfc822 encapsulation. An outer MIME part's filename or Content-Transfer-Encoding state leaks into the inner message, allowing a crafted email to byp...

CVE-2026-93868

Cotonti through 1.0.0 derives password recovery validation tokens from md5microtime in users.passrecover.php, creating a predictable token space of approximately one million values per second. Unauthenticated attackers can read the server Date header, precompute candidate tokens within a narrow...

EUVD-2026-83365

Cotonti through 1.0.0 derives password recovery validation tokens from md5microtime in users.passrecover.php, creating a predictable token space of approximately one million values per second. Unauthenticated attackers can read the server Date header, precompute candidate tokens within a narrow...

CVE-2026-93868

Cotonti through 1.0.0 uses md5(microtime()) to generate password recovery validation tokens in users.passrecover.php, yielding a predictable token space of roughly one million values per second. An unauthenticated attacker can read the server Date header, precompute candidate tokens within a narr...

CVE-2026-93868 Cotonti through 1.0.0 Predictable Password Recovery Token via Weak PRNG

Cotonti through 1.0.0 derives password recovery validation tokens from md5microtime in users.passrecover.php, creating a predictable token space of approximately one million values per second. Unauthenticated attackers can read the server Date header, precompute candidate tokens within a narrow...

AfterLife

AFTERLIFE 폐기 지속성 탐지 랩 비밀번호 재설정은 성공했지만 공격자가 떠나지 않을 때. 하나의 취약점 클래스를 위한 로컬 레드/블루 랩: 그것을 죽였어야 했던 이벤트보다 더 오래 살아남는 자격 증명. 익스플로잇, 근본 원인, 수정, 세 가지 규칙 탐지 팩, 규칙이 구조적으로 볼 수 없는 것을 위한 상태 감사, 포렌식 콘솔 — 그리고 작동하지 않는 탐지 규칙까지 함께 제공되며, 실패하는 모습을 보여주기 위해 저장소에 보관됩니다. 빠른 시작 · 발견 사항 · 순진한 탐지가 실패하는 이유 · 규칙 팩 · 콘솔 · 수정 ·...

CVE-2026-81179

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.58, installations that enable password reset by email while configuring ALLOWEDHOSTS with a wildcard accept an attacker-controlled Host header when generating a password reset link. An unauthenticated attacker can request...

CVE-2026-81179

SysReptor is a pentest reporting platform vulnerable to Host header injection prior to version 2026.58 . When password reset by email is enabled and ALLOWED_HOSTS is configured with a wildcard, an unauthenticated attacker can request a reset email whose link points to an attacker-controlled syste...

CVE-2026-81179 SysReptor: Host header injection might allow account takeover

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.58, installations that enable password reset by email while configuring ALLOWEDHOSTS with a wildcard accept an attacker-controlled Host header when generating a password reset link. An unauthenticated attacker can request...

CVE-2026-81179 SysReptor: Host header injection might allow account takeover

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.58, installations that enable password reset by email while configuring ALLOWEDHOSTS with a wildcard accept an attacker-controlled Host header when generating a password reset link. An unauthenticated attacker can request...

Kerberos-CVE-2026-27912

Kerberos-CVE-2026-27912 CVE-2026-27912 — уязвимость повышения привилегий Windows Kerberos ResetNightmare — несанкционированный сброс пароля через ошибку протокола смены пароля Kerberos. 📋 Сведения Поле| Значение ---|--- CVE| CVE-2026-27912 Название| Уязвимость повышения привилегий Windows Kerbero...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities (CVE-2026-50009, CVE-2026-44894)

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-50009 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, Netty QUIC exposes the stateless...

CVE-2026-93453

CVE-2026-93453 — Origin 헤더를 통한 SOGo 비밀번호 재설정 링크 포이즈닝 SOGo가 사용자에게 이메일로 발송하는 비밀번호 재설정 링크를 클라이언트가 제공한 Origin 헤더에서 그대로 조합하는 취약점에 대한 익스플로잇입니다. 피해자의 로그인 정보를 알고 있는 익명의 공격자가 조작된 Origin과 함께 복구 요청을 POST하면, 이메일로 발송된 "Password reset" 메시지 내부의 링크가 공격자의 호스트를 가리키게 되지만, 내장된 JWT는 여전히 완벽하게 유효한 복구 토큰입니다. 피해자가 한 번 클릭...

ResetNightmare-impacket

ResetNightmare — CVE-2026-27912 Linux / impacket tooling for CVE-2026-27912 "ResetNightmare". Resets a target Active Directory account's password by requesting a kadmin/changepw TGT for an NTENTERPRISE principal whose name is the target's sAMAccountName, using an account UPNUser on which we can...