Lucene search
+L

17581 matches found

NVD
NVD
added 2026/09/18 6:17 p.m.10 views

CVE-2026-81179

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.58, installations that enable password reset by email while configuring ALLOWEDHOSTS with a wildcard accept an attacker-controlled Host header when generating a password reset link. An unauthenticated attacker can request...

8.1CVSS0.00263EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/18 5:45 p.m.14 views

CVE-2026-81179

SysReptor is a pentest reporting platform vulnerable to Host header injection prior to version 2026.58 . When password reset by email is enabled and ALLOWED_HOSTS is configured with a wildcard, an unauthenticated attacker can request a reset email whose link points to an attacker-controlled syste...

8.1CVSS0.00263EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/18 5:45 p.m.37 views

CVE-2026-81179 SysReptor: Host header injection might allow account takeover

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.58, installations that enable password reset by email while configuring ALLOWEDHOSTS with a wildcard accept an attacker-controlled Host header when generating a password reset link. An unauthenticated attacker can request...

8.1CVSS0.00263EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/18 5:45 p.m.8 views

CVE-2026-81179 SysReptor: Host header injection might allow account takeover

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.58, installations that enable password reset by email while configuring ALLOWEDHOSTS with a wildcard accept an attacker-controlled Host header when generating a password reset link. An unauthenticated attacker can request...

8.1CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/18 5:22 p.m.9 views

Kerberos-CVE-2026-27912

Kerberos-CVE-2026-27912 CVE-2026-27912 - Windows Kerberos Elevation of Privilege Vulnerability ResetNightmare - Unauthorized password reset via Kerberos Change Password protocol flaw. 📋 Details Field| Value ---|--- CVE| CVE-2026-27912 Title| Windows Kerberos Elevation of Privilege Vulnerability...

8CVSS7.8AI score0.00409EPSS
SaveExploits2References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/18 3:38 p.m.14 views

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities (CVE-2026-50009, CVE-2026-44894)

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-50009 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, Netty QUIC exposes the stateless...

7.5CVSS0.00204EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
added 2026/09/18 3:06 p.m.9 views

CVE-2026-93453

CVE-2026-93453 — SOGo Password Reset Link Poisoning via Origin Header An exploit for a flaw where SOGo assembles the password-reset link it emails to users straight from the client-supplied Origin header. An anonymous attacker who knows a victim's login POSTs a recovery request with a controlled...

8.7CVSS0.00344EPSS
SaveExploits1References4
Kitploit
Kitploit
added 2026/09/18 12:49 p.m.15 views

ResetNightmare-impacket

ResetNightmare — CVE-2026-27912 Linux / impacket tooling for CVE-2026-27912 "ResetNightmare". Resets a target Active Directory account's password by requesting a kadmin/changepw TGT for an NTENTERPRISE principal whose name is the target's sAMAccountName, using an account UPNUser on which we can...

8CVSS5.9AI score0.00409EPSS
SaveExploits2References4
Kitploit
Kitploit
added 2026/09/18 12:25 p.m.6 views

CVE-2025-59382-QNAP-Password-Reset-Account-Takeover

CVE-2025-59382: Reinicio de contraseña de QNAP para toma de cuenta URL de reinicio de contraseña controlada por atacante no autenticado en /cgi-bin/resetpassword.cgi. Probado contra QuTScloud c5.2.4.3041 build 20250211 en un laboratorio. QNAP luego publicó esto como CVE-2025-59382 en el aviso...

5.1CVSS6AI score0.00369EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 11:13 a.m.8 views

CVE-2025-58434-59528-htb-ctf

CVE-2025-58434-59528-htb-ctf Silentium Exploit Chain This repository contains the complete exploitation chain for the Silentium machine on Hack The Box. The exploit leverages a two-stage vulnerability involving user enumeration and JavaScript injection to achieve Remote Code Execution RCE. 📝...

9.8CVSS6.9AI score0.49894EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/18 10:34 a.m.10 views

Android-Forensics-References

Android Forensics References Last update: September 22th 2025 USERDATA Partition "/log" folder /log/wifi/iwc/iwcdump.txt Cellebrite CTF 2023 Recap: Answers on Sharon’s Android https://cellebrite.com/en/cellebrite-ctf-2023-recap-sharons-android/ /log/netstats /log/batterystats Cellebrite CTF 2021 ...

6.1AI score
SaveExploits0References22
Kitploit
Kitploit
added 2026/09/18 6:45 a.m.10 views

CVE-2023-7028

CVE-2023-7028 | Захват учётной записи GitLab Отказ от ответственности Этот код является доказательством концепции proof of concept уязвимости; я не призываю никого использовать его на инстансах GitLab, которые им не принадлежат. Данный инструмент разработан исключительно в исследовательских и...

10CVSS8.2AI score0.94647EPSS
SaveExploits16References2
Kitploit
Kitploit
added 2026/09/18 6:40 a.m.7 views

CVE-2026-11118-HTTP-2-Rapid-Reset-DDoS

CVE-2026-11118 – HTTP/2 Rapid Reset DDoS Program Code Python/http2 client + server root@kitploit: http2serversim.py - Simple HTTP/2 server that processes reset streams import socket, ssl, h2.connection, h2.events def handle: sock = socket.socket sock.setsockoptsocket.SOLSOCKET, socket.SOREUSEADDR...

8.8CVSS8.1AI score0.00387EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 6:25 a.m.7 views

Alibab-Nacos-Unauthorized-Reset-PWD

Vuln Impact An issue has been discovered in Nacos affecting Nacos = 2.2.0. When a user uses the default JWT Key, it will cause an attacker to reset the password of any user and take over the user account. Vuln Product Nacos = 2.2.0 version Vulnerability reappearance Step 1:Get username can use ol...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 5:55 a.m.14 views

CVE-2023-7028

CVE-2023-7028 Gitlab CVE-2023-7028: Account Takeover via Password Reset without user interactions A critical vulnerability in GitLab CE/EE CVE-2023-7028 can be easily exploited by attackers to reset GitLab user account passwords. While also vulnerable, users who have two-factor authentication...

10CVSS8.5AI score0.94647EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/18 5:38 a.m.10 views

redash-reset

redash-reset This will use a default REDASHSECRETKEY key of c292a0a3aa32397cdb050e233733900f this allows you to reset the password of the user ID but you will need to know the email address assocaited with it. Info https://github.com/getredash/redash/security/advisories/GHSA-g8xr-f424-h2rv Setup...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 4:51 a.m.6 views

CVE-2026-21006-Zigbee-Light-Link-Factory-Reset-Exploit

CVE-2026-21006 – Zigbee Light Link Factory Reset Exploit Program Code Python Zigbee simulation root@kitploit: zigbeefactoryreset.py - Simulated Zigbee coordinator sending factory reset command import time class ZigbeeDevice: def initself: self.networkkey = b'secret' def receivecommandself, cmdid:...

4.7CVSS6.1AI score0.00125EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 3:32 a.m.22 views

CVE-2026-18963

CVE-2026-18963 Keycloak Reset-Credentials State Bypass Detector https://github.com/user-attachments/assets/005fab89-339a-4e4e-881c-da6a626f6c9e root@kitploit: python3 kc-resetforge.py -h usage: kc-resetforge.py -h --target TARGET --targets-file TARGETSFILE --port PORT --realm REALM --client-id...

9.1CVSS8.7AI score0.03177EPSS
SaveExploits13References2
Kitploit
Kitploit
added 2026/09/18 3:08 a.m.20 views

CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC

CVE-2023-27372 — SPIP Уязвимость удаленного выполнения кода без аутентификации в SPIP до версии 4.2.1. Параметр oubli в форме сброса пароля уязвим для внедрения PHP-объектов из-за некорректной десериализации. Сформированная сериализованная полезная нагрузка выполняется на стороне сервера от имени...

9.8CVSS8.6AI score0.99682EPSS
SaveExploits23
EUVD
EUVD
added 2026/09/18 12:31 a.m.12 views

EUVD-2026-82605

SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as the authority, allowing unauthenticated attackers to redirect recovery tokens to attacker-controlled domains. Attackers can submit password recovery requests with a malicious Origin header to have valid...

8.7CVSS0.00344EPSS
SaveExploits1References7
Rows per page
Query Builder