CVE-2026-102586 Moodle: xss via password reset link due to insufficient username escaping

A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cross-site scripting XSS attack. By convincing an unauthenticated user to access a specially crafted password reset link, an attacker could execute arbitrary...

EUVD-2026-89725

A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cross-site scripting XSS attack. By convincing an unauthenticated user to access a specially crafted password reset link, an attacker could execute arbitrary...

CVE-2026-102586

A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cross-site scripting XSS attack. By convincing an unauthenticated user to access a specially crafted password reset link, an attacker could execute arbitrary...

CVE-2021-22911

针对 CVE-2021-22911 的更新版利用程序 Rocket.Chat 3.12.1 - NoSQL注入到远程代码执行 未认证 原始功劳归功于：https://www.exploit-db.com/exploits/50108 设置 创建Python虚拟环境并安装依赖 $ python -m venv venv $ source venv/bin/activate $ pip install requests oathtool 使用方法 我新增了一个 -p 参数，用于接收低权限用户密码，同时也用于重置管理员密码 $ python 50108.py -u...

cve-2023-44487

CVE-2023-44487 HTTP/2 Rapid Reset このリポジトリには、影響を分析するために完全にテストされていない例がいくつかありますが、私はこの攻撃のコンセプトを実行したいと思いました。多くのストリームを開始し、すぐにRSTSTREAMフレームを送信してMAXCONCURRENTSTREAMSに達するのを避ける。 H2SpaceX 私は、シングルパケット攻撃を悪用するために作成した低レベルHTTP/2ライブラリH2SpaceXを使用しています。 サンプル 2つのサンプルがあります: Example 1 10000個のGETリクエストを送信し、各リクエストの直後にRES...

CVE-2019-12889

CVE-2019-12889 概要 SailPoint Desktop Password Reset 7.2 には、認証されていない権限昇格の脆弱性が存在します。Windows のログオン画面へのローカルアクセスのみを持つユーザーは、自分の権限を NT AUTHORITY\System に昇格させることができます。攻撃者がこの脆弱性を悪用するには、マシンへのローカルアクセスが必要です。攻撃者は、コンピューターをローカルネットワーク / WAN から切断し、インターネットに接続されたアクセスポイント /...

CVE-2026-100260: Initialization of a Resource with an Insecure Default

In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...

PT-2026-103548

Name of the Vulnerable Software and Affected Versions Kiteworks Core versions prior to 9.5.1 Description Kiteworks Core fails to correctly validate a parameter within the password reset workflow. This allows an unauthenticated attacker who knows the email address of a user with a locally stored...

CVE-2026-100255: Improper Validation of Unsafe Equivalence in Input

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset...

PT-2026-103302

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset...

AlmaLinux 9.2 [TuxCare] Security Update: grafana (ALMALINUX9.2:CLSA-2025:1758135826)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1758135826 advisory. - Grafana is an open-source platform for monitoring and observability. When using the forget password on the login page, a POST request is ma...

CVE-2026-97948

A flaw was found in the Linux kernel's PowerPC Enhanced Error Handling EEH subsystem. A recursive locking issue occurs during device reset handling when an error recovery process attempts to acquire a lock it already holds. When an error is detected on an affected device, this condition causes th...

CVE-2026-12345

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...

CVE-2026-12345 Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...

PSF-2026-42

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...

CVE-2020-26061

CVE-2020-26061 ClickStudios Passwordstate パスワードリセットポータルの認証バイパス 情報 ベンダー: ClickStudios 製品: Passwordstate 影響を受けるバージョン: 8.5 build 8501 より前 研究者: Jason Juntunen 別名 @missing0x00 https://github.com/missing0x00 説明 ClickStudios Passwordstate Password Reset Portal のバージョン 8.5 build 8501...

CVE-2018-5354

CVE-2018-5354 ANIXIS密码重置客户端权限提升/远程代码执行 信息 供应商: ANIXIS 产品: ANIXIS密码重置客户端 受影响版本: 3.22之前版本 研究人员: Jason Juntunen 又名 @missing0x00 https://github.com/missing0x00 CVSS: 8.8 描述 ANIXIS密码重置客户端3.22之前版本中的自定义GINA/CP模块允许远程攻击者通过欺骗执行代码和提升权限。...

CVE-2026-12416-CVE-2026-12417

CVE-2026-12416-CVE-2026-12417 通过 'resetuserid' 参数弱密码重置验证实现的未认证账户接管 | 通过 'resetactivationcode' 弱密码重置验证导致的未认证权限提升，进而实现账户接管 CVE-2026-12417 与 CVE-2026-12416 — 批量扫描器 作者：Khaled Alenazi Nxploited 漏洞 CVE-2026-12417 — SignUp & SignIn ≤ 1.0.0 通过弱密码重置验证实现的未认证权限提升 字段| 值 ---|--- CVSS| 9.8 严重 向量|...

CVE-2026-27886-PoC-Account-Takeover

CVE-2026-27886 自动化利用 - 使用指南 脚本功能概述 通过 4 组 HTTP 请求自动完成完整的账户接管链： 1. 漏洞验证 - 确认目标存在漏洞 2. 邮箱枚举 - 通过布尔判定方式提取管理员邮箱（约 500 次请求） 3. 密码重置触发 - 启动 Strapi 的密码恢复流程 4. 令牌窃取 - 截获 40 字符的重置令牌（约 320 次请求） 5. 账户接管 - 使用窃取的令牌获取超级管理员 JWT 基本用法 仅验证模式（安全） 检查目标是否存在漏洞而不进行利用： ./cve-2026-27886-exploit.py...

POC-CVE-2026-18963

CVE-2026-18963 — Keycloak 忘记密码流程认证绕过 PoC 针对 CVE-2026-18963 的概念验证，该漏洞存在于 Keycloak 的“忘记密码”/凭据选择流程中，攻击者可借此到达 UPDATEPASSWORD 步骤——并重置目标账户的密码——而无需正确完成所需的身份验证（例如，无需有效的 OTP/第二因素）。 该脚本完全通过 HTTP 驱动整个流程（无需浏览器/Selenium），具体步骤如下： 1. 加载领域的登录页面并定位“忘记密码”链接。 2. 打开重置凭据页面并触发 tryAnotherWay。 3. 在生成的凭据选择器中提交用户名。 4. 提取并...