19275 matches found
CVE-2026-86814
The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account, allowing unauthenticated attackers to log in as any user, including administrators, whose email address they can asse...
CVE-2021-24647
CVE-2021-24647 CVE-2021-24647 Pie Register 3.7.1.6 - Inicio de sesión arbitrario no autenticado Información root@kitploit: usage: exploit.py -h -w URL -p PATH options: -h, --help show this help message and exit -w URL, --url URL URL of the WordPress site -p PATH, --path PATH Path of the Login Pag...
CVE-2023-26984
CVE-2023-26984 Explicación de la vulnerabilidad: Un problema en la función de restablecimiento de contraseña de Peppermint v0.2.4 permite a los atacantes acceder a los correos electrónicos y contraseñas de la página de Tickets mediante una solicitud manipulada. Vectores de ataque: El atacante ten...
CVE-2024-27198
CVE-2024-27198 Bypass de autenticación para TeamCity Server versión 2023.11.3 y anteriores. NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-27198 Publicación del blog de Rapid7:...
tko-subs
tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...
cve-2026-9558-poc
CVE-2026-9558 — Inyección de Plantillas de Temas de Mautic del Lado del Servidor SSTI para Tomar Control Completo de Administrador Tabla de Contenidos Descripción general Versiones Afectadas Causa Raíz Análisis Estructura del Repositorio Requisitos Uso Salida Esperada Referencias Descargo de...
CVE-2026-92421
The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin (versions 1.1.0 through
CVE-2026-92421 Hydra Booking 1.1.0 - < 1.2.3 - Hydra Host+ Host Profile Takeover via IDOR
The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.3 does not verify that the host record being modified belongs to the user making the request, allowing authenticated users holding a Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin...
CVE-2026-86814
The UsersWP WordPress plugin before 1.5.10 fails to verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account. This allows unauthenticated attackers to take over any user account—including administrators—by asserting a victim's ...
EUVD-2026-83506
The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account, allowing unauthenticated attackers to log in as any user, including administrators, whose email address they can asse...
CVE-2026-86591
The Botiga Pro WordPress plugin before 1.6.5 is missing authorization checks on its Templates Builder REST route , allowing unauthenticated users to update arbitrary WordPress options with arbitrary values. This can lead to privilege escalation and a full site takeover . The same route also permi...
EUVD-2026-83505
The Botiga Pro WordPress plugin before 1.6.5 does not perform any authorisation checks on one of its REST routes, allowing unauthenticated users to update arbitrary WordPress options with arbitrary values, which could lead to privilege escalation and a full site takeover. The same route also allo...
CVE-2026-86814 UsersWP - Social Login < 1.5.10 - Unauthenticated Account Takeover via Unverified Provider Email
The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account, allowing unauthenticated attackers to log in as any user, including administrators, whose email address they can asse...
CVE-2019-16097-batch
CVE-2019-16097-batch Disclaimer For security research purposes only. Do not use for illegal testing. Bear all consequences yourself!!! CVE-2019-16097-batch Batch exploit script Add target URLs in bulk in the url.txt file http://1.1.1.1 http://2.2.2.2 Run this script with Python. The verification...
CVE-2026-41452-PoC
CVE-2026-41452 — Krayin CRM Installer Auth Bypass → Admin Takeover CVSS 9.8 Critical · CWE-287 / CWE-306 · Jiva writeup · VulnCheck Summary Krayin CRM's installer exposes POST /install/api/admin-config-setup plus run-migration, run-seeder without CSRF protection withoutMiddleware'web' group. The...
CVE-2022-1162
CVE-2022-1162 Una herramienta de toma de control de GitLab Una herramienta simple para enumerar usuarios en GitLab e iniciar sesión usando CVE-2022-1162 Google Dork intitle:"Sign in · GitLab" Comando python code.py https://url.com ¡Las Pull Requests son bienvenidas!...
CVE-2020-35262
CVE-2020-35262: Stored XSS in Digisol DG-HR3400 Router Vulnerability Description It has been identified that the vulnerable endpoint doesn't have server side input validation and lacks client side filtering for any malicious script injection. An attacker can use this vulnerability to inject...
CVE-2024-50483
CVE-2024-50483 Meetup = 0.1 - Authentication Bypass via Account Takeover Description: The Meetup plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 0.1. This is due to the plugin not properly verifying a user's identity prior to authenticating them v...
CVE-2025-26199
🛡️ CVE-2025-26199 — Transmisión Insegura de Contraseñas en Texto Claro en CloudClassroom-PHP-Project v1.0 📄 Descripción CloudClassroom-PHP-Project v1.0 es vulnerable a la transmisión insegura de credenciales de usuario. Durante el proceso de autenticación, las contraseñas se envían a través de HTT...
GitLab - Account Takeover via Password Reset
An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to a...