EUVD-2026-83505

The Botiga Pro WordPress plugin before 1.6.5 does not perform any authorisation checks on one of its REST routes, allowing unauthenticated users to update arbitrary WordPress options with arbitrary values, which could lead to privilege escalation and a full site takeover. The same route also allo...

CVE-2026-86814 UsersWP - Social Login < 1.5.10 - Unauthenticated Account Takeover via Unverified Provider Email

The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account, allowing unauthenticated attackers to log in as any user, including administrators, whose email address they can asse...

CVE-2019-16097-batch

CVE-2019-16097-batch 免责声明 只做安全研究使用，不得做非法测试，后果自行承担！！！ CVE-2019-16097-batch 批量漏洞利用脚本 在 url.txt文件 批量添加目标地址 http://1.1.1.1 http://2.2.2.2 使用python 运行 此脚本 在 result.txt 可以看到最终的验证结果 漏洞背景...

CVE-2026-41452-PoC

CVE-2026-41452 — Omisión de autenticación en el instalador de Krayin CRM → Toma de control del administrador CVSS 9.8 Crítico · CWE-287 / CWE-306 · Informe de Jiva · Aviso de VulnCheck Resumen El instalador de Krayin CRM expone POST /install/api/admin-config-setup además de run-migration,...

CVE-2022-1162

CVE-2022-1162 一个 GitLab 接管工具 一个简单的工具，用于枚举 GitLab 用户并使用 CVE-2022-1162 登录 Google Dork intitle:"Sign in · GitLab" 命令 python code.py https://url.com 欢迎提交 Pull Request！...

CVE-2020-35262

CVE-2020-35262: XSS Almacenado en el Router Digisol DG-HR3400 Descripción de la Vulnerabilidad Se ha identificado que el endpoint vulnerable no tiene validación de entrada en el lado del servidor y carece de filtrado en el lado del cliente para cualquier inyección de script malicioso. Un atacante...

CVE-2024-50483

CVE-2024-50483 Meetup = 0.1 - Authentication Bypass via Account Takeover Description: The Meetup plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 0.1. This is due to the plugin not properly verifying a user's identity prior to authenticating them v...

CVE-2025-26199

🛡️ CVE-2025-26199 — Transmisión Insegura de Contraseñas en Texto Claro en CloudClassroom-PHP-Project v1.0 📄 Descripción CloudClassroom-PHP-Project v1.0 es vulnerable a la transmisión insegura de credenciales de usuario. Durante el proceso de autenticación, las contraseñas se envían a través de HTT...

SysAid On-Prem <= 23.3.40 - XML External Entity

SysAid On-Prem versions = 23.3.40 are vulnerable to an unauthenticated XML External Entity XXE vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives. id: CVE-2025-2776 info: name: SysAid On-Prem = 23.3.40 - XML External Enti...

GitLab - Account Takeover via Password Reset

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to a...

Cisco SSM On-Prem <= 8-202206 - Password Reset Account Takeover

A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process...

N-able N-central < 2026.3.1.10 - Authentication Bypass

N-able N-central versions through 2026.3.1 contain an authentication bypass that lets a remote unauthenticated attacker take over an administrator account and gain full control of the N-central server. CVE-2026-18577 is a bypass of the incomplete fix for CVE-2026-18556, so the 2026.3.1 Hotfix 1...

CVE-2023-4220

RCE para Chamilo LMS CVE-2023-4220 utilizando una Web Shell Este proyecto automatiza la explotación de la vulnerabilidad de ejecución remota de código CVE-2023-4220 encontrada en Chamilo LMS. Utilizando una web shell, la herramienta facilita la explotación automatizada de la vulnerabilidad para...

CVE-2025-25968

CVE-2025-25968: Vulnerabilidad de Control de Acceso Inadecuado en DDSN Interactive cm3 Acora CMS versión 10.1.1 DDSN Interactive cm3 Acora CMS versión 10.1.1 contiene una vulnerabilidad de control de acceso inadecuado. Un usuario con privilegios de editor puede acceder a información sensible, com...

CVE-2023-7028

CVE-2023-7028 Exploit - Vulnerabilidad de Envenenamiento de Restablecimiento de Contraseña de GitLab Descripción general Este repositorio contiene un exploit para CVE-2023-7028 , una vulnerabilidad crítica en GitLab que permite a un atacante abusar de la funcionalidad de restablecimiento de...

weaponised-XSS-payloads

Payloads de XSS armados Payloads XSS diseñados para convertir alert1 en un P1. La entrada del blog Este repositorio se publicó junto con un artículo de blog titulado "How to Upgrade Your XSS Bugs from Medium to Critical" https://medium.com/@hakluke/upgrade-xss-from-medium-to-critical-cb96597b6cc4...

CVE-2026-79294

CVE-2026-79294 CVE-2026-79294 — Stored XSS in Moonshot AI Kimi's HTML artifact Preview, delivered through the public Share view, leading to session token exfiltration and demonstrated account takeover. Responsible disclosure advisory. Vulnerability Details Vulnerability Type: Stored/Stored-like...

CVE-2026-5076

☠️ CVE-2026-5076 ARMember Premium = 7.3.1 Mecanismo inseguro de restablecimiento de contraseña → Toma de control total de la cuenta de administrador Claves de restablecimiento de contraseña en texto plano almacenadas en la base de datos + Inyección SQL = Toma de control total del administrador 📋...

CVE-2026-8206

CVE-2026-8206 CVE-2026-8206 Kirki插件未经身份验证的帐户接管漏洞利用...

CVE-2026-81179

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.58, installations that enable password reset by email while configuring ALLOWEDHOSTS with a wildcard accept an attacker-controlled Host header when generating a password reset link. An unauthenticated attacker can request...