CVE-2025-25198

CVE-2024-25198 mailcow: dockerized ist eine Open-Source-Groupware-/E-Mail-Suite, die auf Docker basiert. Vor Version 2025-01a ermöglicht eine Schwachstelle in der Passwort-Reset-Funktion von mailcow einem Angreifer, den Host HTTP-Header zu manipulieren, um einen Passwort-Reset-Link zu generieren,...

Mass-CVE-2026-23550-Exploit

🔥 CVE-2026-23550 Scanner Modulare DS Scanner Python multi-thread per CVE-2026-23550 CVSS 10.0 vulnerabilità del plugin WordPress Modular DS ≤2.5.1 che colpisce oltre 40.000 siti. Rileva il takeover admin non autenticato tramite bypass di getLogin con verifica completa dell'accesso a wp-admin...

CVE-2026-30862

CVE-2026-30862 PoC - Escalation of Privileges in Appsmith Proof-of-Concept per l'Escalation of Privileges in Appsmith tramite Stored XSS Divulgazione: Segnalato originariamente da me tramite GHSA-5hw4-whxv-6794 ⚠️ Solo per uso autorizzato in test di penetrazione/ricerca. Informazioni sulla...

CVE-2026-77035

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-77035

Joomla Event Manager (joomlaeventmanager.net) versions prior to 5.0.1 are affected by a cross-user event and venue takeover vulnerability. A registered user with edit-own rights (via the eventowner=1 setting or core.edit.own permission) can forge form fields by POSTing another user's record ID to...

EUVD-2026-66863

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2021-32099

CVE-2021-32099 pandora fms 742 sqli pre autenticazione POC root@kitploit: http://localhost/pandoraconsole/include/chartgenerator.php?sessionid=a' UNION SELECT 'a',1,'idusuario|s:5:"admin";' as data FROM tsessionsphp WHERE '1'='1 URL Encoded root@kitploit:...

CVE-2021-35587

CVE-2021-35587 Descrizione - POC per CVE-2021-35587: vulnerabilità facilmente sfruttabile che consente a un attaccante non autenticato con accesso di rete tramite HTTP di compromettere Oracle Access Manager. - creato da antx il 14-03-2022. Dettagli - Vulnerabilità nel prodotto Oracle Access...

CVE-2026-7089-XSS

home-service-system-unauth-stored-xss-admin-takeover Schwachstellendetails...

CVE-2026-23550-PoC

CVE-2026-23550-PoC CVE-2026-23550 - Modular DS WordPress Plugin Unauthentifizierter Admin-Zugriff Proof-of-Concept PoC , das CVE-2026-23550 demonstriert – kritische Übernahme von Admin-Konten ohne Authentifizierung im Modular DS WordPress-Plugin Versionen ≤2.5.1. Wird aktiv in freier Wildbahn...

RocketChat-NoSQLi-Chain-CVE-2021-22911

Rocket.Chat Vazamento de Token NoSQLi e Redefinição de Senha Um script de exploração automatizado para o Rocket.Chat e aplicações baseadas em Meteor que aproveita uma Injeção NoSQL através da cláusula $where para vazar tokens de redefinição de senha por meio de exceções do servidor. Uma vez que o...

onelogon

Onelogon: Übernahme von Active-Directory-Konten über Netlogon Dieses Repository enthält Code und Daten zu unserem Paper Onelogon: Taking over Active Directory Accounts via Netlogon WOOT'26. 1. Kontext 2. Zitieren 3. Aufbau und Einrichtung des Artefakts 4. Einrichten einer Testumgebung 5. Suche na...

nginx-ui-CVE-2026-42221-CVE-2026-42238-

nginx-ui CVE 验证环境 nginx-ui（Nginx 的 Web GUI 管理工具）报告的两个 CVE 在 Docker 环境中进行实际验证的仓库。 CVE-2026-42221 ：未认证情况下的管理员账户劫持 CVE-2026-42238 ：未认证备份恢复导致的命令执行 免责声明 本仓库的验证内容仅针对自己管理的隔离本地环境。 未经许可对第三方系统使用类似手法将违反不正访问禁止法。 详细文章 验证过程、考察及学习内容已总结在 Qiita 文章中。 实际尝试 nginx-ui 的 CVE：「漏洞」认为是设计问题 漏洞概要...

CVE-2023-4220

使用Web Shell对Chamilo LMS CVE-2023-4220进行远程代码执行 本项目自动利用Chamilo LMS中的远程代码执行漏洞（CVE-2023-4220）。通过Web Shell，该工具可自动化利用该漏洞，从而控制受影响的Chamilo LMS实例。 功能： 自动化利用CVE-2023-4220 Web Shell集成 演示漏洞的影响 用法/示例 root@kitploit: ./exploit.py -t http://example.com 截图 免责声明： 此工具仅用于教育目的，并帮助安全专业人员理解和缓解漏洞。未经许可擅自用于系统是非法且不道德的。 🔗 链...

SysAid On-Prem <= 23.3.40 - XML External Entity

SysAid On-Prem versions = 23.3.40 are vulnerable to an unauthenticated XML External Entity XXE vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives. id: CVE-2025-2776 info: name: SysAid On-Prem = 23.3.40 - XML External Enti...

Cisco SSM On-Prem <= 8-202206 - Password Reset Account Takeover

A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process...

Flowise <= 3.0.5 - Account Takeover

Flowise versions 3.0.5 and earlier had a vulnerability in the forgot-password endpoint, which returned valid reset tokens without authentication—allowing attackers to reset passwords and take over accounts. id: CVE-2025-58434 info: name: Flowise = 3.0.5 - Account Takeover author:...

Adobe Commerce/Magento - Customer Session Identity Switch

Adobe Commerce contains an incorrect authorization vulnerability caused by improper access control, letting attackers escalate privileges to access sensitive resources, exploit requires no user interaction. id: CVE-2026-71362 info: name: Adobe Commerce/Magento - Customer Session Identity Switch...