CVE-2026-71878 Authentication bypass in Integrated Publishing Toolkit

Missing authentication in initial setup functionality left exposed after initial setup is completed in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass...

PT-2026-59210

Kiwi TCMS provides the /init-db/ page as part of its setup mechanism for administrators who prefer a browser instead of the command line. In previous versions of Kiwi TCMS this page still renders and responds to requests even after first use. Impact The /init-db/ page does not require any user...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

CVE-2023-22515: Confluence Data Center & Server 권한 상승 취약점 분석 보...

PT-2021-19841 · Itop +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: iTop versions prior to 2.6.5 iTop versions prior to 2.7.5 Description: The issue affects iTop, an open source web-based IT Service Management tool. An attacker can call the system setup without authentication, and given specific parameters,...

2Wire Password Reset

require 'msf/core' class Metasploit3 '2Wire Password Reset', 'Version' = '$Revision: 1 $', 'Description' = %Q This module will reset the admin password on a 2wire wireless router. This works by using a setup wizard page that fails to check if a user is authenicated and doesn't remove or block aft...