12 matches found
CVE-2026-129144
The paicoding 1.0.3 software contains a payment bypass vulnerability in the /article/api/pay/callback endpoint. Authenticated attackers can unlock paid articles by exploiting weak payment confirmation codes. The root cause is a small space of random values (CWE-334) in IdUtil.genPayCode , allowin...
CVE-2026-126544
WWBN AVideo 6.5 through 29.7.1 contains an email verification bypass vulnerability in User::verifyCode in objects/user.php caused by PHP loose comparison of the recoverPass token. Registered users can reuse the installation-wide salt from their own verification link and craft a code with arbitrar...
CVE-2026-126544 WWBN AVideo 6.5 through 29.7.1 Email Verification Bypass via User::verifyCode()
WWBN AVideo 6.5 through 29.7.1 contains an email verification bypass vulnerability in User::verifyCode in objects/user.php caused by PHP loose comparison of the recoverPass token. Registered users can reuse the installation-wide salt from their own verification link and craft a code with arbitrar...
CVE-2026-126544 WWBN AVideo 6.5 through 29.7.1 Email Verification Bypass via User::verifyCode()
WWBN AVideo 6.5 through 29.7.1 contains an email verification bypass vulnerability in User::verifyCode in objects/user.php caused by PHP loose comparison of the recoverPass token. Registered users can reuse the installation-wide salt from their own verification link and craft a code with arbitrar...
CVE-2026-126544
WWBN AVideo 6.5 through 29.7.1 contains an email verification bypass vulnerability in User::verifyCode in objects/user.php caused by PHP loose comparison of the recoverPass token. Registered users can reuse the installation-wide salt from their own verification link and craft a code with arbitrar...
CVE-2026-126544
WWBN AVideo versions 6.5 through 29.7.1 are vulnerable to an email verification bypass within the User::verifyCode() function in objects/user.php. The root cause is a PHP loose comparison of the recoverPass token. This allows registered users to reuse an installation-wide salt from their own veri...
EUVD-2026-123069
WWBN AVideo 6.5 through 29.7.1 contains an email verification bypass vulnerability in User::verifyCode in objects/user.php caused by PHP loose comparison of the recoverPass token. Registered users can reuse the installation-wide salt from their own verification link and craft a code with arbitrar...
CVE-2026-126544: WWBN AVideo: WWBN AVideo 6.5 through 29.7.1 contains an email verification bypass vulnerability in User::verifyCode() in…
WWBN AVideo 6.5 through 29.7.1 contains an email verification bypass vulnerability in User::verifyCode in objects/user.php caused by PHP loose comparison of the recoverPass token. Registered users can reuse the installation-wide salt from their own verification link and craft a code with arbitrar...
PT-2026-144923
WWBN AVideo 6.5 through 29.7.1 contains an email verification bypass vulnerability in User::verifyCode in objects/user.php caused by PHP loose comparison of the recoverPass token. Registered users can reuse the installation-wide salt from their own verification link and craft a code with arbitrar...
AppAuthentication::verifyCode() MultiFactor Auth Bypass
The vulnerability of the AppAuthentication::verifyCode method in the packages/panels/src/Auth/MultiFactor/App/AppAuthentication.php file of the Filament PHP framework’s Laravel set is related to the possibility of bypassing the authentication process. Exploiting this vulnerability could allow an...
CVE-2026-84306
Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.6 and 5.7.6, packages/panels/src/Auth/MultiFactor/App/AppAuthentication.php uses AppAuthentication::verifyCode with a used-code cache key derived from both the app authentication secret an...
ShopEx PHP remote include vulnerability-vulnerability warning-the black bar safety net
Article author: lonely hacker Source of information: Affects versions: 4.7 and below verifycode.php ? php / Login verification code generating file @package ShopEx online store system @version 4.6 @author ShopEx. cn [email protected] @url @since PHP 4.3 @copyright ShopEx. cn / if ! defined"ISSHOP...