ApostropheCMS is an open-source Node.js content management system. Versions up to and including 4.29.0 have a password reset flow that constructs the reset URL using `req.hostna...

CVE-2026-45013

ApostropheCMS is an open-source Node.js content management system. Versions up to and including 4.29.0 have a password r

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the file apps/home/controller/MemberController.php of the compo...

CVE-2026-12066

A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the fi

历史摘要 · 未重新核验 · NVD

LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it. The optional allowedHosts allowlist that would constrain this...

CVE-2026-50635

LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it. The

历史摘要 · 未重新核验 · NVD

A vulnerability was detected in OUSL-GROUP-BrinaryBrains School Student Management System up to...

CVE-2026-10169

A vulnerability was detected in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was detected in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. Affected by this vulnerability is the f...

CVE-2026-10169

CVE-2026-10169 影响 OUSL-GROUP-BrinaryBrains 开发的学校学生管理系统（截至 commit 1e70e5ad1125b86dca4ee086eb6bb121f17708b6）。漏洞位于 applicat

历史摘要 · 未重新核验 · NVD

The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable...

CVE-2026-7459

The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated (Subscr

历史摘要 · 未重新核验 · GitHub Advisory

The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated (Subscriber+) account takeover in all versions up to, and includ...

CVE-2026-7459

The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated (Subscr

历史摘要 · 未重新核验 · NVD

A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of...

CVE-2026-9609

A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of the file Admin.php. The

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of the file Admin.php. The manipulation leads to weak password recovery. The attack ...

CVE-2026-9609

A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of the file Admin.php. The

历史摘要 · 未重新核验 · NVD

phpMyFAQ: Missing Password Reset Token Allows Account Takeover via Username/Email Enumeration

### Summary An authentication bypass vulnerability in phpMyFAQ allows any unauthenticated attacker to reset the password

历史摘要 · 未重新核验 · GitHub Advisory

phpMyFAQ: Unauthenticated Password Reset Endpoint Allows User Enumeration and Forced Password Change Without Token Validation

### Summary The password reset API can be triggered without authentication and without any out-of-band confirmation ste

历史摘要 · 未重新核验 · GitHub Advisory

AzuraCast is a self-hosted, all-in-one web radio management suite. Prior to version 0.23.6, the ApplyXForwarded middleware unconditionally trusts the client-supplied X-Forwarded...

CVE-2026-42606

AzuraCast is a self-hosted, all-in-one web radio management suite. Prior to version 0.23.6, the ApplyXForwarded middlewa

历史摘要 · 未重新核验 · NVD

The LatePoint plugin for WordPress is vulnerable to Account Takeover via Weak Password Recovery...

CVE-2026-7652

The LatePoint plugin for WordPress is vulnerable to Account Takeover via Weak Password Recovery Mechanism in the unauthe

历史摘要 · 未重新核验 · GitHub Advisory

The LatePoint plugin for WordPress is vulnerable to Account Takeover via Weak Password Recovery Mechanism in the unauthenticated guest booking flow in versions up to, and includ...

CVE-2026-7652

LatePoint WordPress插件至5.5.0版本存在账户接管漏洞。漏洞源于未认证的访客预订流程中，save_connected_wordpress_user()函数通过wp_update_user()将LatePoint客户的电子

历史摘要 · 未重新核验 · NVD

AzuraCast has Password Reset Poisoning via Untrusted X-Forwarded-Host Header that Leads to Account Takeover and 2FA Bypass

CVE-2026-42606

## Summary The `ApplyXForwarded` middleware unconditionally trusts the client-supplied `X-Forwarded-Host` HTTP header w

历史摘要 · 未重新核验 · GitHub Advisory

phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning. When force_server_vars is disabled, the servers hostname may be extract...

CVE-2026-29199

phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning. When force_ser

历史摘要 · 未重新核验 · NVD

A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak passwo...

CVE-2026-7554

A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the

历史摘要 · 未重新核验 · NVD