grep -l "Password Reuse" ./machines [5] sorted: date ▼

namediffosdatetags

Enigma easy linux 2026-06-27not yet retired

Checkpoint medium windows 2026-06-13not yet retired

Reactor easy linux 2026-05-23not yet retired

Silentium easy linux 2026-04-11 A staging Flowise 3.0.5 instance leaks a live password-reset token straight back in the /api/v1/account/forgot-password response (CVE-2025-58434), giving instant takeover of the ben@silentium.htb admin account. Authenticated, the Custom MCP node's mcpServerConfig (CVE-2025-59528) spawns arbitrary processes, yielding root inside the Flowise container — whose environment block hands over SMTP_PASSWORD, reused verbatim as ben's system password over SSH. Root comes from a second internal app: Gogs 0.13.3 running as root with open registration, where CVE-2025-8110 lets the contents API write through a committed symlink to overwrite the repository's pre-receive hook, executed as root on the next push. flowise·cve-2025-58434·password reset token disclosure·account takeover·cve-2025-59528·custom mcp·+10 Kobold easy linux 2026-03-21 MCP Inspector STDIO RCE for foothold, PHP code injection in PrivateBin container to leak credentials, Docker escape via Arcane container management. mcp·docker·privatebin·php-injection·password-reuse·arcane

no machines match that filter