Curtail-Inc/hello-ReGrade-security

PoC

Find the vulnerability your tests were never written to catch. A ReGrade demo modeling CVE-2023-5968: catch a password-hash leak by comparing an app to itself.

view exploit source poc_in_githubauthor Curtail-Incpublished 2026-07-04catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2023-5968USmedium4.9Exploit
Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body. 
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan