6957891 matches found
cve-threat-intelligence-hub
cve · threat-intelligence · vulnerabilities · cisa-kev · epss ·...
Exploit for Interpretation Conflict in Wordpress
wp2shell-PoC ⚠ This tool is created solely for education...
Exploit for CVE-2026-64561
No d...
EUVD-2026-92042
Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1...
pentest-labs
pentest-labs Hands-on penetration testing lab write...
AERA
AERA: Autonomous Exploit Research Assistant !Python 3.11+...
CVE-2026-96451
Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1...
Exploit for CVE-2025-21065
CVE-2025-21065 A PoC for CVE-...
CVE-2026-105122
OpenAM before version 16.1.3 is vulnerable to a server-side request forgery (SSRF) . The root cause is an unvalidated jwks_uri parameter, which allows attackers who can register or modify OAuth 2.0 clients to force the system to fetch internal resources. Practical consequences include the ability...
CVE-2026-105122
creationtimestamp| type| source ---|---|--- 2026-10-03 16:07:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5r5rtwwwc5hon...
CVE-2026-105118
creationtimestamp| type| source ---|---|--- 2026-10-03 16:05:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hdstfj5dvkmnm...
CVE-2026-105118
The software OpenAM (versions before 16.1.3 ) is affected by an open redirect vulnerability. The root cause is the processing of an unverified id_token_hint at the /oauth2/connect/endSession endpoint. Unauthenticated attackers can provide a forged hint naming any realm client to redirect victims ...
CVE-2026-103913
creationtimestamp| type| source ---|---|--- 2026-10-03 16:03:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mwyb6qjonu24...
CVE-2026-97337
creationtimestamp| type| source ---|---|--- 2026-10-03 16:03:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mwyb6jhje22k...
CVE-2026-105119
creationtimestamp| type| source ---|---|--- 2026-10-03 15:59:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/crzb6afy4eyke...
CVE-2026-105119
The OpenAM identity management solution, specifically versions before 16.1.3 , is vulnerable to an OAuth2 Provider PKCE enforcement bypass via OAuth 2.0 Hybrid Flows . The root cause is that PKCE enforcement is only applied to authorization requests where the response_type is exactly code. Conseq...
CVE-2026-105120
OpenAM versions prior to 16.1.3 are susceptible to an authorization bypass vulnerability within the sessions REST endpoint query operation . This flaw allows an attacker with delegated RealmAdmin privileges to supply a _queryFilter targeting a different realm. Consequently, the attacker can discl...
CVE-2026-105120
creationtimestamp| type| source ---|---|--- 2026-10-03 15:53:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bma3eerlqussf...
