org.keycloak/keycloak-services: Session fixation in OIDC login flow that can lead to account takeover

A session fixation vulnerability was found in Keycloak's login-actions endpoints. An unauthenticated attacker could exploit this flaw by pre-creating an authentication session and tricking a victim into visiting a maliciously crafted link. By leveraging the /login-actions/restart endpoint—which...

BIT-APACHE-2026-57941 Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy

Use After Free vulnerability in Apache HTTP Server's modhttp2 via shared session-bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

org.keycloak/keycloak-services: Session fixation in OIDC login flow that can lead to account takeover

A session fixation vulnerability was found in Keycloak's login-actions endpoints. An unauthenticated attacker could exploit this flaw by pre-creating an authentication session and tricking a victim into visiting a maliciously crafted link. By leveraging the /login-actions/restart endpoint—which...

CVE-2025-47812

CVE-2025-47812 — Wing FTP Server Unauth RCE rewrite Python exploit for the unauthenticated Lua-injection RCE in Wing FTP Server ≤ 7.4.3. Designed for shell delivery — one command from check to a working netcat callback. Written some time ago for wingData lab on HTB and open-sourced now. Use only...

Vuln_Exploitation_MegaQuagga_Pentest

Explotación de Vulnerabilidades — Informe de Prueba de Penetración de MegaQuagga Analista: Samuel Weiss Organización: 0x2A Security Fecha: 20 de abril de 2026 Cliente: MegaQuagga Publishing Objetivo: www.megaquagga.local Clasificación: CONFIDENCIAL Resumen Este proyecto documenta una prueba de...

CVE-2026-23550

██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ███████╗ ███████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ╚════██╗╚════██╗██╔════╝ ██╔════╝██╔═████╗ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ █████╔╝ █████╔╝███████╗ ███████╗██║██╔██║ ██║ ╚█...

CVE-2026-57829

Helix Ultimate Framework — XSS Almacenado No Autenticado comajax → Session-Riding de Admin → Toma Completa de Cuenta Este es el hallazgo más fuerte en esta carpeta de investigación — CRÍTICO, completamente confirmado de principio a fin. A diferencia del error solo de eliminación en...

cve-2020-13777

Script de prueba de Zeek para CVE-2020-13777 Este script realiza una prueba simple para verificar si un servidor es potencialmente vulnerable a CVE-2020-13777. CVE-2020-13777 provoca que GnuTLS cree tickets de sesión sin cifrar. Esto parece ser detectable verificando que gnutls establece keyname ...

CVE-2025-65640

CVE-2025-65640 1. Información de Vulnerabilidad CVE ID: CVE-2025-65640 Actualmente RESERVADO Tipo de Vulnerabilidad: Stored Cross-Site Scripting XSS Puntuación CVSSv3: 6.3 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N Vendedor: Arket/Bluenext S.r.l. Producto: Globe Document Intelligence Versión Afectada:...

CVE-2025-24813

CVE-2025-24813 Apache Tomcat - Ejecución remota de código mediante deserialización de sesión PUT parcial sin autenticación + path traversal + deserialización basada en gadgets Descripción Las instancias de Apache Tomcat con el servlet por defecto con PUT habilitado readonly=false permiten escribi...

CVE-2025-69848-security-advisories

Reflected XSS in NetBox ProtectedError Handling CVE-2025-69848 Overview NetBox is an open-source infrastructure resource modeling and IP address management platform. A reflected cross-site scripting XSS vulnerability exists in the ProtectedError exception handling logic. When a delete operation...

CVE-2025-5777

Exploit for CVE-2025-5777: Citrix NetScaler Memory Disclosure CitrixBleed 2 T1606 Disclaimer Intented for authorized use only. It is your responsibility to verify authorization before use. I am not responsible for any legal or criminal proceedings filed against you for using this. Description...

Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813-

Apache-Tomcat---Ejecución-Remota-de-Código-mediante-Deserialización-de-Sesión-CVE-2025-24813-...

CVE-2026-71206-PoC

CVE-2026-71206 — Shiori: JWT CheckToken Never Re-Validates Account State Product: go-shiori/shiori File: internal/domains/auth.go CWE: CWE-613 — Insufficient Session Expiration CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L — 8.2 High CNA: Turan Security · CVE record Description Shiori's CheckToke...

CVE-2026-41940-analysis

CVE-2026-41940 — Bypass de Root en Pre-Autenticación en cPanel y WHM mediante Inyección CRLF en Archivos de Sesión Un análisis técnico profundo orientado a defensores 1. Resumen ejecutivo Campo| Valor ---|--- ID CVE| CVE-2026-41940 CVSS v3.1| 9.8 Crítico — Red / Complejidad Baja / Sin Privilegios...

CLEANSTART-2026-YX19241 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Security vulnerability affects the go1.27 package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...

CLEANSTART-2026-QU78029 application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store

Security vulnerability affects the rundeck package. An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store...

third-thoughts

Third Thoughts A Lightless Labs research project studying AI agent behavior at scale through multi-disciplinary corpus analysis basically, throwing stuff at the wall and seeing what sticks. Named after Tiffany Aching's concept from Discworld: first thoughts agents thinking, second thoughts agents...

CVE-2026-105785

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without a purpose, and...

CVE-2026-105786

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, packages/server/src/models/ApplicationModel.ts accepts a caller-chosen application authorization identifier, applications/:id/confirm binds that identifier to a logged-in use...