KeySniper

KeySniper Autor: Mitsec — x.com/ynsmroztas CVE-2026-18963 — toma de control de cuenta Keycloak sin autenticación mediante el flujo de restablecimiento de credenciales. KeySniper es un escáner orientado a producción para programas de bug bounty dentro del alcance y evaluaciones autorizadas: salida...

Keycloak_CVE-2026-18963_PoC

CVE-2026-18963 Keycloak reset-credentials bypass → unauthenticated account takeover CVSS 9.1 | Affected: Keycloak 26.0.0 – 26.7.1 Layout CVE-2026-18963/ ├── cve202618963poc.py - PoC script Python 3.9+, stdlib only ├── README.md ├── docker-compose.yml - Lab environment └── realm-poc.json - Keycloa...

CVE-2026-18963_analyst

Open Source Identity and Access Management Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more. Help...

CVE-2026-18963 vulnerabilities

Vulnerabilities for packages: keycloak-fips, keycloak, request-9047-keycloak-fips...

Exploit for CVE-2026-18963

CVE-2026-18963-ke...

Exploit for CVE-2026-18963

0day-Exploits Vulnerability research I have done on four wide...

Exploit for CVE-2026-18963

CVE-2026-18963 Keycloak Reset-Credentials State Bypass Detecto...

Exploit for CVE-2026-18963

CVE-2026-18963 — Lab tái dựng lại Keycloak reset-credentials...

Exploit for CVE-2026-18963

POC-CVE-20...

Exploit for CVE-2026-18963

CVE-2026-18963 — Keycloak reset-credentials bypass → unauthent...

Keycloak 26.4.x < 26.4.15 / 26.6.x < 26.6.6 Unauthenticated Account Takeover

The version of Keycloak installed on the remote host is 26.4.x prior to 26.4.15, or 26.6.x prior to 26.6.6. It is, therefore, affected by a vulnerability: - A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access...

Critical: Red Hat Security Advisory: Red Hat build of Keycloak 26.4.15 Images Security Update

New images are available for Red Hat build of Keycloak 26.4.15 and Red Hat build of Keycloak 26.4.15 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Ha...

Critical: Red Hat Security Advisory: Red Hat build of Keycloak 26.6.6 Images Security Update

New images are available for Red Hat build of Keycloak 26.6.6 and Red Hat build of Keycloak 26.6.6 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...

Critical: Red Hat Security Advisory: Red Hat build of Keycloak 26.6.6 Security Update

New Red Hat build of Keycloak 26.6.6 packages are available from the Customer Portal Red Hat build of Keycloak 26.6.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security fixes...

Critical: Red Hat Security Advisory: Red Hat build of Keycloak 26.4.15 Security Update

New Red Hat build of Keycloak 26.4.15 packages are available from the Customer Portal Red Hat build of Keycloak 26.4.15 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security...

CVE-2026-18963

creationtimestamp| type| source ---|---|--- 2026-08-18 18:10:08+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtestacb3z2u 2026-08-18 19:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtewqb76ms2c 2026-08-19 17:03:32+00:00| seen|...

CVE-2019-18963

CVE-2019-18963 is rejected and not an active vulnerability entry.

CVE-2019-18963

...

CVE-2018-18963

Busca.aspx.cs in Degrau Publicidade e Internet Plataforma de E-commerce allows SQL Injection via the busca/ URI...

CVE-2018-18963

The CVE-2018-18963 affects Degrau Publicidade e Internet Plataforma de E-commerce; the issue is a SQL Injection in the Busca.aspx.cs file exploitable via the busca/ URI. The CNVD entry confirms a SQL injection vulnerability exists in that file. No explicit root-cause details or patch/mitigation a...