45634 matches found
WordPress Simple JWT Login plugin < 3.6.8 - Unauthenticated Account Takeover via Missing Google id_token Audience Validation vulnerability
Unauthenticated Account Takeover via Missing Google idtoken Audience Validation vulnerability discovered by Farid Narimanov in WordPress Plugin Simple JWT Login versions 3.6.8...
EUVD-2026-63220
A low privileged remote attacker with a valid session can submit a request to the user creation functionality exposed through /api/user/add.php to create new accounts with arbitrary role values, including the highest privilege level used by the application...
repokid v0.19.8
Repokid Repokid uses Access Advisor provided by Aardvark to remove permissions granting access to unused services from the inline policies of IAM roles in an AWS account. Getting Started Install root@kitploit: mkvirtualenv repokid git clone [email protected]:Netflix/repokid.git cd repokid pi...
ProtOSINT — Updated!
ProtOSINT ProtOSINT is a Python script that helps you investigate Proton Mail accounts. Version This is ProtOSINT v2. The first version has been around for a few years, but Proton's API changed and the old checks stopped working, so this is a rewrite that brings the tool back to life. Big thanks ...
CVE-2026-64964: Generation of Predictable Numbers or Identifiers
ATutor generates predictable email confirmation tokens due to the use of insufficiently random values in the account confirmation functionality. Due to the use of predictable values related to user registration, an attacker who knows or can predict these values can guess valid account activation...
PT-2026-79009
ATutor is vulnerable to authentication bypass . Although a token validation check is present in the auto-login functionality, the values required for token validation remain uninitialized in certain code paths. An unauthenticated attacker who can determine a user's identifier and registration...
PT-2026-79005
WeGIA before 3.9.2 contains an authorization bypass vulnerability in the password change flow that allows any authenticated user to change their account password without providing existing credentials by exploiting the unconditional exclusion of the alterarSenha method from permission checks in...
PT-2026-79012
ATutor generates predictable email confirmation tokens due to the use of insufficiently random values in the account confirmation functionality. Due to the use of predictable values related to user registration, an attacker who knows or can predict these values can guess valid account activation...
CVE-2026-76633: Missing Authorization
WeGIA before 3.9.2 contains an authorization bypass vulnerability in the password change flow that allows any authenticated user to change their account password without providing existing credentials by exploiting the unconditional exclusion of the alterarSenha method from permission checks in...
CVE-2026-50190: Improper Neutralization of Input During Web Page Generation
Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in application/front/controller/visitor/BookmarkListController.php. The permalink handler concatenates the raw $bookmark-getTitle into the pagetitle template variable and the RainTPL template emits it...
PT-2026-80336
Summary The MyAccountController::postAccountInfoForm action bound to POST /admin/edit-account-info calls $this-guard-user-update$request-except' token'. Because the controller uses except' token' rather than $request-validated or the restricted keys defined in AccountInfoRequest::validationData,...
PT-2026-80261
Summary MyAccountController::postAccountInfoForm allows an authenticated user to update the authentication column default: email without verifying their current password. Because email is the account-recovery anchor, this enables account takeover after the attacker's session ends: the new email...
PT-2026-78893
Name of the Vulnerable Software and Affected Versions GutenKit versions prior to 2.5.0 Description Insufficient capability checks on certain REST API endpoints allow users with the Contributor role or higher to retrieve mailing-list audience metadata from the connected marketing account...
PT-2026-83649
Summary userpassword.Compare substituted a placeholder hash derived from the well-known string "hunter2" when the stored hash was empty. Submitting "hunter2" therefore matched accounts with no password hash nonexistent users and SSO-only users and a subsequent login-type check returned an HTTP 40...
Keycloak 26.6.x < 26.6.6 Multiple Vulnerabilities
The version of Keycloak installed on the remote host is 26.6.x prior to 26.6.6. It is, therefore, affected by multiple vulnerabilities: - A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak. The mechanism used to protect the account-linking process from unauthoriz...
JetBrains YouTrack < 2026.2.18112 Information Disclosure (CVE-2026-75046)
The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18112. It is, therefore, affected by an information disclosure vulnerability: - An authenticated user could enumerate accounts via the users search endpoint. CVE-2026-75046 Note that Nessus has not tested for this...
CVE-2026-72843: Missing Authorization
The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/updateCustomer/route.json, which causes the admin authentication middleware to call next without checking the caller, and no customer-session middleware guards the route; the on...
PT-2026-79261
Name of the Vulnerable Software and Affected Versions EverShop versions prior to 2.2.1 Description An authorization flaw exists in the customer update route. The route is incorrectly configured as public, allowing the admin authentication middleware to bypass caller verification. Additionally, th...
PT-2026-80745
Summary The MyAccountController::postAccountInfoForm action bound to POST /admin/edit-account-info calls $this-guard-user-update$request-except' token'. Because the controller uses except' token' rather than $request-validated or the restricted keys defined in AccountInfoRequest::validationData,...
PT-2026-80746
Summary MyAccountController::postAccountInfoForm allows an authenticated user to update the authentication column default: email without verifying their current password. Because email is the account-recovery anchor, this enables account takeover after the attacker's session ends: the new email...