CVE-2026-75932

Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the victim's OAuth...

EUVD-2026-63997

Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the victim's OAuth...

CVE-2026-75932

CVE-2026-75932 is a tenant isolation failure in Jet Admin (a web-based admin platform). An unauthenticated attacker can create a malicious app, connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected, t...

CVE-2026-75932 Jet Admin tenant isolation failure

Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the victim's OAuth...

Jet Admin Cloud Platform multiple vulnerabilities

RISK EVALUATION Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the...

CVE-2026-66721

Missing authorization issue for domain admins in CloudStack's host tags listing functionality. Domain Admins, by default, have permission to call the listHostTags API, but the API returns host tags for every host in the environment without domain scoping. It should instead be restricted to only t...

CVE-2026-66722

Improper authorization for CRUD operations on Project Roles and Project Role permissions for domain admins in CloudStack. A Domain Admin can create, update, delete, and list project roles and project role permissions for projects in any domain, not just their own. The check only confirms the call...

EUVD-2026-63833

Missing authorization issue for domain admins in CloudStack's host tags listing functionality. Domain Admins, by default, have permission to call the listHostTags API, but the API returns host tags for every host in the environment without domain scoping. It should instead be restricted to only t...

CVE-2026-66721 Apache CloudStack: Authorization issue with listHostTags for domain admins

Missing authorization issue for domain admins in CloudStack's host tags listing functionality. Domain Admins, by default, have permission to call the listHostTags API, but the API returns host tags for every host in the environment without domain scoping. It should instead be restricted to only t...

CVE-2026-66721

Apache CloudStack has a missing authorization flaw in its listHostTags API . Domain Admins can invoke this API by default, but the endpoint returns host tags for every host in the environment rather than being scoped to the admin's own domain. This exposes host tag information across domain bound...

CVE-2026-66722

CVE-2026-66722 is an improper authorization flaw in Apache CloudStack affecting versions 4.15.0.0–4.20.3.0 and 4.21.0.0–4.22.1.0 . The root cause is that CRUD operations on Project Roles and Project Role Permissions only verify the caller is a Domain Admin, without checking whether the target pro...

CVE-2026-66722 Apache CloudStack: ProjectRole & ProjectRolePermission authorization issue

Improper authorization for CRUD operations on Project Roles and Project Role permissions for domain admins in CloudStack. A Domain Admin can create, update, delete, and list project roles and project role permissions for projects in any domain, not just their own. The check only confirms the call...

EUVD-2026-63832

Improper authorization for CRUD operations on Project Roles and Project Role permissions for domain admins in CloudStack. A Domain Admin can create, update, delete, and list project roles and project role permissions for projects in any domain, not just their own. The check only confirms the call...

Dnsplit

Dnsplit - Strumento di Enumerazione dei Sottodomini 🕵️‍♂️ Dnsplit è uno strumento basato su Python progettato per scoprire in modo efficiente i sottodomini. 🚀 È un progetto a cui sono molto legato, dato che sono ancora relativamente nuovo sia nella programmazione che nel campo dell'hacking etico...

CVE-2026-14601

The Link Whisper Free WordPress plugin before 0.9.7 contains a SQL injection vulnerability caused by improper sanitization and escaping of the domain parameter before it is used in a SQL query. Authenticated users with the Editor role or above can exploit this to execute arbitrary SQL commands, r...

CVE-2026-14601 Link Whisper < 0.9.7 - Editor+ SQL Injection via domain Parameter

The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks...

jeopardize

Introduzione Il tool Jeopardize è sviluppato per fornire capacità di base di threat intelligence e risposta contro i domini di phishing al costo minimo possibile. Rileva candidati a domini di phishing registrati typosquatting, omografi, ecc., li analizza e assegna loro un punteggio di rischio. Do...

jeopardize

Introduction Jeopardize tool is developed to provide basic threat intelligence&response capabilities against phishing domains at the minimum cost as possible. It detects registered phishing domain candidates typosquatting, homograph etc., analyzes them and assigns a risk score to them. After then...

dr_robot

root@kitploit: . . . . . . . : \ : \ : \ : . \ : / : . \ \ :| | | || || || : | || | \ | : | | | :| | . | || : \ | : \ | : || | | : | | | |. / | || |\ . / |/ . / | | :/ || || :/ :/ || : : : Copyright 2019 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of...

dr_robot

. . . . . . . : \ : \ : \ : . \ : / : . \ :| | | || || || : | || | \ | : | | | :| | . | || : \ | : \ | : || | | : | | | |. / | | | |\ . / |/ ./ | | :/ | | || :/ :/ | | : : : Copyright 2019 National Technology & Engineering Solutions of Sandia, LLC NTESS. Gemäß den Bedingungen des Vertrags...