CVE-2025-34157

XSS almacenado en el flujo de eliminación de Coolify CVE-2025-34157 Afecta: Coolify ≤ v4.0.0-beta.420.6 Corregido en: v4.0.0-beta.420.7 Severidad: Crítica 9.4 Vector CVSS 4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE: CWE-79 Cross-Site Scripting, CWE-20 Validación de...

CVE-2022-3949

CVE-2022-3949 XSS en Simple Cashiering System Simple Cashiering System es vulnerable a Cross Site Scripting XSS - un actor malicioso puede cambiar el nombre completo de un usuario comprometido a un payload XSS y cuando un administrador visita la pestaña de usuarios o la pestaña de ventas y mira l...

CVE-2026-76949

Authentication Bypass by Spoofing vulnerability in team-alembic ashauthentication allows an attacker who can plant a remember-me cookie in a victim's browser to replace that victim's authenticated session with one for the attacker's own account...

CVE-2025-69821-Beat-XP-Vega-Smartwatch-Security-Assessment

CVE-2025-69821 : Beat-XP-Vega-Smartwatch-Security-Assessment Una evaluación de seguridad del Beat XP VEGA Smartwatch Firmware RB303ATV006229 centrada en la conectividad Bluetooth Low Energy BLE reveló una debilidad de diseño e implementación que permite que un dispositivo central BLE cercano...

EUVD-2026-82418

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to 1.1.1, POST /api/auth/passkeys accepts a request-body userId and attacker-supplied passkey without an authenticated session, does not call WebAuthnService.verifyRegistration, and...

CVE-2021-32099

CVE-2021-32099 pandora fms 742 sqli pre authentication POC root@kitploit: http://localhost/pandoraconsole/include/chartgenerator.php?sessionid=a' UNION SELECT 'a',1,'idusuario|s:5:"admin";' as data FROM tsessionsphp WHERE '1'='1 URL Encoded root@kitploit:...

CVE-2026-23550

root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ███████╗ ███████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ╚════██╗╚════██╗██╔════╝ ██╔════╝██╔═████╗ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ █████╔╝ █████╔╝███████╗...

CVE-2026-48611-phpBB

CVE-2026-48611-phpBB Bypass de autenticación simple poc de bypass de autenticación; si quieres acceder a través del navegador, no olvides cambiar la variable USERAGENT en el script según lo que se muestre en tu navegador para que funcione. usa un editor de cookies para reemplazar el valor sid y u...

XSSFire

XSSFire Un script de Blind XSS independiente. Cómo funciona: El script es una combinación de PHP y JavaScript; captura los datos usando JS y los envía al propio script, luego genera archivos de informe y los entrega a través de Telegram. Requisitos: 1. Servidor web ejecutándose en Linux con un...

CVE-2026-66917

IDOR + XSS almacenado mediante autorización rota a nivel de objeto en JoomGallery JoomGallery ≤ 4.3.0 — Un usuario con rol Editor secuestra cualquier imagen de la galería y almacena una carga XSS, lo que permite tomar el control de la sesión del administrador RESUMEN UserimageController::save en...

CVE-2026-89080

The Really Simple Security WordPress plugin before 9.8.1 does not prevent an unauthenticated request from resetting an account's completed email two-factor enrolment, allowing an attacker who already knows the account's password to bypass the second factor and obtain that user's session, up to...

CVE-2026-81911

Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The customslot savetemplate endpoint authorizes the request only against the target board instance canEditBoardContents and then persists the client-supplied selectedTemplateOptioncollection verbatim,...

CVE-2026-81911

Concrete CMS versions 9.0.0 through 9.5.2 contain a Stored XSS in the Board Custom Slot dialog. The custom_slot save_template endpoint authorizes requests only against the target board instance via canEditBoardContents() but persists the client-supplied selectedTemplateOption[collection] verbatim...

EUVD-2026-76447

Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The customslot savetemplate endpoint authorizes the request only against the target board instance canEditBoardContents and then persists the client-supplied selectedTemplateOptioncollection verbatim,...

CVE-2026-81911 Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot save_template via Unescaped Summary Description

Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The customslot savetemplate endpoint authorizes the request only against the target board instance canEditBoardContents and then persists the client-supplied selectedTemplateOptioncollection verbatim,...

grafana: Grafana: Session takeover via Auth Proxy cache key collision

On instances using Auth Proxy header authentication auth.proxy with identity caching enabled syncttl 0, two distinct user identities could produce the same cache key. An authenticated low-privileged user able to influence their own forwarded identity attributes could be served a higher-privileged...

PT-2026-89162

Summary When more than one external tool server is reachable in the same request, a tool call to a server configured for bearer authentication can arrive carrying the calling user's Open WebUI session cookies alongside that server's own key. The cookie jar is built per connection, but the callabl...

Adobe ColdFusion 2023.x < 2023 Update 24 / 2025.x < 2025 Update 13 Multiple Vulnerabilities (APSB26-119)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2023.x update 24 or 2025.x update 13. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-119 advisory. - Improper Neutralization of Directives in Dynamically Evaluated Code 'Eval...

PT-2026-89167

Summary On SQLite deployments, the lookup that maps an external identity to a local account does a substring match instead of an exact match. A subject value containing SQL wildcard characters therefore matches accounts the value was never issued for, and the sign-in binds to whichever account th...

Adobe Commerce - Authentication Bypass

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high...