subzy

Subzy Subdomain takeover tool which works based on matching response fingerprints from can-i-take-over-xyz Installation go install -v github.com/PentestPad/subzy@latest If $GOBIN and $GOPATH are properly set, execute the program as: $ subzy --help Subdomain takeover tool Usage: subzy command...

CVE-2023-7028

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

CVE-2023-7028

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

CVE-2023-7028-Account-Take-Over-Gitlab

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

POC_CVE-2024-40492

CVE-2024-40492: Stored XSS to ATO Description Stored Cross-Site Scripting XSS is a type of security vulnerability typically found in web applications. It occurs when an attacker is able to inject malicious scripts into a web application, and those scripts are stored on the server. When other user...

Exploit for CVE-2026-109618

php2shell-check Check in about a minute whether a server is a...

Oracle Order Capture security vulnerability

A security vulnerability exists in Oracle Order Capture versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow highly privileged attackers to take over Order Capture via HTTP network access...

Oracle Applications Platform Engineering security vulnerabilities

A security vulnerability exists in Oracle Applications Platform Engineering versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Valid Session component and may allow low-privilege attackers to log in, gain control of the infrastructure, and take over Applications...

CVE-2026-110124

The FastBee IoT platform, versions through 2.1.0 , is susceptible to an Insecure Direct Object Reference (IDOR) vulnerability within the DeviceController . This flaw allows authenticated low-privilege users to access and manipulate data belonging to other tenants by providing sequential device ID...

CVE-2026-110124 FastBee through 2.1.0 IDOR via DeviceController /iot/device Endpoints

FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authenticated low-privilege users to read and modify other tenants' devices by supplying sequential device IDs. Self-registered attackers can enumerate deviceId or serialNumber values ...

can-i-take-over-xyz

Aviso legal ⚠️ Los autores de este documento no asumen ninguna responsabilidad por la exactitud. Este proyecto solo está aquí para ayudar a guiar a los investigadores de seguridad a determinar si algo es vulnerable o no, pero no garantiza precisión. Este proyecto depende en gran medida de las...

CVE-2026-84252 click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Arbitrary Options Update

The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to WPForms WordPress plugin through 1.0.3. As a result,...

CVE-2026-84253: Missing Authorization

The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3. As a...

CVE-2026-84252: Missing Authorization

The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to WPForms WordPress plugin through 1.0.3. As a result,...

CVE-2026-103692 Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation via Arbitrary Function Call

The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including...

CVE-2026-107450

In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations crates/graphql/src/mutation/smartlists.rs depend only on the shared AccessSmartList permission and resolve the target list at Reader access lacking a creator check. Any authenticated user with that permission can...

EUVD-2026-94401

Gophish through 0.12.1 contains an insecure direct object reference vulnerability that allows authenticated users to take over other users' groups, templates, landing pages and sending profiles. Attackers can supply another user's sequential id in POST requests to /api/groups/, /api/templates/,...

CVE-2026-107270

Gophish through 0.12.1 contains an insecure direct object reference vulnerability that allows authenticated users to take over other users' groups, templates, landing pages and sending profiles. Attackers can supply another user's sequential id in POST requests to /api/groups/, /api/templates/,...

PT-2026-107574

Gophish through 0.12.1 contains an insecure direct object reference vulnerability that allows authenticated users to take over other users' groups, templates, landing pages and sending profiles. Attackers can supply another user's sequential id in POST requests to /api/groups/, /api/templates/,...

PT-2026-96675

Name of the Vulnerable Software and Affected Versions wpForo Forum versions prior to 3.1.6 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attackers with subscriber-level access or higher can...