can-i-take-over-xyz

免责声明 ⚠️ 本文档的作者对内容的正确性不承担任何责任。本项目仅用于帮助安全研究人员判断某资源是否存在漏洞，但不保证准确性。本项目严重依赖社区贡献；因此，证明某资源存在漏洞最终由安全研究人员和漏洞赏金计划自行决定。 此外，需要明确的是，本项目的目的并非识别或披露针对各种服务安全措施的绕过方法。相反，此类绕过方法应直接报告给受影响的服务，以便采取适当措施。 最后，值得注意的是，某些漏洞赏金计划可能直接接受悬空DNS记录报告，而不要求提供被利用的证据。 什么是子域名接管？ 子域名接管漏洞是指当某个子域名（subdomain.example.com）指向一个已被删除或移除的服务（例如...

CVE-2023-7028

CVE-2023-7028 | Toma de Control de Cuentas Gitlab Aviso legal Este código es una prueba de concepto de la vulnerabilidad, no insto a nadie a que lo use en instancias de Gitlab que no le pertenezcan. Esta herramienta ha sido desarrollada únicamente con fines de investigación y educativos, y no me...

CVE-2023-7028

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

POC_CVE-2024-40492

CVE-2024-40492: XSS Almacenado a ATO Descripción El Cross-Site Scripting XSS Almacenado es un tipo de vulnerabilidad de seguridad que se encuentra típicamente en aplicaciones web. Ocurre cuando un atacante puede inyectar scripts maliciosos en una aplicación web, y esos scripts se almacenan en el...

subzy

Subzy Herramienta de subdomain takeover que funciona comparando las huellas de respuesta de can-i-take-over-xyz Instalación root@kitploit: go install -v github.com/PentestPad/subzy@latest Si $GOBIN y $GOPATH están configurados correctamente, ejecute el programa como: root@kitploit: $ subzy --help...

CVE-2023-7028-Account-Take-Over-Gitlab

CVE-2023-7028 | Account-Take-Over Gitlab Aviso legal Este código es una prueba de concepto de la vulnerabilidad; no animo a nadie a usarlo en instancias de GitLab que no sean de su propiedad. Esta herramienta ha sido desarrollada únicamente con fines de investigación y educativos, y no me haré...

EUVD-2026-53106

The MultiVendorX WordPress plugin before 5.0.11 does not verify that the store targeted through its REST API belongs to the requesting vendor, allowing an authenticated vendor Store Owner and above to view, take over, permanently delete, or modify any other vendor's store on the marketplace...

GHSA-4VMM-5QVC-W5P7 Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure

Summary An Excessive Data Exposure vulnerability in the customers search endpoint allows an authenticated user to obtain appointment hashes belonging to other users. Using these hashes, an attacker can modify or delete appointments of other providers, resulting in an Appointments Takeover. Detail...

CVE-2026-60183

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Clone Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1...

PT-2026-64152

Name of the Vulnerable Software and Affected Versions Appriss Insights Equifax Victim Information Notification Exchange VINE affected versions not specified Description An unauthenticated attacker can send a specially-crafted request to bypass the login page. This allows for the unauthorized acce...

EUVD-2026-47436

Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft component: Integration. The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise PeopleSoft Enterpris...

EUVD-2026-47301

Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite component: Miscellaneous. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Project Foundation...

EUVD-2026-46976

Vulnerability in the JD Edwards EnterpriseOne Procurement and Subcontract Management product of Oracle JD Edwards component: Procurement. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD...

EUVD-2026-46924

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCente...

EUVD-2026-46724

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment...

EUVD-2026-46712

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

CVE-2026-60335

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62603

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component of Oracle WebCenter Portal allows a low privileged attacker with network access via HTTP to compromise the...

PT-2026-62395

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description A flaw in the Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via RMI Remote Method Invocation, a Jav...

PT-2026-62994

Name of the Vulnerable Software and Affected Versions Oracle GoldenGate versions 23.4 through 23.26.2 Description A flaw in the Config Service Executable allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full takeover o...