18028 matches found
Adobe Commerce/Magento - Customer Session Identity Switch
Adobe Commerce contains an incorrect authorization vulnerability caused by improper access control, letting attackers escalate privileges to access sensitive resources, exploit requires no user interaction. id: CVE-2026-71362 info: name: Adobe Commerce/Magento - Customer Session Identity Switch...
Total Donations Plugin for WordPress < 2.0.6 - Arbitrary Options Update
Incorrect access control in miglaajaxfunctions.php in the Calmar Webmedia Total Donations plugin through 2.0.5 for WordPress allows unauthenticated attackers to update arbitrary WordPress option values, leading to site takeover. These attackers can send requests to wp-admin/admin-ajax.php to call...
Flowise <= 3.0.5 - Account Takeover
Flowise versions 3.0.5 and earlier had a vulnerability in the forgot-password endpoint, which returned valid reset tokens without authentication—allowing attackers to reset passwords and take over accounts. id: CVE-2025-58434 info: name: Flowise = 3.0.5 - Account Takeover author:...
SysAid On-Prem <= 23.3.40 - XML External Entity
SysAid On-Prem versions = 23.3.40 are vulnerable to an unauthenticated XML External Entity XXE vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives. id: CVE-2025-2775 info: name: SysAid On-Prem = 23.3.40 - XML External Entity...
Order Delivery Date Pro for WooCommerce < 12.3.1 - Arbitrary Option Update
The Order Delivery Date WordPress plugin before 12.3.1 does not have authorization and CSRF checks when importing settings. Furthermore it also lacks proper checks to only update options relevant to the Order Delivery Date WordPress plugin before 12.3.1. This leads to attackers being able to modi...
Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass
Keycloak versions prior to 26.7.2, 26.6.6, and 26.4.15 contain a flaw in the reset-credentials flow that allows an unauthenticated attacker to bypass email verification and take over any user account. Two bugs are chained: 1 the tryAnotherWay handler stores a generic "true" selector note not scop...
domain-protect
domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...
dnsReaper
DNS Reaper DNS Reaper is yet another sub-domain takeover tool, but with an emphasis on accuracy, speed and the number of signatures in our arsenal! We can scan around 50 subdomains per second, testing each one with over 50 takeover signatures. This means most organisations can scan their entire D...
zer0dump
Zer0Dump Zer0dump es un PoC de exploit/herramienta para abusar de las vulnerabilidades asociadas con CVE-2020-1472 Zerologon con el fin de iniciar una toma de control completa del sistema de un controlador de dominio de Windows sin parchear. Agradecimientos especiales a @dirkjanm y @SecureAuthCor...
CVE-2025-28355
CVE-2025-28355 Se identificó que la aplicación https://github.com/Volmarg/personal-management-system es vulnerable a ataques CSRF, una de las muchas acciones que un atacante puede realizar es engañar a un usuario legítimo para que ejecute una solicitud de sitio cruzado que alterará su contraseña,...
robusto
RobuSTO 💥 Robust-Subdomain-Takeover 💥 Obtén una lista de dominios y busca subdomain takeovers. ¿En qué se diferencia de otras herramientas? Esta herramienta fue construida alrededor de la idea de automatizar el proceso y permitir que los equipos azules blue-teams la usen para escanear sus propios...
CVE-2022-31294
CVE-2022-31294 Online Discussion Forum Site 1.0 - Account Takeover Exploit Title: Online Discussion Forum Site 1.0 - CSRF Create New/Update Existing Admin User Account Takeover Date: 2022-06-13 CVE: CVE-2022-31294 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage:...
CVE-2026-27886-PoC-Account-Takeover
CVE-2026-27886 Automated Exploit - Usage Guide What This Script Does Automates the full account takeover chain in 4 HTTP request groups: 1. Vulnerability Verification - Confirms the target is vulnerable 2. Email Enumeration - Extracts admin email via boolean oracle 500 requests 3. Password Reset...
CVE-2026-8181
CVE-2026-8181 Burst Statistics | Omisión de autenticación para apropiación de cuenta de administrador Descripción : Burst Statistics 3.4.0 - 3.4.1.1 - Omisión de autenticación para apropiación de cuenta de administrador El plugin Burst Statistics – Privacy-Friendly WordPress Analytics Google...
CVE-2026-12416-CVE-2026-12417
CVE-2026-12416-CVE-2026-12417 Unauthenticated Account Takeover via Weak Password Reset Validation via 'resetuserid' Parameter | Unauthenticated Privilege Escalation via Weak Password Reset Validation via 'resetactivationcode' Leading to Account Takeover CVE-2026-12417 & CVE-2026-12416 — Mass...
CVE-2026-6741
CVE-2026-6741 CVE-2026-6741 is a CVSS 8.8 High Authenticated Agent+ Privilege Escalation vulnerability in the LatePoint – Calendar Booking Plugin CVE-2026-6741 — LatePoint Privilege Escalation Scanner Plugin: LatePoint – Calendar Booking Plugin for Appointments and Events latepoint CVE ID:...
CVE-2026-5076
CVE-2026-5076 - ARMember Password Reset Vulnerability Vulnerability Information Item| Detail ---|--- CVE ID| CVE-2026-5076 Plugin| ARMember – Membership Plugin & Content Restriction Affected Version| Premium = 7.3.1 Patched Version| 7.3.2 CVSS Score| 9.8 Critical CWE| CWE-640: Weak Password...
CVE-2026-5229
CVE-2026-5229 CVE-2026-5229: Form Notify Auth Bypass via LINE OAuth Callback CVSS 9.8 Form Notify — LINE OAuth Authentication Bypass Scanner Plugin: Form Notify form-notify Vulnerability Type: Unauthenticated LINE OAuth Authentication Bypass → Account Takeover CVSS Score: 9.8 Critical CVSS Vector...
CVE-2026-8732-EXPLOIT
CVE-2026-8732 – Exploit para WordPress WP Maps Pro Toma de control de administrador sin autenticación | CVSS 9.8 | Listo para usar 🔥 Lo que obtienes Exploit de Python totalmente funcional para CVE-2026-8732 Creación de cuenta de administrador sin autenticación Devuelve una URL de inicio de sesión...