CVE-2026-108157

Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in OAuthService.signUp. Attackers can register a victim's unverified email on an enabled OAuth/OI...

EUVD-2026-95891

Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor 2FA bypass...

CVE-2026-108157 Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OAuth Email Linking

Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in OAuthService.signUp. Attackers can register a victim's unverified email on an enabled OAuth/OI...

CVE-2026-108157

Pingvin Share X versions 0.19.0 before 1.22.0 are vulnerable to an improper authentication flaw in the OAuthService.signUp() function. The root cause is a missing email_verified check in the GenericOidcProvider, which allows unauthenticated remote attackers to perform an account takeover . By reg...

EUVD-2026-95905

Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in OAuthService.signUp. Attackers can register a victim's unverified email on an enabled OAuth/OI...

CVE-2026-107814

MariaDB server RPM packages (versions 10.6.1 to 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2) are vulnerable due to the mysql service account being created with the database data directory as its home directory. A database user possessing the FILE privilege can write startup dot-files, ...

CVE-2026-108109

PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows unauthenticated attackers to brute-force the 6-digit otpcode. Attackers knowing a customer username can guess the code without attempt limits or...

CVE-2026-107808 Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, POST /api/login checks EnabledOTP but does not require a WebAuthn assertion when EnabledPasskey is true and no TOTP secret is configured. A passkey-only account is therefore issued a session after password...

CVE-2026-107808

The Nginx UI web user interface (versions 2.0.0 to 2.5.0 ) is vulnerable to an authentication bypass due to improper 2FA enforcement. Specifically, the POST /api/login endpoint fails to require a WebAuthn assertion when EnabledPasskey is true and no TOTP secret is configured, even if EnabledOTP i...

CVE-2026-108109 PHPNuxBill through 2025.3.20 Account Takeover via Brute-Forceable Password Reset Code

PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows unauthenticated attackers to brute-force the 6-digit otpcode. Attackers knowing a customer username can guess the code without attempt limits or...

EUVD-2026-95810

PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows unauthenticated attackers to brute-force the 6-digit otpcode. Attackers knowing a customer username can guess the code without attempt limits or...

CVE-2026-108109

PHPNuxBill versions through 2025.3.20 are vulnerable to an account takeover due to a flaw in the customer password reset flow within system/controllers/forgot.php. The vulnerability allows unauthenticated attackers who know a customer's username to brute-force a 6-digit otp_code because the syste...

sh00t

A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or task management...

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

CVE-2024-34469

CVE-2024-34469 La versión Rukovoditel hasta la 3.5.3 se ve afectada por un ataque de cross-site scripting XSS El payload puede incrustarse en dos lugares: en la página de registro y en la cuenta personal del usuario con cualquier privilegio. La vulnerabilidad está en el parámetro userphoto. 1...

CVE-2020-10239

作者：HK CVE-2020-10239：comfields SQL字段中的不正确的访问控制 - 远程代码执行 PoC 受影响版本：Joomla核心 3.7.0 至 3.9.15 用户要求：管理员账户（后端最低权限） 获取权限：将您从管理员提升为超级管理员，然后触发远程代码执行。 Joomla中的远程代码执行（RCE） 使用您的凭据运行 cve202010239.py 并访问远程代码执行链接：...

CVE-2025-59382-QNAP-Password-Reset-Account-Takeover

CVE-2025-59382: QNAP パスワードリセットからアカウント乗っ取りへ 認証されていない攻撃者が制御するパスワードリセットURLが/cgi-bin/resetpassword.cgiに存在します。 ラボでQuTScloud c5.2.4.3041 build 20250211に対してテストしました。QNAPは後にこれをアドバイザリQSA-26-10でCVE-2025-59382として公開しました。 概要...

warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...

CVE-2026-64638

CVE-2026-64638 登录页面上的反射型 XSS 导致 PHP 代码执行——WordPress Core 软件： WordPress Core ≤ 7.0.2（7.0.3 之前的所有版本） CVSS： 8.9（高危） CWE： CWE-79——网页生成期间输入未正确中和 所需认证： 无（预认证） 用户交互： 主动（管理员需点击 1 个链接） 影响： XSS → 账户接管 → 远程代码执行 1. 这是什么漏洞？ WordPress 是全球最流行的内容管理系统，占互联网上所有网站的 40% 以上。每个 WordPress 站点都有一个位于 /wp-login.php...

gitlab-exploit

gitlab-exploit GitLab CVE-2023-7028 GitLab CVE-2023-7028 La vulnerabilidad fue causada por un error en la forma en que GitLab manejaba la verificación de correo electrónico durante el restablecimiento de contraseña. Un atacante podía proporcionar dos direcciones de correo electrónico en una...