11985 matches found
CVE-2026-91980
vikunja before 2.6.0 contains an authorization flaw in the project teams endpoint: when attaching teams to projects, the application fails to validate whether the requesting user has access to the target team. An authenticated user can supply arbitrary team IDs via this endpoint to retrieve compl...
CVE-2026-91980 vikunja before 2.6.0 Team Enumeration via Project Share
vikunja before 2.6.0 fails to validate team access when attaching teams to projects, allowing authenticated users to enumerate all teams and members. Attackers can attach arbitrary team IDs via the project teams endpoint to retrieve complete team rosters including member names and admin flags for...
EUVD-2026-78651
vikunja before 2.6.0 fails to validate team access when attaching teams to projects, allowing authenticated users to enumerate all teams and members. Attackers can attach arbitrary team IDs via the project teams endpoint to retrieve complete team rosters including member names and admin flags for...
CVE-2026-91972 Vikunja before 2.6.0 Authentication Bypass via Unthrottled API
Vikunja versions before 2.6.0 fail to apply rate limiting to /api/v2 public authentication endpoints including login, register, password-reset, and OAuth token routes. Remote unauthenticated attackers can perform unbounded credential guessing, account enumeration, and password-reset flooding...
CVE-2026-91972
Vikunja versions before 2.6.0 fail to apply rate limiting to the /api/v2 public authentication endpoints (login, register, password-reset, and OAuth token routes). Remote unauthenticated attackers can perform unbounded credential guessing , account enumeration , and password-reset flooding withou...
CVE-2026-25197
CVE-2026-25197๏ผ้่ฟ็จๆทๅฏๆงๅฏ้ฅ็ป่ฟๆๆ๏ผIDOR๏ผ ๅฎๅ จๅ ฌๅ ๅญๆฎต| ๅผ ---|--- CVE| CVE-2026-25197 ICSA| ICSA-26-055-03๏ผๆดๆฐ A๏ผ CVSS 3.1| 9.1๏ผไธฅ้๏ผ ๅ้| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-639๏ผ้่ฟ็จๆทๅฏๆงๅฏ้ฅ็ป่ฟๆๆ๏ผ ็ ็ฉถไบบๅ| Michael Groberman โ Gr0m ๅๅธๆฅๆ| 2026-04-02๏ผๆดๆฐ A๏ผ ไบงๅ ๅญๆฎต| ๅผ ---|--- ๅๅ| Gardyn ไบงๅ| Gardyn Home Kit...
CVE-2026-91993 Jpom through 2.11.12 Workspace Isolation Bypass via /build/branch-list
Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list endpoint, allowing authenticated users to access repositories from other workspaces. Attackers can submit repository identifiers from different workspaces to enumerate repository...
CVE-2025-5802
The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of username existence. When a user attempts to register with an existing username, the system responds with an error message that explicitly indicates the username is already in use...
CVE-2025-13166
The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered user accounts based on the responses received during the OTP initiation process. This weakness can be exploited by an attacker to discover valid usernames within the system. The...
CVE-2026-41573
OpenAM prior to 16.1.1 is vulnerable to LDAP injection via the _queryId parameter in CREST REST API user query endpoints (/json/{realm}/users). The root cause is that IdentityResourceV1.queryCollection() passes _queryId to CrestQuery with escapeQueryId explicitly set to false , bypassing the esca...
CVE-2026-41573 OpenAM LDAP Injection via `_queryId` Parameter
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, IdentityResourceV1.queryCollection passes the queryId parameter from /json/realm/users to CrestQuery with escapeQueryId disabled, bypassing protection added for CVE-2021-29156. The unescaped value reaches...
CVE-2025-13166
WSO2 Identity Server is affected by a username enumeration vulnerability in its SMS OTP flow . The root cause is that the OTP initiation process returns differing error messages depending on whether the queried account exists and has a mobile number configured, allowing an attacker to infer valid...
CVE-2025-5802
CVE-2025-5802 is a username enumeration vulnerability in multiple WSO2 products , arising from the self-registration flow. When a user attempts to register with an already-existing username, the system returns an error message that explicitly indicates the username is in use, allowing an unauthen...
KUMO-Domain-Recon-Tool
ไธไธชๅๅใไธๆกๅฝไปคใๅฐฝ่งไธๅใ Kumo ๆฏไธไธชๅๅ OSINT ไธๅฎๅ จไพฆๅฏๆกๆถใ่พๅ ฅไธไธชๅๅโโๅณๅฏ้่ฟ 26 ไธชๅนถ่กๆจกๅ ๅฎๆถ่ทๅๅ จ้จไฟกๆฏ๏ผDNSใๅผๆพ็ซฏๅฃใๆณ้ฒๅญๆฎใไฟกๆฏ็ชๅ็จๅบๆๆใๅญๅจๆผๆด็็ซฏ็นใๅญๅๅใCVEใๆถๆ่ฝฏไปถๅฎถๆ็ญใbash pip install requests flask python3 kumo.py target.com full CLI scan python3 kumo.py target.com --fast fast mode skips slow modules python3 kumo.py --web web UI โ...
Advanced-SQL-Injection-Cheatsheet
MySQL ๅบไบ้่ฏฏ็ SQL ๆณจๅ ฅ้ๆฅ่กจ ่ฟๅฏ่ฝๆฏ SQL ๆณจๅ ฅๆปๅปไธญๆๅฎนๆๅฉ็จ็ไธ็ฑปๆผๆดใๆปๅป่ ๅฏไปฅๅฉ็จ SQL ้่ฏฏๆถๆฏๆฅๆไธพๅนถ่ฝฌๅจ MySQL ๆฐๆฎๅบใ ๆฃๆตๆผๆดhttp://domain.com/index.php?id=1 Website loads successfully http://domain.com/index.php?id=1' ้่ฏฏไฟกๆฏๆพ็คบไธบ๏ผYou have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the...
CVE-2026-15758 3D FlipBook <= 1.16.20 - Unauthenticated Sensitive Information Exposure in 'id' Parameter
The 3D FlipBook โ PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.16.20 via the 'id' parameter. This makes it possible for unauthenticated attackers to extract sensitive data...
atutor-blind-sqli
ATutor v2.2.1 ็ฒ SQL ๆณจๅ ฅ ๅฉ็จ CVE-2016-2555 ๆไธพๅนถๅฏผๅบๅบๅฑๆฐๆฎๅบใ ๅ ่ดฃๅฃฐๆ ๆฌๆๆไพ็ๆๆไฟกๆฏไป ไพๆ่ฒ็ฎ็ใ ๆจไธๅบๆปฅ็จ่ฟไบไฟกๆฏๆฅ่ทๅๆชๆๆ่ฎฟ้ฎๅ/ๆ็ผๅๆถๆ็จๅบใ ไฝ่ ไธๅฏนไฟกๆฏ็ๆปฅ็จ่ด่ดฃใ...
EUVD-2026-78249
Soft Serve versions 0.7.1 through 0.11.6 fail to scope Git LFS lock queries by repository, allowing authenticated users to read lock metadata from repositories they cannot access. Attackers with write access to any repository can enumerate lock IDs globally to recover locked file paths, usernames...
onedrive_user_enum
onedriveuserenum v2.10 ๆไธพๆๆ็ OneDrive ็จๆท ๆๅ ณๆไธพๆๆฏๅ OneDrive ๆไธพ็ๅฎๆด่ฏดๆ๏ผ่ฏทๅ้ ไปฅไธๅๅฎข๏ผ https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ ๅฆๆไฝ ๅจๅฏปๆพๆง็ใ้ๆฐๆฎๅบ็ๆฌ็ OneDrive Enum๏ผๅฏไปฅๅจ่ฟ้ๆพๅฐ๏ผhttps://github.com/nyxgeek/simplescanners 2.10 ็ๆฐ็นๆง๏ผ ่ฟ็จ MySQL ๆฐๆฎๅบๆฅๅฟ่ฎฐๅฝ้้กน -- ่ฎฐๅฝๅฐ่ฟ็จๆฐๆฎๅบ PAUSEFILE -- ๅฆๆๅญๅจ pausefile...
onedrive_user_enum
onedriveuserenum v2.10 enumerate valid onedrive users For a full rundown of the enumeration technique and OneDrive enum, check out the blog here: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ If you are looking for the old, non-database vesion of OneDrive Enum, you can find it here:...