OutlookNTLM_CVE-2023-23397

要利用此漏洞，攻击者必须创建一封恶意日历邀请，其中包含对声音文件的引用，并指向攻击者机器上网络共享中的文件。在底层，Outlook 邮件将声音文件的引用存储在一个名为“PidLidReminderFileParameter”的内部参数中。为了确保我们嵌入在恶意邮件中的音频优先于受害者的默认提醒配置，我们还需要将另一个名为“PidLidReminderOverride”的参数设置为 true。 要将“PidLidReminderFileParameter”属性设置为指向网络共享，攻击者可以指定通用命名约定（UNC）路径，而不是本地文件。UNC 用于 Windows...

CVE-2024-39031

CVE-2024-39031 : XSS almacenado en Silverpeas Core en Mes agendas Información Descripción: En Mes Agendas, un usuario puede crear nuevos eventos y añadirlos a su calendario. Además, los usuarios pueden invitar a otros del mismo dominio, incluidos administradores, a estos eventos. Un usuario...

CVE-2026-84637

This vulnerability affects Mozilla Thunderbird on Windows , where malicious calendar invitations could use file URI attachments to launch local or network-hosted executables, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment ...

CVE-2026-46552

CVE-2026-46552 NocoDB 共享基础链接可能邀请真实基础成员并在共享撤销后依然存活 简介 我在审查 NocoDB 时发现了这个问题，出发点是一个简单的安全问题： 公共共享基础链接能否跨越临时共享访问的边界，进入真实的认证基础成员身份？ 在这个案例中，答案是肯定的。 一个仅由 xc-shared-base-id 认证的共享基础会话，在 ACL 层面被当作普通的基础查看者。由于查看者权限仍然覆盖了成员管理端点，拥有共享基础 UUID 的用户可以枚举现有的基础成员，并邀请任意邮箱地址成为该基础的真实成员。...

CVE-2024-23724

安装 自动安装（推荐） 为了测试该漏洞，我们需要两个账号：一个具有管理员（所有者）角色的账号，以及一个具有贡献者角色的账号。在 Ghost CMS 中，首先需要访问管理面板来创建所有者账号，然后从该账号邀请一位贡献者，让其创建自己的账号。然而，在 Ghost 中，邀请贡献者的唯一方式是通过电子邮件发送邀请链接，这需要一个邮件投递服务来将邮件发送到贡献者的账号。为了方便起见，我们创建了一个 Mailgun 账号，向 Ghost 添加了一个贡献者，然后在我们所处的状态下创建了一个数据库转储文件。在我们的 Docker Compose 配置中，我们确保在启动 Ghost...

CVE-2026-1529-PoC-keycloak-unauthorized-registration-via-improper-invitation-token-validation

Ferramenta de Exploração do Keycloak CVE-2026-1529 Keycloak: registro não autorizado de organização via validação inadequada de token de convite Aviso Legal Esta ferramenta é apenas para fins educacionais e de teste de segurança. Utilize apenas em sistemas para os quais você tenha permissão...

CVE-2026-1529-PoC-keycloak-unauthorized-registration-via-improper-invitation-token-validation

Strumento di Exploit per CVE-2026-1529 Keycloak Keycloak: registrazione non autorizzata di organizzazioni tramite validazione impropria del token di invito Disclaimer Questo strumento è destinato esclusivamente a scopi educativi e di test di sicurezza. Utilizzalo solo su sistemi per cui hai...

CVE-2026-1529

Ferramenta de Exploração CVE-2026-1529 Keycloak CVE-2026-1529 : Keycloak - Registro não autorizado de organização via validação inadequada de token de convite ⚠️ AVISO : Esta ferramenta é apenas para fins educacionais e de testes de segurança autorizados. O acesso não autorizado a sistemas de...

CVE-2026-77508

Weblate is a web based localization tool. Prior to 2026.8, an authenticated user can change the account's primary email through PUT or PATCH requests to /api/users/username/ without verifying the new address, allowing a later team invitation for that address to be accepted without access to the...

CVE-2026-77508 Weblate: Unverified REST API email changes

Weblate is a web based localization tool. Prior to 2026.8, an authenticated user can change the account's primary email through PUT or PATCH requests to /api/users/username/ without verifying the new address, allowing a later team invitation for that address to be accepted without access to the...

CVE-2026-77508

Weblate , a web-based localization tool, is affected by an unverified email-change vulnerability prior to version 2026.8 . An authenticated user can modify their primary email via PUT or PATCH requests to /api/users/{username}/ without the new address being verified. This allows a subsequent team...

CVE-2026-77146

The extension's invitation controller fails to stop processing after redirecting on invalid input missing hash, non-existent, disabled, or deleted users, allowing an unauthenticated attacker to set a new password for and re-enable an arbitrary existing frontend user account. This vulnerability is...

EUVD-2026-65330

The extension's invitation controller fails to stop processing after redirecting on invalid input missing hash, non-existent, disabled, or deleted users, allowing an unauthenticated attacker to set a new password for and re-enable an arbitrary existing frontend user account. This vulnerability is...

CVE-2026-77146

CVE-2026-77146 affects the TYPO3 extension femanager (version 8.x ). The invitation controller fails to stop processing after redirecting on invalid input — specifically missing hash, non-existent, disabled, or deleted users — allowing an unauthenticated attacker to set a new password for and re-...

CVE-2026-56709

Grav before 3.9.2 fails to validate untrusted Host headers in the sendInvitationEmail function when constructing token-bearing invitation links. Attackers can manipulate the Host header to poison invitation links and redirect users to attacker-controlled domains, bypassing the requiretrustedhost...

EUVD-2026-65207

Grav before 3.9.2 fails to validate untrusted Host headers in the sendInvitationEmail function when constructing token-bearing invitation links. Attackers can manipulate the Host header to poison invitation links and redirect users to attacker-controlled domains, bypassing the requiretrustedhost...

CVE-2026-56709 Grav before 3.9.2 Host Header Injection via sendInvitationEmail

Grav before 3.9.2 fails to validate untrusted Host headers in the sendInvitationEmail function when constructing token-bearing invitation links. Attackers can manipulate the Host header to poison invitation links and redirect users to attacker-controlled domains, bypassing the requiretrustedhost...

EUVD-2026-64673

A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeeminvitationcode of the file backend/app/api/routes/v1/userinvitationcode.py of the component Public Invitation-Code Redemption Endpoint. The manipulation of the argument code leads to missing...

CVE-2026-78154

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The endpoint is public on purpose and the invitation code is the credential. This is the standalone SD...

CVE-2026-78154

...