CVE-2026-27886-PoC-Account-Takeover

CVE-2026-27886 Exploit Automatizado - Guía de Uso Qué Hace Este Script Automatiza la cadena completa de apropiación de cuentas en 4 grupos de peticiones HTTP: 1. Verificación de Vulnerabilidad - Confirma que el objetivo es vulnerable 2. Enumeración de Correo Electrónico - Extrae el correo del...

CVE-2025-51859

CVE-2025-51859 Descripción de la vulnerabilidad Chaindesk, una aplicación web para construir Agentes de IA, es vulnerable a Cross-Site Scripting XSS Almacenado en su componente de chat de agentes. Un atacante puede lograr la ejecución arbitraria de scripts en el lado del cliente creando un agente...

CVE-2025-51858

CVE-2025-51858 Descripción de la vulnerabilidad ChatPlayground.ai es una aplicación web popular para comparar modelos de IA. Existe una vulnerabilidad de Cross-Site Scripting XSS en el componente de chat. Esto puede llevar al robo de tokens JWT y al secuestro remoto de cuentas. Además, el endpoin...

CVE-2026-88055

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.16.1 and earlier, the manager role can store metapagetitle or metapagefavicon through /api/admin/system-preferences, and MetaGenerator inserts those values into...

CVE-2026-88055 AnythingLLM: Stored XSS Due to Unescaped Server-Side HTML Concatenation in MetaGenerator

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.16.1 and earlier, the manager role can store metapagetitle or metapagefavicon through /api/admin/system-preferences, and MetaGenerator inserts those values into...

CVE-2026-88055 AnythingLLM: Stored XSS Due to Unescaped Server-Side HTML Concatenation in MetaGenerator

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.16.1 and earlier, the manager role can store metapagetitle or metapagefavicon through /api/admin/system-preferences, and MetaGenerator inserts those values into...

EUVD-2026-75642

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.16.1 and earlier, the manager role can store metapagetitle or metapagefavicon through /api/admin/system-preferences, and MetaGenerator inserts those values into...

CVE-2026-81029

OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServlet reads the callback request parameter and stores it in the HTTP session without comparing it against any configured or registered destination, and the assertion consumer...

CVE-2026-45745

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Starting in version 1.7.0, Termix Desktop Electron disables TLS certificate validation, allowing a machine-in-the-middle attacker to intercept and modify HTTPS traffic to the configured...

CVE-2026-42239

Budibase (backend-core, budibase:auth cookie) is affected prior to version 3.35.10. The issue is that the budibase:auth cookie is set HTTPOnly: false, lacks secure: true and sameSite, allowing access to the JWT session token via document.cookie. This enables any XSS to escalate to full account ta...

AIBOX Cross Site Scripting

AIBOX is a web application for exploring AI consulting and trying out multiple LLMs. It allows users to chat with various LLMs. A reflected cross site scripting XSS vulnerability exists in the chat component, which could lead to JWT token theft and remote account hijacking...

next-auth security vulnerability

next-auth is the complete open source authentication solution for Next.js applications. A security vulnerability exists in versions of next-auth prior to 4.24.5, which stems from an attacker being able to obtain a NextAuth.js-issued JWT from an interrupted OAuth login process status, PKCE, or...