PT-2026-103307

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.18991 Description Mailbox integration allows authentication to persist or be performed after a password reset has occurred. Recommendations Update to version 2026.2.18991...

PT-2026-103302

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.2 JetBrains TeamCity versions prior to 2026.1.4 JetBrains TeamCity versions prior to 2025.11.8 Description An issue exists that allows for administrator account takeover through the password reset...

PT-2026-103548

Name of the Vulnerable Software and Affected Versions Kiteworks Core versions prior to 9.5.1 Description Kiteworks Core fails to correctly validate a parameter within the password reset workflow. This allows an unauthenticated attacker who knows the email address of a user with a locally stored...

CVE-2026-102586: Improper Neutralization of Input During Web Page Generation

A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cross-site scripting XSS attack. By convincing an unauthenticated user to access a specially crafted password reset link, an attacker could execute arbitrary...

CVE-2026-102115: Weak Password Recovery Mechanism for Forgotten Password

Kiteworks Core did not correctly validate a parameter submitted to the password reset workflow. An unauthenticated attacker who knew the email address of a user with a locally stored password could potentially reset that account's password without access to the emailed reset link and then...

CVE-2026-100260: Initialization of a Resource with an Insecure Default

In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...

PT-2026-103094

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description Insufficient sanitization of the username input on the password reset page allows a remote attacker to perform a cross-site scripting XSS attack. XSS is a flaw where malicious scripts are...

CVE-2026-100255: Improper Validation of Unsafe Equivalence in Input

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset...

EUVD-2026-88577

mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd endpoint that allows unauthenticated attackers to reset any storefront account password. Attackers can supply a target username in the request body to overwrite passwords without verification, enabling...

CVE-2026-102361

mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd endpoint that allows unauthenticated attackers to reset any storefront account password. Attackers can supply a target username in the request body to overwrite passwords without verification, enabling...

CVE-2026-102361: Missing Authentication for Critical Function

mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd endpoint that allows unauthenticated attackers to reset any storefront account password. Attackers can supply a target username in the request body to overwrite passwords without verification, enabling...

SUSE CVE-2026-18147

A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting XSS vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute...

CVE-2026-102361 mall4j through 4.0 Missing Authentication in Password Update Endpoint

mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd endpoint that allows unauthenticated attackers to reset any storefront account password. Attackers can supply a target username in the request body to overwrite passwords without verification, enabling...

CVE-2026-102361 mall4j through 4.0 Missing Authentication in Password Update Endpoint

mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd endpoint that allows unauthenticated attackers to reset any storefront account password. Attackers can supply a target username in the request body to overwrite passwords without verification, enabling...

CVE-2026-102361

The mall4j software, version through 4.0 , is vulnerable to a missing authentication flaw in the PUT /user/updatePwd endpoint. This vulnerability allows unauthenticated attackers to reset the password of any storefront account by providing a target username in the request body without verificatio...

freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL

A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting XSS vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute...

CVE-2025-14783-POC

🧨 CVE-2025-14783: Easy Digital Downloads 账户接管 PoC “信任是最可利用的安全缺陷。” 💀 描述 本仓库包含针对 CVE-2025-14783 的可运行概念验证（PoC），该漏洞是 WordPress 插件 Easy Digital Downloads EDD （版本 'passwordresetrequested', 'key' = $key, 'login' = rawurlencode $userlogin , , escurlraw $POST'eddredirect' // --- 注入点 , $message ; 通过控制...

Important: ipa

Issue Overview: A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting XSS vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject...

PT-2026-102404

Name of the Vulnerable Software and Affected Versions mall4j versions prior to 4.0 Description A missing authentication flaw exists in the 'PUT /user/updatePwd' endpoint. This allows unauthenticated attackers to reset the password of any storefront account by providing a target username in the...

CVE-2026-101041

The account recovery password reset functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use TOCTOU race condition in the consumption of single-use recovery tokens. The original implementation verified the token nonce against the stored digest and then...