can-i-take-over-xyz

免责声明 ⚠️ 本文档的作者对内容的正确性不承担任何责任。本项目仅用于帮助安全研究人员判断某资源是否存在漏洞，但不保证准确性。本项目严重依赖社区贡献；因此，证明某资源存在漏洞最终由安全研究人员和漏洞赏金计划自行决定。 此外，需要明确的是，本项目的目的并非识别或披露针对各种服务安全措施的绕过方法。相反，此类绕过方法应直接报告给受影响的服务，以便采取适当措施。 最后，值得注意的是，某些漏洞赏金计划可能直接接受悬空DNS记录报告，而不要求提供被利用的证据。 什么是子域名接管？ 子域名接管漏洞是指当某个子域名（subdomain.example.com）指向一个已被删除或移除的服务（例如...

EUVD-2026-92145

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument...

CVE-2026-105169

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument...

CVE-2026-105169 kishor-23 food-waste-management-system Take Order delivery.php sql injection

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument...

CVE-2026-105169

A security flaw exists in the Take Order Handler component of the kishor-23 food-waste-management-system . Specifically, an unknown function within the delivery/delivery.php file is vulnerable to SQL injection due to the improper handling of the order_id and delivery_person_id arguments. This vul...

CVE-2023-7028

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

PT-2026-104658

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument...

CVE-2023-7028

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

POC_CVE-2024-40492

CVE-2024-40492: Stored XSS to ATO Description Stored Cross-Site Scripting XSS is a type of security vulnerability typically found in web applications. It occurs when an attacker is able to inject malicious scripts into a web application, and those scripts are stored on the server. When other user...

subzy

Subzy Subdomain takeover tool which works based on matching response fingerprints from can-i-take-over-xyz Installation go install -v github.com/PentestPad/subzy@latest If $GOBIN and $GOPATH are properly set, execute the program as: $ subzy --help Subdomain takeover tool Usage: subzy command...

s3-bucket-take-0v3r

s3-bucket-take-0v3r S3 Bucket Takeover Scanner & Claim Tool 📌 Description S3 Bucket Takeover Scanner & Claim Tool is a Python 2.7-based utility that: 1. Scans domain names to identify potential Amazon S3 bucket takeover vulnerabilities. 2. Automatically claims unregistered S3 buckets and uploads ...

CVE-2023-7028-Account-Take-Over-Gitlab

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

CVE-2026-97933

In the Linux kernel, the following vulnerability has been resolved: tracing: Take tracearray reference when opening a tracer options file When a tracer option file is opened, it is passed a descriptor that points to an element on the tracearray's topts array. This element has information to find...

EUVD-2026-85040

The Events Calendar WordPress plugin before 6.17.5 does not perform a per-object capability check on one family of its REST write routes, allowing users with a low-privilege role such as contributor to modify, unpublish, trash and take ownership of records belonging to other users, including...

PT-2026-96675

Name of the Vulnerable Software and Affected Versions wpForo Forum versions prior to 3.1.6 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attackers with subscriber-level access or higher can...

CVE-2026-63472: Improper Authentication

Vendure is an open-source headless commerce platform. Prior to 3.7.0, ExternalAuthenticationService.createCustomerAndUser in packages/core/src/service/helpers/external-authentication/external-authentication.service.ts selects an existing customer user by emailAddress and attaches a newly presente...

AZL-100892 CVE-2026-89576 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadatatakesnap bumps the live superblock refcount and then dmtmshadowblock allocates a new block for the metadata snapshot. If the subsequent dmsmincblock of...

CVE-2026-89576

In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadatatakesnap bumps the live superblock refcount and then dmtmshadowblock allocates a new block for the metadata snapshot. If the subsequent dmsmincblock of...

DEBIAN-CVE-2026-89576

In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadatatakesnap bumps the live superblock refcount and then dmtmshadowblock allocates a new block for the metadata snapshot. If the subsequent dmsmincblock of...

UBUNTU-CVE-2026-89576

In the Linux kernel, the following vulnerability has been resolved: dm-era: fix shadowed superblock leak on take-snap failure metadatatakesnap bumps the live superblock refcount and then dmtmshadowblock allocates a new block for the metadata snapshot. If the subsequent dmsmincblock of...