can-i-take-over-xyz

免責事項 ⚠️ 本書の著者は、内容の正確性について一切の責任を負いません。本プロジェクトは、セキュリティ研究者が何かが脆弱であるかどうかを判断するための手助けを目的としていますが、正確性を保証するものではありません。本プロジェクトはコミュニティからの貢献に大きく依存しており、したがって、何かが脆弱であることを証明するかどうかは、セキュリティ研究者およびバグ報奨金プログラムの唯一の裁量に委ねられています。...

CVE-2023-7028

CVE-2023-7028 | GitLab 账户接管 免责声明 此代码是该漏洞的概念验证，我不鼓励任何人将其用于他们不拥有的 GitLab 实例。 此工具仅用于研究和教育目的，对于您使用它可能产生的任何后果，我不承担任何责任。 描述： CVE-2023-7028 是一个账户接管漏洞，允许用户在无需交互的情况下控制 GitLab 管理员账户。 该漏洞存在于重置密码时的电子邮件管理机制中。攻击者可以提交两个电子邮件地址，重置代码将同时发送到这两个地址。 因此，可以提供目标账户的电子邮件地址以及攻击者的电子邮件地址，然后重置管理员密码。 GitLab...

CVE-2023-7028

CVE-2023-7028 | Gitlab アカウント乗っ取り 免責事項 このコードは脆弱性の概念実証です。自身が所有していない GitLab インスタンスでの使用を推奨するものではありません。 このツールは研究および教育目的のみで開発されており、利用によるいかなる結果に対しても責任を負いません。 説明 これはリポジトリhttps://github.com/Vozec/CVE-2023-7028 のフォークです。エクスプロイトの使用方法を改善したものです。 CVE-2023-7028 は、ユーザーの操作なしに GitLab...

POC_CVE-2024-40492

CVE-2024-40492：存储型XSS导致账户接管 描述 存储型跨站脚本（XSS）是一种常见于Web应用程序的安全漏洞。当攻击者能够将恶意脚本注入Web应用程序，并且这些脚本存储在服务器上时，就会发生这种情况。当其他用户访问包含恶意脚本的数据时，该脚本会在他们的浏览器中执行。 复现步骤 1. 访问 https://app.heartbeat.chat/ 2. 使用以下详细信息创建账户： 名字： root@kitploit: giongfnef"test" 姓氏： root@kitploit: giongfnef" 3. 进入“Threads”，然后搜索名字 giongfnef -...

subzy

Subzy 子域名接管工具，通过匹配 can-i-take-over-xyz 的响应指纹来工作。 安装 root@kitploit: go install -v github.com/PentestPad/subzy@latest 如果 $GOBIN 和 $GOPATH 已正确设置，请按如下方式执行程序： root@kitploit: $ subzy --help Subdomain takeover tool Usage: subzy command Available Commands: help Help about any command run Run subzy versio...

CVE-2023-7028-Account-Take-Over-Gitlab

CVE-2023-7028 | Gitlab 账户接管漏洞 免责声明 此代码是该漏洞的概念验证，我不鼓励任何人将其用于不属于自己的 Gitlab 实例。 此工具仅用于研究和教育目的，对于您使用它所做的任何行为，我概不负责。 描述： CVE-2023-7028 是一个账户接管漏洞，允许用户在无需目标用户交互的情况下接管 Gitlab 管理员账户。 该漏洞存在于重置密码时的电子邮件管理机制中。攻击者可以提供两个电子邮件地址，重置代码将同时发送到这两个地址。 因此，攻击者可以同时提供目标账户的电子邮件地址和攻击者自己的电子邮件地址，从而重置管理员密码。 （Gitlab...

EUVD-2026-53106

The MultiVendorX WordPress plugin before 5.0.11 does not verify that the store targeted through its REST API belongs to the requesting vendor, allowing an authenticated vendor Store Owner and above to view, take over, permanently delete, or modify any other vendor's store on the marketplace...

GHSA-4VMM-5QVC-W5P7 Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure

Summary An Excessive Data Exposure vulnerability in the customers search endpoint allows an authenticated user to obtain appointment hashes belonging to other users. Using these hashes, an attacker can modify or delete appointments of other providers, resulting in an Appointments Takeover. Detail...

CVE-2026-60183

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Clone Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1...

PT-2026-64152

Name of the Vulnerable Software and Affected Versions Appriss Insights Equifax Victim Information Notification Exchange VINE affected versions not specified Description An unauthenticated attacker can send a specially-crafted request to bypass the login page. This allows for the unauthorized acce...

EUVD-2026-47436

Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft component: Integration. The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise PeopleSoft Enterpris...

EUVD-2026-47301

Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite component: Miscellaneous. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Project Foundation...

EUVD-2026-46976

Vulnerability in the JD Edwards EnterpriseOne Procurement and Subcontract Management product of Oracle JD Edwards component: Procurement. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD...

EUVD-2026-46924

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Runtime Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCente...

EUVD-2026-46724

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment...

EUVD-2026-46712

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

CVE-2026-60335

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62603

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Runtime Tools component of Oracle WebCenter Portal allows a low privileged attacker with network access via HTTP to compromise the...

PT-2026-62395

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description A flaw in the Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via RMI Remote Method Invocation, a Jav...

PT-2026-62994

Name of the Vulnerable Software and Affected Versions Oracle GoldenGate versions 23.4 through 23.26.2 Description A flaw in the Config Service Executable allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full takeover o...