Exploit for CVE-2026-18963

CVE-2026-18963 — Keycloak Reset-Credentials Bypass → Account T...

CVE-2025-4322

🔐 CVE-2025-4322 – Motors = 5.6.67 - Escalation di Privilegi Non Autenticata tramite Aggiornamento Password/Account Takeover 📌 Informazioni sul Tema Plugin : Motors = 5.6.67 - Escalation di Privilegi Non Autenticata tramite Aggiornamento Password/Account Takeover Versione Vulnerabile : = 5.6.67 CV...

CVE-2026-31309

CVE-2026-31309: Controllo di accesso improprio in Mysterium Node prima della v1.36.0 Un'autorizzazione impropria nell'endpoint /tequilapi/config/user di Mysterium Node dalla v1.21.1-rc0 fino alla v1.36.0 consente a un attaccante non autenticato di sovrascrivere arbitrariamente la configurazione d...

scriptkiddi3

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...

CVE-2021-40101

XSS nei sondaggi combinato con CSRF porta al takeover dell'account amministratore in Concrete5 8.5.4 Un amministratore di Concrete CMS nelle versioni precedenti alla 9 non doveva fornire la propria password quando cambiava la password di un altro utente. In combinazione con CVE-2021-28145 "Concre...

CVE-2025-65676

CVE-2025-65676 Vulnerabilità di Stored Cross-Site Scripting XSS in Classroomio LMS 0.1.13 consente ad attaccanti autenticati di eseguire codice arbitrario tramite immagini di copertina SVG appositamente create. Scoperta da - Rivek Raj Tamang RivuDon, Sikkim, India. Prodotto interessato: Classroom...

evilqr

Evil QR Toolkit demonstrating another approach of a QRLJacking attack, allowing to perform remote account takeover, through sign-in QR code phishing. It consists of a browser extension used by the attacker to extract the sign-in QR code and a server application, which retrieves the sign-in QR cod...

CVE-2026-71504

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API that allows attackers with only member-creation rights to reset the password of any user account, including the system administrator, without verifying password-change permissions. Attackers can supply...

CVE-2025-59382-QNAP-Password-Reset-Account-Takeover

CVE-2025-59382: QNAP पासवर्ड रीसेट से खाता अधिग्रहण अप्रमाणित हमलावर-नियंत्रित पासवर्ड रीसेट URL /cgi-bin/resetpassword.cgi में है। प्रयोगशाला में QuTScloud c5.2.4.3041 build 20250211 के विरुद्ध परीक्षण किया गया। QNAP ने बाद में इसे सलाह QSA-26-10 में CVE-2025-59382 के रूप में प्रकाशित किया।...

CVE-2024-50477

CVE-2024-50477 Stacks Mobile App Builder = 5.2.3 - Bypass di autenticazione tramite Account Takeover Descrizione: Il plugin Stacks Mobile App Builder – il più potente plugin drag and drop per la creazione di applicazioni mobili per WordPress è vulnerabile a un bypass di autenticazione in tutte le...

CVE-2026-71504 Dolibarr < 24.0.0 Members REST API Improper Authorization via Password Reset

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API that allows attackers with only member-creation rights to reset the password of any user account, including the system administrator, without verifying password-change permissions. Attackers can supply...

CVE-2026-71504 Dolibarr < 24.0.0 Members REST API Improper Authorization via Password Reset

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API that allows attackers with only member-creation rights to reset the password of any user account, including the system administrator, without verifying password-change permissions. Attackers can supply...

tko-subs

tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...

CVE-2026-66917

IDOR + XSS المخزّن عبر كسر التفويض على مستوى الكائن في JoomGallery JoomGallery ≤ 4.3.0 — مستخدم بدور المحرر يختطف أي صورة في المعرض ويخزّن حمولة XSS، مما يتيح الاستيلاء على جلسة المسؤول الملخص تتحقق الدالة UserimageController::save في JoomGallery من checkACL'edit', ... بدلاً من checkACL'edit.own'...

CVE-2025-64495-POC

CVE-2025-64495-POC Open WebUI vulnerabile a Stored DOM XSS tramite prompt quando 'Insert Prompt as Rich Text' è abilitato, con conseguente ATO/RCE Riepilogo La funzionalità che inserisce prompt personalizzati nella finestra di chat è vulnerabile a DOM XSS quando 'Insert Prompt as Rich Text' è...

keycloak-cve-2026-18963-hunt

CVE-2026-18963: Keycloak account takeover, caccia alle tracce di sfruttamento Uno script psql che cerca in un database PostgreSQL di Keycloak le tracce dello sfruttamento di CVE-2026-18963 account takeover non autenticato tramite il flusso reset-credentials. Pubblicato da KYOS. Lo abbiamo scritto...

CVE-2026-18315-PoC

CVE-2026-18315-PoC Prova di concetto per CVE-2026-18315 Plugin WordPress TrueBooker = 1.2.6: Bypass dell'autorizzazione senza autenticazione tramite chiave controllata dall'utente per il furto dell'account...

CVE-2026-78414

A cross-site scripting (XSS) vulnerability exists in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 (Linux, Windows, macOS). An adjacent-network attacker who controls a rogue Nx server on the same network segment can set that server's site name to a script p...

EUVD-2026-64898

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

CVE-2026-78414 Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...