CVE-2026-39275

CVE-2026-39275 - XSS Almacenado que Lleva a la Toma de Control de Cuenta en Cockpit CMS Nota: Divulgado responsablemente y corregido por los mantenedores de Cockpit CMS antes de la publicación. | ---|--- ID CVE| CVE-2026-39275 Vulnerabilidad| Cross-Site Scripting Almacenado XSS → Toma de Control ...

CVE-2026-8206

CVE-2026-8206 Vulnerabilidad: Toma de control de cuenta no autenticada — Secuestro del correo de restablecimiento de contraseña en Kirki Customizer Framework CVSS v3.1 9.8 / 10.0 CRÍTICA Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 1. Resumen CVE-2026-8206 es una vulnerabilidad de Toma de control...

CVE-2025-63314

CVE-2025-63314 - Manejo inadecuado del token de restablecimiento de contraseña en Acora CMS Descubierto por Joby Y Daniel de Crowe India 📌 Resumen DDSN Interactive cm3 Acora CMS versión 10.7.1 contiene una vulnerabilidad de seguridad en su funcionalidad de restablecimiento de contraseña. La...

CVE-2022-1175

CVE-2022-1175 Gitlab Stored XSS, puede configurarse en un issue de un proyecto, ya sea propio o de otro usuario. Permite ataques como crear y robar un Personal Access Token PAT de cualquiera que visite el issue. Los PAT pueden proporcionar acceso completo a la API de Gitlab como ese usuario,...

CVE-2026-40487

CVE-2026-40487 - Postiz = 2.21.5 - Arbitrary File Upload via MIME-Type Spoofing to Stored XSS to Account Takeover Discovered & reported by: Astaruf Full writeup: https://nstsec.com/en/posts/postiz-xss-cve-2026-40487/ NVD entry: https://nvd.nist.gov/vuln/detail/CVE-2026-40487 GHSA entry:...

CVE-2026-22005-OAuth-2.0-Device-Code-Phishing-Short-Interval-

CVE-2026-22005 – Phishing de Código de Dispositivo OAuth 2.0 Intervalo Corto Código del Programa Python root@kitploit: devicecodeserver.py - Authorization server with too-fast polling import time, secrets codes = @app.route'/device/code' def devicecode: code = secrets.tokenurlsafe16 codescode =...

CVE-2025-1974

CVE-2025-1974 — IngressNightmare ingress-nginx Introduction This document presents a study of the vulnerability CVE-2025-1974 affecting the ingress-nginx component validating admission controller for Kubernetes. CVE-2025-1974 is a critical vulnerability CVSS 3.1 9.8, an unauthenticated Remote Cod...

tirreno

tirreno tirreno es un software de análisis de seguridad abierto. tirreno tir.ˈrɛ.no ayuda a entender, monitorear y proteger tus aplicaciones de amenazas cibernéticas, robos de cuentas, bots y abusos. Mientras que la ciberseguridad clásica se centra en la infraestructura y el perímetro de red, la...

CVE-2026-85530

The GiveWP WordPress plugin before 4.16.8.1 does not consistently normalise a donor's e-mail address between the value it stores and the value it later uses to look that donor up, allowing unauthenticated users to be resolved as an arbitrary donor and to set the WordPress password of any user...

CVE-2026-85530 GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization Mismatch

The GiveWP WordPress plugin before 4.16.8.1 does not consistently normalise a donor's e-mail address between the value it stores and the value it later uses to look that donor up, allowing unauthenticated users to be resolved as an arbitrary donor and to set the WordPress password of any user...

CVE-2026-85530

GiveWP is a popular WordPress donations plugin. Versions 4.16.6 through 4.16.8.0 contain an unauthenticated account takeover vulnerability (discovered by Jakub Herman). The root cause is an inconsistent normalization of a donor's e-mail address between the stored value and the value used in subse...

CVE-2025-58434

CVE-2025-58434 - Flowise unauthenticated account takeover, chained to CustomMCP RCE Two Flowise 3.0.5 issues, chained: 1. CVE-2025-58434 - password-reset token disclosure. POST /api/v1/account/forgot-password returns the target user's tempToken directly in the JSON response. Feed it to POST...

CVE-2025-65427

CVE-2025-65427: Authentication Rate Limiting Issue in Dbit N300 T1 Pro CVE ID: CVE-2025-65427 Date: 2025-12-16 Discoverer: Kirubel Product: Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router Firmware Version: V1.0.0 Description An issue was discovered in the Dbit N300 T1 Pro Easy Setup Wireless...

CVE-2026-14349

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 1.2.3 . The root cause is a missing permission check on the admin_addcustomer AJAX action in main/function_ajax.php, allowing unauthenticated at...

CVE-2025-15521

CVE-2025-15521 El plugin Academy LMS – WordPress LMS Plugin for Complete eLearning Solution para WordPress es vulnerable a la escalada de privilegios mediante la toma de control de cuentas en todas las versiones hasta la 3.5.0 inclusive. root@kitploit: | | | | || | | | || | | | | | | | --| | | ||...

DefinitelyNotPhishing

⚠️ Disclaimer This repository is intended solely for educational and testing purposes. All tools, configurations, and resources included here such as phishing templates, red team utilities, or offensive security scripts are provided strictly for use in authorized environments , such as labs, demos...

bug-bounty-reports-desai-vinayak

🧩 Bug Bounty Reports — Desai Vinayak 🔒 Bug bounty and vulnerability research reports by Desai Vinayak. This repository collects passive, non-destructive vulnerability write-ups and supporting evidence for coordinated disclosure and remediation tracking. 📁 Contents 📂 reports/ — PDF, DOCX, and...

CVE-2020-25498

CVE-2020-25498: XSS almacenado mediante CSRF en el router Beetel 777VR1 Descripción de la vulnerabilidad Se ha identificado que el endpoint vulnerable no tiene validación de entrada en el lado del servidor y carece de filtrado en el lado del cliente frente a cualquier inyección de script malicios...

EUVD-2026-80053

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows...

EUVD-2026-80052

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows...