parisneo/lollms < 2.2.0 - Authenticated Stored XSS

parisneo/lollms 2.2.0 contains a stored XSS caused by unsanitized user input in createpost function in backend/routers/social/init.py, letting attackers inject malicious scripts executed in user browsers, exploit requires crafted post submission. id: CVE-2026-1115 info: name: parisneo/lollms 2.2....

Read More & Accordion <= 3.5.7 - Authenticated Privilege Escalation

The Read More & Accordion expand-maker plugin for WordPress through 3.5.7 allows privilege escalation due to improper validation in the importData AJAX handler yrmimportdata action. An authenticated user with plugin access can upload a crafted JSON attachment to insert arbitrary rows into WordPre...

ClinicCases 7.3.3 Cross-Site Scripting

ClinicCases 7.3.3 is susceptible to multiple reflected cross-site scripting vulnerabilities that could allow unauthenticated attackers to introduce arbitrary JavaScript by crafting a malicious URL. This can result in account takeover via session token theft. id: CVE-2021-38704 info: name:...

ARMember < 3.4.8 - Unauthenticated Admin Account Takeover

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover even the administrator due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username. id:...

Order Delivery Date Pro for WooCommerce < 12.3.1 - Arbitrary Option Update

The Order Delivery Date WordPress plugin before 12.3.1 does not have authorization and CSRF checks when importing settings. Furthermore it also lacks proper checks to only update options relevant to the Order Delivery Date WordPress plugin before 12.3.1. This leads to attackers being able to modi...

SysAid On-Prem <= 23.3.40 - XML External Entity

SysAid On-Prem versions = 23.3.40 are vulnerable to an unauthenticated XML External Entity XXE vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives. id: CVE-2025-2775 info: name: SysAid On-Prem = 23.3.40 - XML External Entity...

N-able N-central < 2026.3.1.10 - Authentication Bypass

N-able N-central versions through 2026.3.1 contain an authentication bypass that lets a remote unauthenticated attacker take over an administrator account and gain full control of the N-central server. CVE-2026-18577 is a bypass of the incomplete fix for CVE-2026-18556, so the 2026.3.1 Hotfix 1...

Total Donations Plugin for WordPress < 2.0.6 - Arbitrary Options Update

Incorrect access control in miglaajaxfunctions.php in the Calmar Webmedia Total Donations plugin through 2.0.5 for WordPress allows unauthenticated attackers to update arbitrary WordPress option values, leading to site takeover. These attackers can send requests to wp-admin/admin-ajax.php to call...

Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass

Keycloak versions prior to 26.7.2, 26.6.6, and 26.4.15 contain a flaw in the reset-credentials flow that allows an unauthenticated attacker to bypass email verification and take over any user account. Two bugs are chained: 1 the tryAnotherWay handler stores a generic "true" selector note not scop...

CVE-2026-6741

CVE-2026-6741 CVE-2026-6741 ist eine Schwachstelle mit CVSS-Score 8.8 High zur Authenticated Agent+ Privilege Escalation im LatePoint – Calendar Booking Plugin CVE-2026-6741 — LatePoint-Privilege-Escalation-Scanner Plugin: LatePoint – Calendar Booking Plugin for Appointments and Events latepoint...

CVE-2026-5229

CVE-2026-5229 CVE-2026-5229: تجاوز مصادقة Form Notify عبر رد اتصال LINE OAuth CVSS 9.8 Form Notify — ماسح تجاوز مصادقة LINE OAuth الإضافة: Form Notify form-notify نوع الثغرة: تجاوز مصادقة LINE OAuth بدون تسجيل دخول ← الاستيلاء على الحساب درجة CVSS: 9.8 حرجة متجه CVSS:...

CVE-2025-5947

CVE-2025-5947 Exploit do CVE-2025-5947 WordPress Service Finder Bookings ≤ 6.0 CVE-2025-5947 Exploit - Service Finder Bookings Ferramenta de exploit para a vulnerabilidade de bypass de autenticação no plugin WordPress Service Finder Bookings ≤ 6.0 📋 Índice Sobre a Vulnerabilidade Detalhes Técnico...

2026-11551

2026-11551 CVE-2026-11551: Branda Plugin - Nicht authentifizierte Privilegienausweitung durch Kontoübernahme...

fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

fast-security-scanners

Schnelle Sicherheitsscanner/Prüfungen Ein kleiner Beitrag zur Gemeinschaft : Wir verwenden all diese Tools bei Sicherheitsbewertungen und in unserem Verwundbarkeitsüberwachungsdienst Überprüfen Sie Ihre Domain auf DNS-NS-Übernahme Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e...

CVE-2026-8181

CVE-2026-8181 Burst Statistics | Bypass dell'autenticazione per il takeover dell'account amministratore Descrizione: Burst Statistics 3.4.0 - 3.4.1.1 - Bypass dell'autenticazione per il takeover dell'account amministratore Il plugin Burst Statistics – Privacy-Friendly WordPress Analytics...

magento2-session-reaper-patch

Patch Magento 2 per Session Reaper per CVE-2025-54236 Patch per CVE-2025-54236 noto anche come Session Reaper che consente il takeover dell'account cliente e l'esecuzione remota di codice RCE in determinate condizioni. Questa patch è in realtà un'estensione Magento 2 e universalmente compatibile...

sub404

Sub404: Uno strumento veloce per verificare la vulnerabilità di takeover di sottodomini Cos'è Sub 404 Sub 404 è uno strumento scritto in Python utilizzato per verificare la possibilità di vulnerabilità di takeover di sottodomini ed è veloce perché asincrono. Perché Durante il processo di...

sub404

Sub404: A Fast Tool To Check Subdomain Takeover Vulnerability What is Sub 404 Sub 404 is a tool written in python which is used to check possibility of subdomain takeover vulnerability and it is fast as it is asynchronous. Why During recon process you might get a lot of subdomainse.g more than 10...

CVE-2026-48611-phpBB

CVE-2026-48611-phpBB Authentifizierung umgehen Einfacher POC zum Umgehen der Authentifizierung. Wenn du über den Browser darauf zugreifen möchtest, vergiss nicht, die USERAGENT -Variable im Skript entsprechend dem in deinem Browser angezeigten Wert zu ändern, damit es funktioniert. Verwende einen...