N-able N-central < 2026.3.1.10 - Authentication Bypass

N-able N-central versions through 2026.3.1 contain an authentication bypass that lets a remote unauthenticated attacker take over an administrator account and gain full control of the N-central server. CVE-2026-18577 is a bypass of the incomplete fix for CVE-2026-18556, so the 2026.3.1 Hotfix 1...

CVE-2026-6741

CVE-2026-6741 CVE-2026-6741 ist eine Schwachstelle mit CVSS-Score 8.8 High zur Authenticated Agent+ Privilege Escalation im LatePoint – Calendar Booking Plugin CVE-2026-6741 — LatePoint-Privilege-Escalation-Scanner Plugin: LatePoint – Calendar Booking Plugin for Appointments and Events latepoint...

CVE-2026-5229

CVE-2026-5229 CVE-2026-5229: تجاوز مصادقة Form Notify عبر رد اتصال LINE OAuth CVSS 9.8 Form Notify — ماسح تجاوز مصادقة LINE OAuth الإضافة: Form Notify form-notify نوع الثغرة: تجاوز مصادقة LINE OAuth بدون تسجيل دخول ← الاستيلاء على الحساب درجة CVSS: 9.8 حرجة متجه CVSS:...

CVE-2025-5947

CVE-2025-5947 Exploit do CVE-2025-5947 WordPress Service Finder Bookings ≤ 6.0 CVE-2025-5947 Exploit - Service Finder Bookings Ferramenta de exploit para a vulnerabilidade de bypass de autenticação no plugin WordPress Service Finder Bookings ≤ 6.0 📋 Índice Sobre a Vulnerabilidade Detalhes Técnico...

2026-11551

2026-11551 CVE-2026-11551: Branda Plugin - Nicht authentifizierte Privilegienausweitung durch Kontoübernahme...

fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

fast-security-scanners

Schnelle Sicherheitsscanner/Prüfungen Ein kleiner Beitrag zur Gemeinschaft : Wir verwenden all diese Tools bei Sicherheitsbewertungen und in unserem Verwundbarkeitsüberwachungsdienst Überprüfen Sie Ihre Domain auf DNS-NS-Übernahme Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e...

CVE-2026-8181

CVE-2026-8181 Burst Statistics | Bypass dell'autenticazione per il takeover dell'account amministratore Descrizione: Burst Statistics 3.4.0 - 3.4.1.1 - Bypass dell'autenticazione per il takeover dell'account amministratore Il plugin Burst Statistics – Privacy-Friendly WordPress Analytics...

magento2-session-reaper-patch

Patch Magento 2 per Session Reaper per CVE-2025-54236 Patch per CVE-2025-54236 noto anche come Session Reaper che consente il takeover dell'account cliente e l'esecuzione remota di codice RCE in determinate condizioni. Questa patch è in realtà un'estensione Magento 2 e universalmente compatibile...

sub404

Sub404: Uno strumento veloce per verificare la vulnerabilità di takeover di sottodomini Cos'è Sub 404 Sub 404 è uno strumento scritto in Python utilizzato per verificare la possibilità di vulnerabilità di takeover di sottodomini ed è veloce perché asincrono. Perché Durante il processo di...

sub404

Sub404: A Fast Tool To Check Subdomain Takeover Vulnerability What is Sub 404 Sub 404 is a tool written in python which is used to check possibility of subdomain takeover vulnerability and it is fast as it is asynchronous. Why During recon process you might get a lot of subdomainse.g more than 10...

CVE-2026-48611-phpBB

CVE-2026-48611-phpBB Authentifizierung umgehen Einfacher POC zum Umgehen der Authentifizierung. Wenn du über den Browser darauf zugreifen möchtest, vergiss nicht, die USERAGENT -Variable im Skript entsprechend dem in deinem Browser angezeigten Wert zu ändern, damit es funktioniert. Verwende einen...

domain-protect

OWASP Domain Protect - moved OWASP Domain Protect has moved to terraform-aws-domain-protect OWASP Domain Protect is now available as a Terraform Module See OWASP Domain Protect documentation including options for migration...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

CVE-2026-11551-PoC

CVE-2026-11551 - Privilégio Não Autenticado no White Label & Branding, Customizador Gratuito da Página de Login White Label & Branding, Customizador Gratuito da Página de Login update $wpdb-users, $data, ... ← Line 2515: DOUBLE HASH TERSIMPAN Código Vulnerável inc/modules/login-screen/...

CVE-2024-52475

CVE-2024-52475 WordPress Wawp Plugin = 3.0.17 ist anfällig für gebrochene Authentifizierung Kontoübernahme Haftungsausschluss! Die in diesem Dokument zu CVE-2024-52475 bereitgestellten Informationen dienen ausschließlich zu Lern- und Bildungszwecken. Wir ermutigen oder autorisieren nicht die...

CVE-2024-10508

Escalação de Privilégio Não Autenticada via Recuperação de Senha no RegistrationMagic = 6.0.2.6 Aviso Legal : Essas informações são fornecidas apenas para fins educacionais. Este documento visa conscientizar sobre vulnerabilidades de segurança e não deve ser usado para atividades não autorizadas ...

CVE-2026-78610

WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. An attacker who can induce an authenticated global administrator's browser to visit a crafted link or page can change that administrator's passphrase to an attacker-chosen value without the...

CVE-2026-78174

WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log and extract a Super Administrator's session token while that administrator is logged in, enabling account takeover...

CVE-2018-8581

CVE-2018-8581 Questa è una vulnerabilità di movimento laterale e privilege escalation a livello di cassetta postale. Consente, dopo aver ottenuto le credenziali di un account di posta con privilegi normali, di assumere la delega della cassetta postale inbox di altri utenti, inclusi gli...