BIT-KEYCLOAK-2026-37982 Keycloak: org.keycloak.authentication: keycloak: unauthorized account takeover via webauthn token replay

A flaw was found in Keycloak. This authentication vulnerability allows a remote attacker to replay ExecuteActionsActionToken tokens within Keycloak's WebAuthn Web Authentication flow. By intercepting an execute-actions email link, an attacker can register their own authenticator to a victim's...

BIT-KEYCLOAK-2026-3429 Org.keycloak.services.resources.account: improper access control leading to mfa deletion and account takeover in keycloak account rest api

A flaw was identified in the Account REST API of Keycloak that allows a user authenticated at a lower security level to perform sensitive actions intended only for higher-assurance sessions. Specifically, an attacker who has already obtained a victim’s password can delete the victim’s registered...

CVE-2026-79673 Ech0 before 4.4.3 Scope Bypass via profile:read Token

Ech0 before 4.4.3 protects the PUT /user endpoint with the profile:read scope, a read-only scope, but allows write operations including password changes. An attacker with an admin's profile:read access token can change the admin's password and login to obtain an unrestricted session token that...

CVE-2026-75971

The ShopEngine Elementor WooCommerce Builder Addon WordPress plugin is vulnerable to privilege escalation in versions up to and including 4.9.4 . The root cause is the rum_importer() function registered on the import_start action hook without a plugin-owned capability check or allowlist filtering...

BIT-KEYCLOAK-2026-18963 Flaw in the reset-credentials flow of the keycloak-services component

A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the...

BIT-KEYCLOAK-2026-15571 Flaw in the legacy client-initiated account-linking endpoint of Keycloak

A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to protect the account-linking process from unauthorized requests relies on a hash that can be predicted by a malicious OIDC...

CVE-2026-77146

The extension's invitation controller fails to stop processing after redirecting on invalid input missing hash, non-existent, disabled, or deleted users, allowing an unauthenticated attacker to set a new password for and re-enable an arbitrary existing frontend user account. This vulnerability is...

CVE-2020-27747

CVE-2020-27747 Possibile furto dell'account | Capacità di brute force Suggested description È stato scoperto un problema in Click Studios Passwordstate 8.9 Build 8973. Se l'utente del sistema si è assegnato un codice PIN per l'accesso da un dispositivo mobile utilizzando il generatore integrato 4...

CVE-2026-19851

A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to gain access to user accounts created during XML import...

Blackash-CVE-2025-4322

CVE-2025-4322 : Escalation dei Privilegi non Autenticata tramite Aggiornamento Password "Account Takeover 🔥" Descrizione : Il tema Motors per WordPress è vulnerabile all'escalation dei privilegi tramite account takeover in tutte le versioni fino alla 5.6.67 inclusa. Ciò è dovuto al fatto che il...

CVE-2023-49543

CVE-2023-49543 Book Store Management System v1.0 - Falsche Zugriffskontrolle Beschreibung : Falsche Zugriffskontrolle im Book Store Management System v1 ermöglicht es Angreifern, auf nicht autorisierte Seiten zuzugreifen und administrative Funktionen ohne Authentifizierung auszuführen. Verwundbar...

CVE-2025-61922-PoC

CVE-2025-61922 Exploit: PrestaShop Checkout Account Takeover Ein einfaches, lehrreiches Proof-of-Concept-Skript, das die Zero-Click-Kontoübernahme-Schwachstelle im PrestaShop Checkout-Modul CVE-2025-61922 demonstriert. ⚠️ Rechtlicher & ethischer Hinweis: Verantwortungsvoll nutzen Dieses Tool dient...

CVE-2025-4606

CVE-2025-4606 – Tema Sala per WordPress = 1.1.4 – Escalation di Privilegi Non Autenticata tramite Reset Password/Account Takeover 🔥 Riepilogo della Vulnerabilità Il tema WordPress Sala versioni = 1.1.4 è vulnerabile a una vulnerabilità di escalation dei privilegi non autenticata. Questo difetto...

bug-bounty-reports-desai-vinayak

🧩 Report Bug Bounty — Desai Vinayak 🔒 Report di bug bounty e ricerca sulle vulnerabilità di Desai Vinayak. Questo repository raccoglie report passivi e non distruttivi su vulnerabilità e prove a supporto per divulgazione coordinata e tracciamento della risoluzione. 📁 Contenuti 📂 reports/ — PDF,...

CVE-2026-45156-POC

Glitch Matrice Hacker 🚨 CVE-2026-45156 🚨 Nextcloud useroidc ID4me Bypass della Firma JWT Proof of Concept PoC completamente automatizzato per l'acquisizione dell'admin. 📖 La Storia Dietro ogni CVE c'è una storia. Questa è stata trovata alle 2 di notte in una fredda notte d'inverno, alimentata da...

cve-2026-9558-poc

CVE-2026-9558 — Iniezione di template lato server SSTI nei template dei temi di Mautic fino alla compromissione totale dell'admin Indice Panoramica Versioni interessate Causa principale Analisi Struttura del repository Requisiti Utilizzo Output previsto Riferimenti Avvertenze Panoramica...

ghostbuster

Table of Contents Table of Contents Ghostbuster The problem Project Features Installing Ghostbuster Using Ghostbuster Example Output Setting up your AWS accounts Setting up Cloudflare Optional Authors License Ghostbuster Eliminate dangling elastic IPs by performing analysis on your resources with...

CVE-2026-5432-GraphQL-Batching-Alias-Confusion-SQL-Injection

7. CVE-2026-5432 – Iniezione SQL da Confusione di Alias nel Batching GraphQL Panoramica Un resolver GraphQL costruisce dinamicamente le query SQL a partire dagli alias dei campi. Utilizzando il batching e gli alias, un attaccante aggira una allow‑list e inietta SQL. Gravità: Critico Compromission...

CVE-2026-19892

The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. This is due to a missing capability check in the ajaxiwarpreviewemail function, which uses isadmin as its only authorization check and allows...

CVE-2023-26984

CVE-2023-26984 Erklärung der Sicherheitslücke: Ein Problem in der Passwort-Reset-Funktion von Peppermint v0.2.4 ermöglicht es Angreifern, über eine manipulierte Anfrage auf die E-Mails und Passwörter der Tickets-Seite zuzugreifen. Angriffsvektoren: Der Angreifer musste sich mit der Benutzerrolle...