LatePoint <= 5.0.12 - Authentication Bypass

LatePoint plugin for WordPress versions up to 5.0.12 contains an authentication bypass caused by insufficient verification of user during booking, letting unauthenticated attackers log in as any existing user if they have user ID access, exploit requires access to user ID, and the 'Use WordPress...

ZZcms - Cross-Site Scripting

ZZcms 2019 contains a cross-site scripting vulnerability in the user login page. An attacker can inject arbitrary JavaScript code in the referer header via user/login.php, which can allow theft of cookie-based credentials and launch of subsequent attacks. id: CVE-2020-20285 info: name: ZZcms -...

mooSocial v.3.1.8 - Cross-Site Scripting

A cross-site Scripting XSS vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code by sending a crafted payload to the adminredirecturl parameter of the user login function. id: CVE-2023-44812 info: name: mooSocial v.3.1.8 - Cross-Site Scripting author: ritikchaddha...

CVE-2026-126768

OpsTree REMS through 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid JWTs by setting the client-controlled islocalauth field. Attackers can send a POST /api/v1/user/login/ request for the admin account with an invalid password and...

CVE-2026-126768 OpsTree REMS through 1.0.0 Authentication Bypass via is_local_auth Flag

OpsTree REMS through 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid JWTs by setting the client-controlled islocalauth field. Attackers can send a POST /api/v1/user/login/ request for the admin account with an invalid password and...

DRUPAL-CONTRIB-2026-316

This module provides a configurable GraphQL schema generator for Drupal entities and fields, along with optional schema extensions for common tasks such as user login and password management. The module doesn't sufficiently check access when changing a user's password through the GraphQL API. A...

PT-2026-145641

This module provides a configurable GraphQL schema generator for Drupal entities and fields, along with optional schema extensions for common tasks such as user login and password management. The module doesn't sufficiently check access when changing a user's password through the GraphQL API. A...

PT-2026-145395

Name of the Vulnerable Software and Affected Versions OpsTree REMS versions prior to 1.0.1 Description An authentication bypass allows unauthenticated attackers to obtain valid JSON Web Tokens JWTs by manipulating a client-controlled field. By sending a POST request to the '/api/v1/user/login/'...

CVE-2026-126768: OpsTree Solutions REMS: OpsTree REMS through 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to…

OpsTree REMS through 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid JWTs by setting the client-controlled islocalauth field. Attackers can send a POST /api/v1/user/login/ request for the admin account with an invalid password and...

forgejo-openid-discovery-ssrf

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · forgejo-openid-discovery-ssrf Write-up: https://abraxaslabs.tech/research/forgejo-openid-discovery-ssrf forgejo-openid-discovery-ssrf Class: SSRF Reach: Remote Forgejo 16.0.5 8d24b7d - Forgejo When openid...

CVE-2026-29861

CVE-2026-29861 🛡️ CVE Disclosure: CVE-2026-29861 — SQL Injection in PHP-MYSQL-User-Login-System Disclosure Date: 10 April 2026 CVE ID: CVE-2026-29861 Severity: CRITICAL CVSS 9.8 🧩 Summary A critical SQL Injection vulnerability exists in PHP-MYSQL-User-Login-System v1.0, specifically within the...

PT-2026-139456

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdm regfirst name, wpdm reglast name, wpdm reguser login' parameter in all versions up to, and including, 7.5.9 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-113810

Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server issue requests by submitting arbitrary OpenID identifier URLs. Attackers can POST crafted identifiers to...

CVE-2026-119545

The Forgejo platform, affecting versions through 15.0.11 , 16.0.0 through 16.0.7 , and 17.0.0 through 17.0.1 , is vulnerable to a Server-Side Request Forgery (SSRF) . An unauthenticated attacker can submit arbitrary OpenID identifier URLs via a POST request to the /user/login/openid endpoint. Thi...

CVE-2026-119545: forgejo: Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a server-side request forgery…

Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server issue requests by submitting arbitrary OpenID identifier URLs. Attackers can POST crafted identifiers to...

PT-2026-133483

Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server issue requests by submitting arbitrary OpenID identifier URLs. Attackers can POST crafted identifiers to...

WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)

Description WordPress does not escape a user login value in all cases before outputting it on a multisite network administration screen, which could allow Stored Cross-Site Scripting where that value was populated by a means that bypasses the normal username sanitisation. This is a defence-in-dep...

CVE-2026-78231

When OpenID sign-in is enabled, Gitea processes unauthenticated assertion parameters and sends an HTTP POST request to the caller-supplied OpenID provider endpoint during verification. An attacker controls the destination and much of the form body, allowing interaction with internal HTTP services...

CVE-2026-83540 wolfSSHd on Windows race condition leading to logon token reused across connections

When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connection is not released before a token is acquired for a subsequent connection, resulting in user login poisoning between connections. A less privileged...

PT-2026-102962

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this issue is the function app user login model.php::cekUserLogin of the file application/models/app user login model.php of the component KCFinder File Manager. Such...