password reset

Instagram Account Recovery Flaw Exploited via AI Support Tool

• Data Leak

Instagram Account Recovery Flaw Exploited via AI Support Tool

Do Son June 8, 2026 0

Serious Infrastructure Exposure Discovered A significant Instagram account recovery flaw has allowed unauthorized third parties to hijack...

Read More Read more about Instagram Account Recovery Flaw Exploited via AI Support Tool

Password Hijack in the Modern Stack: Payload CMS Patches Critical 9.1 CVSS Reset Flaw

• Vulnerability Report

Password Hijack in the Modern Stack: Payload CMS Patches Critical 9.1 CVSS Reset Flaw

Do Son April 3, 2026 0

The rapid-growth, fullstack Next.js framework Payload—known for giving developers “instant backend superpowers” —is facing a serious security...

Read More Read more about Password Hijack in the Modern Stack: Payload CMS Patches Critical 9.1 CVSS Reset Flaw

CVE-2025-63207 (CVSS 9.8): Critical Broken Access Control Flaw Exposes R.V.R Elettronica TEX Devices to Full System Takeover

• Vulnerability Report

CVE-2025-63207 (CVSS 9.8): Critical Broken Access Control Flaw Exposes R.V.R Elettronica TEX Devices to Full System Takeover

Do Son November 25, 2025 0

A newly disclosed vulnerability in R.V.R Elettronica’s TEX broadcast hardware has been assigned CVE-2025-63207, scoring 9.8 Critical...

Read More Read more about CVE-2025-63207 (CVSS 9.8): Critical Broken Access Control Flaw Exposes R.V.R Elettronica TEX Devices to Full System Takeover

PoC Available: FlowiseAI Flaw (CVE-2025-58434) Allows Full Account Takeover (CVSS 9.8)

• Vulnerability Report

PoC Available: FlowiseAI Flaw (CVE-2025-58434) Allows Full Account Takeover (CVSS 9.8)

Do Son September 15, 2025 0

The open-source generative AI development platform FlowiseAI, widely used for building AI agents and LLM workflows, has...

Read More Read more about PoC Available: FlowiseAI Flaw (CVE-2025-58434) Allows Full Account Takeover (CVSS 9.8)

Plex Urges Password Reset After Data Breach

• Data Leak

Plex Urges Password Reset After Data Breach

Do Son September 9, 2025 0

The popular streaming platform Plex was recently the target of a cyberattack that resulted in a database...

Read More Read more about Plex Urges Password Reset After Data Breach

ScriptCase Flaws (CVE-2025-47227/47228): Pre-Auth RCE & Admin Takeover Risk for Web Servers, PoC Published

• Vulnerability Report

ScriptCase Flaws (CVE-2025-47227/47228): Pre-Auth RCE & Admin Takeover Risk for Web Servers, PoC Published

Do Son July 7, 2025 0

In a recent security advisory, researchers from Synacktiv revealed two chained vulnerabilities in ScriptCase’s Production Environment module—known...

Read More Read more about ScriptCase Flaws (CVE-2025-47227/47228): Pre-Auth RCE & Admin Takeover Risk for Web Servers, PoC Published

ZITADEL Flaw: Host Header Injection Risks Account Takeover (Password Reset)

• Vulnerability

ZITADEL Flaw: Host Header Injection Risks Account Takeover (Password Reset)

Do Son May 30, 2025 0

ZITADEL, a modern identity and access management platform, has patched a critical vulnerability in its password reset...

Read More Read more about ZITADEL Flaw: Host Header Injection Risks Account Takeover (Password Reset)