PoC Archive PoC Archive

tag

Forum-Software

  • None assigned as of 2026-07-03 web HIGH

    NodeBB ActivityPub attributedTo Local UID Spoof

    NodeBB's ActivityPub inbox authenticates the top-level signed actor of an incoming activity via HTTP Signatures, but never checks that the embedded Note.attributedTo field — used later as the internal local user id for chat message and post authorship —…

    Unverified 2026-07-03
  • None assigned as of 2026-07-03 web HIGH

    MyBB 1.8.40 Limited Admin CP User-Manager to Full Administrator Privilege Escalation

    A non-super Admin CP account that has only the user-management permission (user-users = 1) can use the standard Admin CP "add user" form to create a brand-new account directly in the Administrator group (gid=4), because the underlying user data handler's…

    Unpatched 2026-07-03