Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 15 Nov 2026 03:24:06 +0000 CVE-2026-126815 — Pre-account hijacking via planted password https://db.gcve.eu/vuln/cve-2026-126815 <p><strong>Affected:</strong> XauenDevs Lagarto Chivato</p> <p>Pre-account hijacking in the authentication flow in Lagarto Chivato 0.4.1 and earlier on Web allows remote unauthenticated attackers to take over arbitrary accounts via a password planted on an unregistered email address that becomes valid upon the victim’s first passwordless login.</p> <p><strong>Affected:</strong> XauenDevs Lagarto Chivato</p> <p>Pre-account hijacking in the authentication flow in Lagarto Chivato 0.4.1 and earlier on Web allows remote unauthenticated attackers to take over arbitrary accounts via a password planted on an unregistered email address that becomes valid upon the victim’s first passwordless login.</p> https://db.gcve.eu/vuln/cve-2026-126815