@pentest-tools.com on Bluesky

JavaScript RequiredThis is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is. Learn more about Bluesky at bsky.social and atproto.com.

Post

Pentest-Tools.com

pentest-tools.com

did:plc:rdesfgypi36dlzlnlxze7vdp

👉 PTT-2026-004 (CVE-2026-48611, 9.4): the PoC shows the full path from a single crafted request to a valid admin session. No credentials that work, no prior access, no user interaction. Just the request and the session cookie that _shouldn't_ exist. AND https://pentest-tools.com/research/phpbb-authentication-bypass

2026-07-04T09:29:27.745Z