@pentest-tools.com on Bluesky

JavaScript RequiredThis is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is. Learn more about Bluesky at bsky.social and atproto.com.

Post

Pentest-Tools.com

pentest-tools.com

did:plc:rdesfgypi36dlzlnlxze7vdp

👉 PTT-2026-005 (CVE-2026-48612, 8.3): the PoC walks through the silent OAuth account takeover, including the case where the victim only has to load a forum post for the chain to fire. https://pentest-tools.com/research/phpbb-authentication-bypass

2026-07-04T09:29:27.770Z