CVE-2026-103510 Authentication bypass via blank auth token in P4Search

P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...

CVE-2026-103510 Authentication bypass via blank auth token in P4Search

P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...

CVE-2026-100103 Authentication bypass via default auth token in P4Search

Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the...

CVE-2026-100103 Authentication bypass via default auth token in P4Search

Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the...

exploit-mikrotik-2026

CVE-2026-67276 - MikroTrik SSH Authentication Bypass Exploit MikroTik RouterOS SSH Public Key Authentication Bypass - No Private Key Required A proof-of-concept exploit for CVE-2026-67276 MikroTrick, a critical authentication bypass vulnerability in MikroTik RouterOS SSH implementation that allow...

CVE-2026-76071

CVE-2026-76071: Unauthenticated Pre-Auth Stack Buffer Overflow via sscanf %^, in skkset.cgi ipFilterList Handler in Netis NC63 Researcher: Özcan Ersan @ozcanpng Disclosure status CVE: CVE-2026-76071 Vendor: Netis Systems Co., Ltd. Product: Netis NC63 AC1200 Wireless Dual Band Gigabit MU-MIMO Rout...

CVE-2025-54322-exploit

CVE-2025-54322: Exploit RCE Pre-Autenticación en XSpeeder SXZOS Un exploit profesional de Prueba de Concepto PoC para CVE-2025-54322 , una vulnerabilidad crítica de ejecución remota de código sin autenticación en el firmware XSpeeder SXZOS. Esta vulnerabilidad fue descubierta y divulgada por el...

pritunl-CVE-2020-25200

CVE-2020-25200 Servidor Pritunl VPN - Versión afectada: Pritunl v1.29.2145.25 553bbd ========================= Pritunl 1.29.2145.25 permite a los atacantes enumerar nombres de usuario VPN válidos mediante una serie de intentos de inicio de sesión en /auth/session. Inicialmente, el servidor devuel...

Wp2Shell

wp2shell Ejecución remota de código sin autenticación en el núcleo de WordPress. CVE-2026-60137 Inyección SQL en WPQuery encadenada con CVE-2026-63030 Confusión de ruta de lotes en la API REST. Solo para fines educativos e investigación de seguridad autorizada. Versiones afectadas WordPress 6.9.0...

CVE-2026-82329-JFrog-Artifactory-

CVE-2026-82329-JFrog-Artifactory- CVE-2026-82329 — JFrog Artifactory Auth Bypass The Vulnerability Critical authentication bypass in JFrog Artifactory versions 7.111.20, 7.117.27, 7.125.19, 7.133.28, 7.146.37, 7.161.19. The flaw allows an unauthenticated attacker to forge a JWT using a blank HMAC...

FortiWeb-cve-2025-64446-RCE-exploit

FortiWeb CVE-2025-64446 RCE Exploit Professional security research & vulnerability assessment framework Installation · Quick Start · Usage · Architecture · CLI Reference · Disclaimer Overview FortiWeb Research Tool is a Python assessment framework for authorized detection and analysis of...

cve-2025-32433

CVE-2025-32433 - Pre-Auth RCE in Erlang/OTP SSH Server Enlace al write-up detallado Todas las versiones vulnerables analizadas usando Docker: Erlang/OTP-25.3.2 Erlang/OTP-26.2.5.11 Erlang/OTP-27.3.2 Enlace al exploit Enlaces a los archivos para la verificación masiva: Plantilla para verificación...

CVE-2020-7598

es-define-property Object.defineProperty, but not IE 8's broken one. Example const assert = require'assert'; const $defineProperty = require'es-define-property'; if $defineProperty assert.equal$defineProperty, Object.defineProperty; else if Object.defineProperty assert.equal$defineProperty, false...

CVE-2024-55211

CVE-2024-55211 Cookie-based authentication vulnerability on Tk-Rt-Wr135G Affected vendor : Think Technology Affected product : Wireless Router Ac 1199Mbps Tk-Rt-Wr135G Affected version : Firmware V3.0.2-X000 Description The vulnerability allows the bypass of the login form in the router...

Kestra-cve-2026-53576

Unauthenticated RCE in Kestra via a Trailing-Path Auth Bypass CVE-2026-53576 Contents Executive Summary 1. Summary 2. Affected / Fixed Versions 3. Test Environment & Pre-Flight Check 4. Root Cause 5. Attack Simulation 6. Detection Engineering 7. ATT&CK Mapping 8. Remediation & Hardening 9...

CVE-2026-24061

🚨 CVE-2026-24061 — “TelneTD” Bypass crítico de autenticación remota en GNU Inetutils telnetd El fantasma de 2015 ha vuelto para apoderarse de todo lo que todavía ejecuta telnet. Cero autenticación. Una variable de entorno. Shell root instantánea. ⚠️ Resumen CVE-2026-24061 es una vulnerabilidad...

Cacti <=1.2.22 - Remote Command Injection

Cacti through 1.2.22 is susceptible to remote command injection. There is insufficient authorization within the remote agent when handling HTTP requests with a custom Forwarded-For HTTP header. An attacker can send a specially crafted HTTP request to the affected instance and execute arbitrary OS...

gitea-CVE-2026-28699

CVE-2026-28699: Omisión de alcance OAuth2 de Gitea a través de autenticación básica HTTP Un token de acceso OAuth2 de Gitea con alcance solo read:user puede realizar acciones de escritura completas cuando se envía como Authorization: Basic base64:x-oauth-basic en lugar de como un token Bearer. La...

BadHost-CVE-2026-48710-Exploit

BadHost — Escáner CVE-2026-48710 Escáner de solo detección para la omisión de autenticación BadHost en Starlette / FastAPI — donde el middleware de autenticación lee request.url.path en lugar de request.scope"path", permitiendo que una cabecera Host manipulada introduzca una ruta permitida y omit...

kernel: nvmet-auth: reject short AUTH_RECEIVE buffers

A flaw was found in the nvmet-auth component of the Linux kernel. A remote attacker, by sending a specially crafted AUTHRECEIVE buffer to an NVMe-oF NVM Express over Fabrics target with in-band authentication enabled, can trigger a heap out-of-bounds write. This vulnerability arises because the...