EUVD-2026-95277

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass authentication due to improper authentication...

CVE-2026-19494 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication...

CVE-2026-19494

IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3) are vulnerable to a security restriction bypass. This issue stems from improper authentication , which could be exploited by a remote authenticated attacker . The impact inclu...

EUVD-2026-95276

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication...

EUVD-2026-95268

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass additional authentication workflow steps...

CVE-2026-19878

IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3) are vulnerable to a security flaw that allows a remote authenticated attacker to bypass additional authentication workflow steps. This issue is attributed to CWE-841: Improper...

CVE-2026-19878 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass additional authentication workflow steps...

CVE-2025-10294

漏洞利用：通过空的 ownidsharedsecret 绕过认证（JWT伪造） 1 使用空HMAC密钥伪造有效的JWT SUB= SUB="$SUB" python3 - /tmp/jwt.txt import base64, hmac, hashlib, json, time, os b64u = lambda b: base64.urlsafeb64encodeb.rstripb'='.decode header = b64ujson.dumps"typ":"JWT","alg":"HS256", separators=",",":".encode payload =...

CVE-2025-40554

CVE-2025-40554 利用套件 一个用于检测和利用 SolarWinds Web Help Desk 中认证绕过漏洞（CVE-2025-40554 / CVE-2025-40536）的综合安全测试工具。 ⚠️ 免责声明 仅供教育及授权安全测试使用 本工具仅用于对您拥有或已获得明确书面授权的系统进行安全研究、渗透测试和漏洞评估。未经授权访问计算机系统是违法的。作者不对因使用本工具造成的误用或损害负责。 🔍 漏洞概述 CVE-2025-40554 是 SolarWinds Web Help Desk 中的一个严重认证绕过漏洞，允许未认证的攻击者： 绕过认证机制 访问特权管理功能（认证）...

Exploit for CVE-2020-11651

SaltStack Master Authentication Bypass CVE-2020-11651 Vulh...

kentico-xperience13-AuthBypass-wt-2025-0011

WT-2025-0011 CVE no asignado todavía Kentico Xperience 13 CMS - Comprobación de omisión de autenticación del Staging Service Detección en acción python3 .\watchTowr-vs-kentico-xperience13-AuthBypass-wt-2025-0011.py -H http://labcms -u admin / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / |...

CVE-2026-79842

An authentication bypass vulnerability exists in HPE Intelligent Management Center iMC prior to v7.3 E0713...

CVE-2026-79842

An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) in versions prior to v7.3 E0713 . This flaw allows for unauthorized access, potentially impacting confidentiality and integrity with a CVSS v3.1 score of 9.1 . No specific root cause or exploit code is provid...

EUVD-2026-95262

An authentication bypass vulnerability exists in HPE Intelligent Management Center iMC prior to v7.3 E0713...

CVE-2026-79842

An authentication bypass vulnerability exists in HPE Intelligent Management Center iMC prior to v7.3 E0713...

CVE-2026-19490-check

Citrix NetScaler SAML nFactor Context Authentication Bypass — Script de detección de vulnerabilidades Una comprobación de vulnerabilidad segura y no autenticada para CVE-2026-19490 , el bypass de autenticación previo a la autenticación en la ruta del proveedor de servicios SAML de Citrix NetScale...

routers-exploit

Repo OpenSource con PoCs y vulnerabilidades encontradas en routers TP LINK TL-WR849N - PoC de EJECUCIÓN REMOTA DE COMANDOS CVE-2020-9374 - TP LINK TL-WR849N - PoC de EJECUCIÓN REMOTA DE COMANDOS Payload: "$ls" TP LINK TL-WR849N - Bypass de autenticación: actualización de firmware y configuracione...

CVE-2022-26134

CVE-2022-26134 Inyección de Object-Graph Navigation Language OGNL sin autenticación previa en Confluence Confluence es un producto de colaboración en espacio de trabajo basado en la web, desarrollado por Atlassian. Se puede implementar localmente on-prem o como parte de Atlassian Cloud. Consta de...

bigip-scanner

BIG-IP Scanner Determine la versión de software en ejecución de una interfaz de gestión remota F5 BIG-IP. Desarrollado con ❤️ por el equipo Bishop Fox Cosmos. Descripción CVE-2022-1388, una vulnerabilidad crítica en la interfaz de gestión de F5 BIG-IP, permite a un atacante omitir la autenticación...

SecureConnect-Auth-Bypass

Vulnerabilidad de Omisión de Autenticación en ConnectWise SecureConnect Un proof of concept de explotación para la vulnerabilidad de omisión de autenticación en ConnectWise SecureConnect. Publicación del Blog Más detalles aquí:...