195007 matches found
CVE-2023-25136
CVE-2023-25136 OpenSSH 9.1 Vulnerability Mass Scanning and Exploitation Vulnerability Details OpenSSH is software that implements the SSH protocol, commonly used to securely connect to Linux or Windows machines for remote administration. The CVE-2023-25136 security vulnerability introduced in...
CVE-2025-41646---Critical-Authentication-Bypass-
CVE-2025-41646---Critical-Authentication-Bypass- CVE-2025-41646 - Critical Authentication bypass 🔓 CVE-2025-41646 - RevPi WebStatus Authentication Bypass PoC A critical authentication bypass vulnerability CVE-2025-41646 in RevPi WebStatus ≤ v2.4.5 allows an attacker to log in as admin without val...
gssapi-abuse
gssapi-abuse gssapi-abuse был выпущен в рамках моего выступления на DEF CON 31. Полная статья о векторе атаки доступна здесь: Нерасторжимый брак: злоупотребление смешанными стеками Kerberos от разных вендоров Инструмент имеет две функции. Первая — возможность перечислять хосты не под управлением...
poc_cve-2026-42208
CVE-2026-42208 — LiteLLM Pre-Authentication SQL Injection A lab environment for reproducing and detecting CVE-2026-42208 , a critical pre-authentication SQL injection vulnerability in LiteLLM where unsanitized Bearer tokens reach a raw PostgreSQL query. Vulnerability Overview Field| Details ---|-...
Silverpeas-AuthBypass-CVE-2024-36042
Silverpeas-AuthBypass-CVE-2024-36042 A clean, professional-grade Python3 proof-of-concept for CVE-2024-36042 — an authentication bypass in Silverpeas 6.3.5 caused by missing password validation in AuthenticationServlet. Overview Silverpeas AuthenticationServlet accepts a login request even when t...
freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass
A flaw was found in FreeRDP server. This vulnerability allows unauthenticated attackers to bypass server policies that disable Remote Desktop Services over Transport Layer Security RDSTLS connections. By sending incompatible protocol requests and then completing a TLS handshake, attackers can...
CVE-2019-0708
CVE-2019-0708 CVE-2019-0708 with Metasploit-Framework The CVE-2019-0708 vulnerability exploits a flaw in user authentication, allowing bypass of authentication without any interaction. It directly connects via the RDP protocol to send malicious code and execute commands on the server. If exploite...
CVE-2020-1472
CVE-2020-1472 Checker & Exploit Code for CVE-2020-1472 aka Zerologon Tests whether a domain controller is vulnerable to the Zerologon attack, if vulnerable, it will resets the Domain Controller's account password to an empty string. NOTE: It will likely break things in production environments eg...
auth
Auth - Supabase의 인증 및 사용자 관리 Auth는 Go로 작성된 사용자 관리 및 인증 서버로서, Supabase의 다음과 같은 기능을 지원합니다: JWT 발급 PostgREST를 통한 행 수준 보안 사용자 관리 이메일, 비밀번호, 매직 링크, 전화번호로 로그인 외부 제공자Google, Apple, Facebook, Discord, ...로 로그인 이 프로젝트는 원래 Netlify의 GoTrue 코드베이스를 기반으로 하였지만, 두 프로젝트는 기능과 역량에서 크게 분기되었습니다. 프로젝트에 기여하려면 기여 가이드를...
CVE-2020-1472
ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when succesfully performing the bypass, and not perform any...
zabbix-cve-2022-23131
cve-2022-23131 cve-2022-23131 zabbix-saml-bypass-exp 1. replace zbxsignedsession to cookie 2. sign in with Single Sign-On SAML author: @random-robbie、@jweny and @Mr-xn link: https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage...
SecuraBV-CVE-2020-1472
ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when succesfully performing the bypass, and not perform any...
CVE-2025-14857-MongoBleed
CVE-2025-14847 MongoBleed - Functional PoC MongoDB Memory Leak Exploitation - Simulated R6 Attack Complete Proof of Concept for CVE-2025-14847 MongoBleed Tested: ✅ MongoDB 7.0.5 | 14,300+ Successful Exploits | 4 Leaked UUIDs 🎯 About the Project This repository contains a fully functional Proof of...
GPON
RCE on GPON home routers CVE-2018-10561 Vulnerability Many routers today use GPON internet, and a way to bypass all authentication on the devices CVE-2018-10561 was found by VPNMentor. With this authentication bypass, it's also possible to unveil another command injection vulnerability...
CVE-2019-20933
LAB 5-CVE-2019-20933 I. SYSTEM ANALYSIS Identifying the Attack Surface Starting with what is running in the environment. I list all active containers: docker ps The victim exposes a single port:8086. Currently, I do not have detailed information about the target. From the docker ps output, the...
Blackash-CVE-2025-31161
Blackash-CVE-2025-31161 CVE-2025-31161 Proof of Concept for CVE-2025-31161 / CVE-2025-2825 This POC will exploit the authbypass vulnerability to create a new user account with Admin level permissions. The Auth Bypass requires the username targetuser of an existing user on the CrushFTP server. The...
CVE-2014-3120
LAB 10-CVE-2014-3120 I. SYSTEM ANALYSIS Identifying the Attack Surface from the Docker Environment Starting with what is running in the environment. We list all active containers: docker ps Result: Container p1/lab10:latest is running, exposing 2 ports externally: Port mapping| Protocol ---|---...
CVE-2020-11651
CVE-2020-11651 A script that exploits SaltStack CVE-2020-11651 and CVE-2020-11652 to add new users to a vulnerable Salt master by injecting entries into /etc/passwd and /etc/shadow. Exploit Title: Saltstack 3000.1 - Remote Code Execution Date: 2020-05-04 Orignal Exploit Author: Jasper Lievisse...
CVE-2022-36537-EXPLOIT
CVE-2022-36537 요약 R1Soft Server Backup Manager는 주요 프레임워크로 ZK 프레임워크를 사용합니다. 보안상 모든 Web3 프로젝트 당사자는 다양한 Web3 인프라의 보안 취약점에 더 많은 주의를 기울이고 잠재적인 보안 위험과 디지털 자산 손실을 방지하기 위해 적시에 패치를 적용해야 합니다. 우리는 제때에 보안 위험을 발굴하고 web3의 다양한 보안 위험을 추적하며, web3 세계의 온체인과 오프체인이 안전하고 건전하도록 선도적인 보안 솔루션을 제공할 것입니다. 서문 ZK는 엔터프라이즈 웹...