204905 matches found
watchTowr-vs-progress-moveit_CVE-2024-5806
CVE-2024-5806 Exploit for Progress MOVEit Transfer CVE-2024-5806. See our blog post at TBD. PoC in Action See --help for, well, help. A typical run should look like this: python CVE-2024-5806.py --target-ip 192.168.1.1 --target-user user2 --ppk id.ppk --pem id / | | |\ \ \ / / \ \ / | | | | / ...
CVE-2026-68573
Improper Authentication vulnerability in Apache Kylin. Unauthenticated user may access to system cleanup actions. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin...
CVE-2026-108709
Authentication bypass within in-house network in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.4 through 5.0.4. Users are recommended t...
threat-intel-cve-2024-3094
Threat Intelligence Report: CVE-2024-3094 – XZ Utils Backdoor This repository contains a threat intelligence report analyzing CVE-2024-3094 , a high-profile backdoor vulnerability discovered in the xz-utils compression tool in 2024. CVE-2024-3094 is a severe supply chain compromise where a...
CVE-2025-55182-realistic-poc
CVE-2025-55182: React Server Components RCE A minimal proof of concept demonstrating the critical Remote Code Execution vulnerability in [email protected]. What is CVE-2025-55182? A pre-authentication RCE vulnerability in React Server Components that allows attackers to execute arbitrary cod...
CVE-2023-2437
CVE-2023-2437 Hello, ALL , i m RxR I Coded Tool For Exploit vulnerability UserPro = 5.1.1 – Authentication Bypass to Administrator The Exploit get the user of the admin , then login with his access , to create new admin The Best way for exploit this vulnerability is create new admin for Run TooL...
CVE-2016-2555
CVE-2016-2555 Exploit This exploit targets a SQL Injection vulnerability and an authentication weakness vulnerability in ATutor 2.2.1. By exploiting these vulnerabilities, the attacker can upload malicious code to achieve Remote Code Execution RCE on the vulnerable server. Usage $ python3...
CVE-2026-39987_POC
PoC — CVE-2026-39987 · Marimo Pre-Auth RCE CVSS 4.0: 9.3 Critical · AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H Affects: marimo 2 calls to validateauth. terminal.py - 0 @requires, 0 validateauth. -- the flaw. The AuthBackend middleware protects HTTP and the /ws websocket, but /terminal/ws accepts the...
EUVD-2026-103153
Authentication bypass within in-house network in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.4 through 5.0.4. Users are recommended t...
CVE-2026-108709 Apache Kylin: Unauthenticated Metadata Broadcast (inside in-house network)
Authentication bypass within in-house network in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.4 through 5.0.4. Users are recommended t...
CVE-2026-108709
The Apache Kylin project versions 4.0.4 through 5.0.4 are vulnerable to an authentication bypass that allows unauthenticated metadata broadcast within an in-house network. While the impact is most significant for services directly exposed to the public network (which is uncommon), standard in-hou...
EUVD-2026-103148
Improper Authentication vulnerability in Apache Kylin. Unauthenticated user may access to system cleanup actions. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin...
CVE-2026-68573 Apache Kylin: Unauthenticated Metastore Cleanup
Improper Authentication vulnerability in Apache Kylin. Unauthenticated user may access to system cleanup actions. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin...
CVE-2026-68573
Apache Kylin versions 4 through 5.0.4 are vulnerable to an Improper Authentication (CWE-287) vulnerability. This flaw allows an unauthenticated user to perform system cleanup actions , which primarily affects services exposed directly to a public network. Impact is less likely for in-house deploy...
WordPress Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin <= 5.7.4 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by Ekene Umegakwe in WordPress Plugin LatePoint versions = 5.7.4...
CVE-2026-17488
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication...
AfterLife
AFTERLIFE Revocation Persistence Detection Lab When the password reset succeeds but the attacker never leaves. A local red/blue lab for one vulnerability class: the credential that outlives the event that was supposed to kill it. It ships the exploit, the root cause, the fix, a three-rule detecti...
CVE-2026-20896
CVE-2026-20896: Gitea Docker Image Authentication Bypass PoC !WARNING Use this PoC only in a local lab or against a system you are explicitly authorized to test. https://github.com/user-attachments/assets/b73af2fe-0e59-438b-80d6-be93fd75697b Overview CVE-2026-20896 is an authentication bypass in...
CVE-2026-17488 IBM i is Affected By An Improper Authentication Vulnerability in SST / DST
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication...