48471 matches found
davscan
DAVScan DAVScan is a quick and lightweight webdav scanner designed to discover hidden files and folders on DAV enabled webservers. The scanner works by taking advantage of overly privileged/misconfigured WebDAV servers or servers vulnerable to various disclosure or authentication bypass...
CVE-2024-45337-POC
CVE-2024-45337-POC Proof of concept POC for CVE-2024-45337 Build root@kitploit: go version go version go1.23.2 linux/amd64 go build Usage root@kitploit: Usage of ./CVE-2024-45337-POC: -addr string Address of ssh server default "127.0.0.1:2222" -authorised-pubkey string The allowed pubkey that wil...
CVE-2019-17662
CVE-2019-17662 Python implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit Based on the original EDB PoC by Nikhith Tumamlapalli EDB ID: 47519 Original PoC exploit does not work due to path normalisation in the Python Requests library. The code in...
CVE-2024-4040
CVE-2024-4040 Una vulnerabilidad de inyecciรณn de plantillas del lado del servidor en CrushFTP en todas las versiones anteriores a 10.7.1 y 11.1.0 en todas las plataformas permite a atacantes remotos no autenticados leer archivos del sistema de archivos fuera del Sandbox VFS, eludir la autenticaci...
CVE-2025-32433
CVE-2025-32433 CVE-2025-32433 Summary and Attack Overview CVE-2025-32433 is a critical unauthenticated remote code execution RCE vulnerability in the Erlang/OTP SSH server, disclosed on April 16, 2025. Erlang/OTP SSH is a library used in various distributed and telecom applications. The flaw aris...
CVE-2023-27350-POC
CVE-2023-27350-POC Description: This tool is designed to exploit an authentication bypass vulnerability in PaperCut MF/NG versions 8.0 and above, but prior to versions 20.1.7, 21.2.11, or 22.0.9. The vulnerability allows for unauthorized access to the system and can potentially be used for...
CTT-Sovereign-Vortex
CTT-Sovereign-Vortex CTT-Terrminus-Vortex CVE-2026-2406 ๐ฐ๏ธ CTT-Sovereign-Vortex: Terrminus Refraction CVE-2026-2406 "The system is only as secure as the time it occupies." Lead Architect: Americo Simoes @amexsimoes Methodology: Convergent Time Theory CTT v2.0 Target: Terrminus Authentication...
CVE-2023-27524
CVE-2023-27524 Herramienta para encontrar CVE-2023-27524 Apache Superset - Bypass de Autenticaciรณn...
EUVD-2026-74832
Parse Server versions = 9.0.0 9.10.1-alpha.7 contain an authentication bypass in the built-in LDAP authentication adapter. The adapter forwarded the client-supplied password to the directory without verifying that a password had been supplied, and treated any non-error response from the directory...
CVE-2026-87806
Parse Server versions = 9.0.0
CVE-2026-87806 Parse Server 9.0.0 Authentication Bypass via LDAP Empty Password
Parse Server versions = 9.0.0 9.10.1-alpha.7 contain an authentication bypass in the built-in LDAP authentication adapter. The adapter forwarded the client-supplied password to the directory without verifying that a password had been supplied, and treated any non-error response from the directory...
CVE-2022-23131
zabbix-saml-bypass-poc cve-2022-23131 This program is only for internal risk self-inspection by client enterprise users, and is prohibited for any form of unauthorized security testing. root@kitploit: fofa: app="ZABBIX-็ๆง็ณป็ป" && body="saml" Usage: root@kitploit: go build -o zexp chmod a+x zexp...
Nuclei-Template-Exploit-F5-BIG-IP-iControl-REST-Auth-Bypass-RCE-Command-Parameter
Nuclei Template Exploit F5 BIG-IP iControl REST Auth Bypass RCE | Command Parameter CVE-2022-1388 is an authentication bypass vulnerability in the REST component of BIG-IPโs iControl API that was assigned a CVSSv3 score of 9.8. The iControl REST API is used for the management and configuration of...
CVE-2020-25867
CVE-2020-25867 : SoPlanning Sharing Key Bypass Information Vulnerable Version : 1.46.01 Fixed Version : 1.47 and above CVE : CVE-2020-25867 Timeline 26/06/2020 : This vulnerability report was sent to the vendor 21/07/2020 : The vulnerability is fixed Risks The sharing key system is vulnerable to...
CVE-2026-41940_exploit
============================================================================= CVE-2026-41940 - cPanel & WHM Authentication Bypass Exploit Vulnerability: Session-file manipulation through CRLF injection in cpsrvd's HTTP Basic authentication handler CVE: CVE-2026-41940 CVSS: 9.8 Critical CWE: CWE-9...
polkit-auto-exploit
polkit-auto-exploit Automatic Explotation PoC for Polkit CVE-2021-3560 Summary CVE-2021-3560 is an authentication bypass on polkit, which allows unprivileged user to call privileged methods using DBus, in this exploit we will call 2 privileged methods provided by accountsservice CreateUser and...
CVE-2026-41940-PoC-Exploit
๐ CVE-2026-41940 - cPanel/WHM Authentication Bypass Exploit cPanel & WHM Edition - CRLF Injection to Authentication Bypass & Full Session Hijacking ๐ Overview This exploit leverages CVE-2026-41940 , a critical authentication bypass vulnerability in cPanel/WHM. By injecting a crafted CRLF payload...
CVE-2022-22972
CVE-2022-22972 vmware authentication bypass root@kitploit: -host string Auth Servers,bugs365.com -url string Vul url,-url https://xxx.com -user string username default "administrator"...
cve-2026-41940-cpanel_authbypass_reproduction
CVE-2026-41940 โ cPanel & WHM Authentication Bypass CVSS v3.1: 9.8 Critical Overview CVE-2026-41940 is a critical authentication bypass vulnerability in cPanel & WHM that allows unauthenticated attackers to gain full administrative access to the control panel. The vulnerability was exploited in t...
CVE-2023-42793
CVE-2023-42793 JetBrains TeamCity before 2023.05.4 is vulnerable to authentication bypass leading to RCE Usage To get a reverse shell root@kitploit: python3 exploit.py References https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/...