CVE-2022-23131

zabbix-saml-bypass-poc cve-2022-23131 This program is only for internal risk self-inspection by client enterprise users, and is prohibited for any form of unauthorized security testing. fofa: app="ZABBIX-监控系统" && body="saml" Usage: go build -o zexp chmod a+x zexp ./zexp check -t...

CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC

CVE-2024-47533 - Cobbler XMLRPC Authentication Bypass RCE Exploit ⚠️ Critical Remote Code Execution via Authentication Bypass in Cobbler 🛠️ PoC implementation by @dollarboysushil 💡 Overview Cobbler, a Linux installation server that enables rapid setup of network installation environments, has an...

CVE-2021-33044

CVE-2021-33044 Dahua IPC/VTH/VTO devices auth bypass exploit About: The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. use - python3 dahuaexploit.py...

CVE-2016-10140-Zoneminder-Poc

ZoneMinder Unauthorized Access CVE-2016-10140 Poc -- Batch Verification Script Vulnerability Description ZoneMinder is an open-source video surveillance system. When abnormal events occur, you can receive email or SMS notifications. There is an information disclosure and authentication bypass...

watchTowr-vs-Fortiweb-AuthBypass

watchTowr-vs-Fortiweb-AuthBypass Detection Artifact Generator for FortiWeb Authentication Bypass See our blog post for technical details Detection in Action python watchTowr-vs-Fortiweb-AuthBypass.py 192.168.1.99 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / //...

CVE-2026-110864

The Better Auth framework (versions 1.5.0-beta.12 before 1.7.7 ) contains an authentication bypass vulnerability within the OAuth Proxy plugin . The root cause is that attackers can forge encrypted profiles when the proxy shares a global secret and uses cookie-stored state. By obtaining an encryp...

CVE-2026-110864 Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxy

Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin that allows unauthenticated attackers to sign in as other users by forging encrypted profiles. When the proxy shares the global secret and cookie-stored state is used, attackers c...

CVE-2026-110863

The @better-auth/sso library (versions 1.7.0-rc.2 before 1.7.3 ) contains an authentication bypass vulnerability. The root cause is that the account lookup mechanism ignores the providerId , allowing an authenticated attacker to register a personal SSO provider using a legitimate provider's OIDC ...

CVE-2026-110862

The Better Auth library (versions 1.4.0-beta.18 before 1.7.7 ) is vulnerable to an authentication bypass via Magic Links. The root cause is the reuse of OAuth state values as Magic Link tokens . An unauthenticated attacker can initiate an OAuth sign-in using a victim's email address and subsequen...

CVE-2026-110852

The n8n workflow automation tool versions prior to 1.123.83 , 2.x before 2.41.4 , and 2.42.x before 2.42.1 are vulnerable to an authentication bypass (CWE-288). The root cause is that dynamic-path webhook resolution matches requests based solely on the path, failing to validate the server-generat...

GenCrushSSTIExploit

EN GenCrushSSTIExploit is a PoC exploit tool targeting the SSTI Server-Side Template Injection vulnerability in CrushFTP CVE-2024-4040. This tool demonstrates how to exploit this vulnerability for educational and ethical hacking purposes only. Features Establishes a session with the CrushFTP serv...

HingeSDK

HingeSDK Unofficial Python SDK for the Hinge API. Programmatically interact with Hinge to fetch recommendations, send messages, download media, and automate interactions. Authentication & Environment Setup To use this SDK, you need valid authentication credentials. You can store these in a .env...

360WFP_Exploit

360WFPExploit A proof-of-concept PoC demonstrating potential abuse of the 360 Security WFP driver 360netmonx64wfp.sys interface, aimed at verifying the risk that IOCTL interfaces without caller authentication may be misused by third-party programs. This project is intended for security research a...

cpanel2shell-scanner

cpanel2shell-scanner A high-fidelity scanner for the cPanel/WHM authentication bypass tracked as CVE-2026-41940. It identifies vulnerable hosts without producing the false-negatives common to public proofs-of-concept and detections, and without triggering the account lockout and root-IP-allowlist...

bmcweb

OpenBMC webserver This component attempts to be a "do everything" embedded webserver for OpenBMC. Features The webserver implements a few distinct interfaces: DBus event websocket. Allows registering for changes to specific dbus paths, properties, and will send an event from the websocket if thos...

SCCMSecrets

SCCMSecrets SCCMSecrets.py is an SCCM policies exploitation tool. It goes beyond NAA credentials extraction, and aims to provide a comprehensive approach regarding SCCM policies exploitation. The tool can be executed from various levels of privileges, and will attempt to uncover potential...

hontel

HonTel HonTel is a Honeypot for Telnet service. Basically, it is a Python v2.x application emulating the service inside the chroot environment. Originally it has been designed to be run inside the Ubuntu/Debian environment, though it could be easily adapted to run inside any Linux environment...

CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...

Exch-CVE-2021-26855_Priv

Exch-CVE-2021-26855 ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability...

ADTrapper

ADTrapper - Active Directory Security Analysis Platform Professional Active Directory Security Analysis and Threat Detection Platform Transform Windows authentication logs into actionable security insights with advanced threat detection and interactive visualizations Overview ADTrapper is a...