CVE-2019-19550

CVE-2019-19550 Description Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. Important Dates Announcement to Vendor: 2019-12-02 Public...

palo-alto-cve-2026-0265-checker

CVE-2026-0265 Risk Checker for Palo Alto PAN-OS A Python script that connects to a list of Palo Alto Networks firewalls and Panorama appliances over SSH and reports each device's exposure to CVE-2026-0265 — an authentication bypass vulnerability in PAN-OS affecting devices with the Cloud...

CVE-2024-48322

CVE-2024-48322 You need to have an account in the RunCodes instance, any privilege. Install with poetry and run providing the base url of the instance. $ python pay.py Look at your email inbox, the password should be there...

f5-bigip-rce-cve-2020-5902

F5 BIG-IP RCE CVE-2020-5902 Vulnerability Detection Tool Summary On 20200706, the F5 BIG-IP TMUI RCE vulnerability was disclosed online. The TMUI component Traffic Management User Interface of F5 BIG-IP has an authentication bypass vulnerability. This vulnerability arises from a difference betwee...

CVE-2025-31161

CVE-2025-31161 CrushFTP Authentication Bypass Scanner A Python tool to detect and test for CVE-2025-31161 vulnerability in CrushFTP servers. 📖 Description This script tests for the authentication bypass vulnerability CVE-2025-31161 in CrushFTP servers that allows remote attackers to authenticate...

CVE-2025-55182-POC-SCANNER

CVE-2025-55182: Critical Pre-Authentication RCE in React Server Components Security Research byschema.cx "Control is an illusion. It's the systems we build that control us—unless we understand them first." 📋 Table of Contents Disclaimer & Legal Notice Executive Summary Technical Description...

CVE-2025-13390

WP Directory Kit = 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover Summary The WP Directory Kit plugin for Wordpress version 1.4.4 and below contains an authentication bypass in its auto-login functionality. The vulnerability allows unauthenticated attackers to gain...

cve-2025-29927-nextjs

Himalaya Tech Admin Panel — CVE-2025-29927 Demo WARNING: This application is intentionally vulnerable. For educational and authorized security research purposes only. Do NOT deploy to a public server. About This Demo This app demonstrates CVE-2025-29927 , a critical authentication bypass...

CVE-2025-63667

CVE-2025-63667 — Vatilon-based IP Cameras Vulnerability Evidence Sanitized Summary Several Vatilon-based IP cameras observed brands: SIMICAM, KEVIEW, ASECAM issue Session-Id tokens without verifying credential correctness. This flaw allows unauthenticated attackers to obtain valid sessions and...

CVE-2020-29607-POC

Pluck CMS 4.7.13 File Upload RCE Exploit 🚨 Educational Remote Code Execution Exploit 🚨 Author: Ron Jost Hacker5preme Reference: Exploit-DB CVE: CVE-2020-29607 ⚠️ Disclaimer: This script is for educational and authorized testing purposes only. Do not use it on systems you do not own or have explici...

CVE-2026-41940

CVE-2026-41940 - WHM/cPanel Authentication Bypass Mass Exploit 📋 Description CVE-2026-41940 is a critical authentication bypass vulnerability in WHM/cPanel that allows attackers to bypass authentication and gain root access to a server without valid credentials. The vulnerability leverages CRLF...

CVE-2021-3560

CVE-2021-3560 a reliable C based exploit for CVE-2021-3560. Summary: Yestreday i stumbled upon this blog post by Kevin Backhouse discovered this vulnerability, i tried the bash commands provided in the blogpost and to my surpise it worked on my Kali Linux box! CVE-2021-3560 is an authentication...

CVE-2024-0012

Palo Alto PAN-OS CVE-2024-0012 Vulnerability Checker This Python script checks for the presence of a critical authentication bypass vulnerability in Palo Alto Networks PAN-OS Management Web Interface, identified as CVE-2024-0012. The vulnerability enables an unauthenticated attacker to gain...

legion

Legion ZK Auth 🛡️ True Zero-Knowledge Authentication with Hardware-Bound Device Ring Signatures 🎯 What is Legion? Legion is a zero-knowledge authentication system that proves you're authorized without revealing who you are. You prove something based on public data without linking your current...

CVE-2020-13937

CVE-2020-13937 1. Vulnerability Description： Apache Kylin has a RESTful API that exposes configuration information without any authentication. 2. Reproduction Vulnerable comparison Non-vulnerable comparison Writing PoC Verify correct single URL: pocsuite -r CVE-2022-26134.py -u url Verify...

auth

Auth - Authentication and User Management by Supabase Auth is a user management and authentication server written in Go that powers Supabase's features such as: Issuing JWTs Row Level Security with PostgREST User management Sign in with email, password, magic link, phone number Sign in with...

brutemap

Brutemap .. image:: https://brutemap-dev.github.io/static/brutemap-logo.jpg :target: https://brutemap-dev.github.io :alt: Brutemap Logo |Build Status| |Python| |License| .. |Build Status| image:: https://travis-ci.org/brutemap-dev/brutemap.svg?branch=master :target:...

CVE-2023-23752

CVE-2023-23752 Exploit for CVE-2023-23752 4.0.0 GET /api/index.php/v1/config/application?public=true HTTP/1.1 Host: 10.9.49.205 User-Agent: curl/7.68.0 Accept: / Mark bundle as not supporting multiuse HTTP/1.1 200 OK Date: Mon, 20 Mar 2023 15:14:05 GMT Server: Apache/2.4.41 Ubuntu x-frame-options...

freeradius-server

The FreeRADIUS server BuildStatusLink !Coverity statusCoverityStatusCoverityStatusLink !OSS-Fuzz statusOssFuzzOssFuzzLink Introduction The FreeRADIUS Server Project is a high performance and highly configurable multi-protocol policy server, supporting RADIUS, DHCPv4 DHCPv6, DNS, TACACS+ and VMPS...

github-search

github-search A collection of tools to perform searches on GitHub. Install git clone https://github.com/gwen001/github-search cd github-search pip3 install -r requirements.txt Most of the time GitHub requires a token to perform searches. You can create a .tokens file in the cloned repo directory...