CVE-2026-111874

A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of the component Career Portal. This manipulation of the argument applyToJobSubAction causes improper restriction of excessive authentication attempts. Remote exploitation of...

CVE-2022-23131

CVE-2022-23131 Zabbix SAML Authentication Exploit This Python script exploits a misconfigured SAML authentication flow on a Zabbix server. By providing a Zabbix server URL and a user default: Admin, the script generates an authenticated Zabbix session zbxsession, and attempts to access the...

CVE-2026-8181-PoC

🚨 CVE-2026-8181 | Burst Statistics Authentication Bypass -brightgreen.svg?style=for-the-badge !CAUTION CRITICAL ALERT: This vulnerability allows an unauthenticated remote attacker to bypass authentication and gain full Administrator privileges on the target WordPress site by simply injecting a...

CVE-2026-111874

The OpenCATS version 0.10.0 is vulnerable to improper restriction of excessive authentication attempts in the Career Portal component. The flaw exists within the processLogin function of the modules/careers/CareersUI.php file, where manipulation of the applyToJobSubAction argument allows for remo...

EUVD-2026-103385

A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of the component Career Portal. This manipulation of the argument applyToJobSubAction causes improper restriction of excessive authentication attempts. Remote exploitation of...

CVE-2026-111874 OpenCATS Career Portal CareersUI.php processLogin excessive authentication

A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of the component Career Portal. This manipulation of the argument applyToJobSubAction causes improper restriction of excessive authentication attempts. Remote exploitation of...

CVE-2026-111874 OpenCATS Career Portal CareersUI.php processLogin excessive authentication

A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of the component Career Portal. This manipulation of the argument applyToJobSubAction causes improper restriction of excessive authentication attempts. Remote exploitation of...

CVE-2026-111870

A security flaw has been discovered in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected element is the function isAdmin of the file admin/admin.php. Performing a manipulation results in missing authentication. The attack can be initiated...

React4Shell

React2Shell Exploit Proof of Concept PoC for React Server Components RSC / Next.js Remote Code Execution vulnerability. Description A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following...

CVE-2026-111870 itsmeravitejak Online-Examination-System admin.php isAdmin missing authentication

A security flaw has been discovered in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected element is the function isAdmin of the file admin/admin.php. Performing a manipulation results in missing authentication. The attack can be initiated...

CVE-2026-111870

The itsmeravitejak Online-Examination-System is vulnerable to a missing authentication flaw in the isAdmin function located in the admin/admin.php file. This security flaw allows for remote attacks where a manipulation of the affected element bypasses authentication requirements. Although the exp...

CVE-2026-111870 itsmeravitejak Online-Examination-System admin.php isAdmin missing authentication

A security flaw has been discovered in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected element is the function isAdmin of the file admin/admin.php. Performing a manipulation results in missing authentication. The attack can be initiated...

EUVD-2026-103381

A security flaw has been discovered in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected element is the function isAdmin of the file admin/admin.php. Performing a manipulation results in missing authentication. The attack can be initiated...

CVE-2024-7029

PoC tool for exploiting CVE-2024-7029 in AvTech devices 🎤 README Translation English فارسی 📸 Screenshot 💎 Introduction CVE-2024-7029 highlights a severe security issue in AVTech devices, where attackers can bypass authentication and execute arbitrary commands remotely. This vulnerability poses...

PT-2026-116603

Name of the Vulnerable Software and Affected Versions Vanus versions 0.8.0 through 0.9.0 Description An authentication flaw exists in the gateway CloudEvents HTTP receiver, allowing unauthenticated remote attackers to publish events to any eventbus. Attackers can bypass token authentication and...

CVE-2026-98805: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tipc: prevent GCM nonce reuse on peer key changes TIPC can encrypt traffic between nodes using a different transmit key for each node. In this mode, the AES-GCM nonce for a packet sent to a known peer consists of a 32-bit prefix ...

Security update for fetchmail (important)

openSUSE security update: security update for fetchmail ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22077-1 Rating: important References: bsc1282055 Cross-References: CVE-2026-94184 CVSS scores: CVE-2026-94184 SUSE : 8.1...

Security update for cosign (important)

openSUSE security update: security update for cosign ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22064-1 Rating: important References: bsc1272117 bsc1275025 bsc1278614 bsc1279215 bsc1282542 Cross-References: CVE-2026-56852 CVE-2026-56854...

CVE-2026-60206

CVE-2026-60206 – Oracle WebLogic Server SAML Authentication Bypass PoC This repository provides a proof‑of‑concept exploit for CVE‑2026‑60206 , a critical authentication bypass vulnerability in the SAML implementation of Oracle WebLogic Server. The flaw allows a remote, low‑privileged attacker to...

CVE-2025-67158

CVE-2025-67158 — Revotech I6032W-FHW Summary The Revotech I6032W-FHW IP camera firmware contains an authentication bypass vulnerability in the /cgi-bin/jvsweb.cgi endpoint. The device does not validate the user.name and user.digest fields included in JSON-based API requests, allowing...