HVCIPwned

CVE-2024-35250 Local privilege escalation via untrusted pointer dereference in Windows Kernel Streaming driver ks.sys. Data-only exploit — bypasses Hypervisor-protected Code Integrity HVCI. Summary Field| Detail ---|--- CVE| CVE-2024-35250 Component| ks.sys Kernel Streaming Bug Class| Untrusted...

CVE-2026-46558

CVE-2026-46558 Plane’s V2 asset subsystem trusted workspace slugs and asset UUIDs without enforcing the right membership checks, which let one authenticated user read, copy, delete, and overwrite assets in other workspaces. Intro I found this issue while reviewing Plane , the open-source project...

CVE-2026-82602

A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /ass.php. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used...

CVE-2026-82564

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ashai allows a caller of an identity-configured tool to update or destroy records it never identified, including every row in the table. In AshAi.Tool.Execution, identityfilter/3 built the update/destroy filter directly...

CVE-2026-10580

WordPress - Hippoo Mobile App for WooCommerce = 1.9.4 - Authentication Bypass to Admin Account Takeover Overview This tool is a proof-of-concept exploit for CVE-2026-10580 , an authentication bypass vulnerability affecting the Hippoo Mobile App for WooCommerce WordPress plugin versions = 1.9.4. T...

CVE-2026-49468-LiteLLM-Auth-Bypass

CVE-2026-49468 — LiteLLM Unauthenticated Auth Bypass via Host-Header Route Confusion Pre-authentication authentication/authorization bypass in the LiteLLM proxy BerriAI. A single crafted Host header makes the proxy evaluate its auth decision against a public health route while FastAPI still...

CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR

CVE-2026-52217 Cross-tenant and cross-user authorization flaw IDOR / BOLA in the VTEX Commerce Platform Checkout service. Field| Value ---|--- CVE ID| CVE-2026-52217 Vendor| VTEX Product| VTEX Commerce Platform, Checkout service chk Affected| Observed on chk v2.367.3 and reproduced on v2.374.3. T...

CVE-2026-49230-APISIX-jwe-decrypt-Auth-Bypass

CVE-2026-49230 — Apache APISIX jwe-decrypt Authentication Bypass Proof of concept for an authentication bypass in the Apache APISIX jwe-decrypt plugin. The plugin decrypts a JWE token and forwards its plaintext to the upstream, acting as an authentication gate — but it never validates the AES-GCM...

CVE-2026-41651

🔥 CVE-2026-41651 — Escalada de Privilegios Local TOCTOU en PackageKit Pack2TheRoot Exploit de escalada de privilegios local dirigido al demonio de PackageKit. Escala desde un usuario local sin privilegios hasta root mediante una vulnerabilidad de condición de carrera TOCTOU. 📌 Descripción General...

CVE-2026-50338

CVE-2026-50338 Omisión de autenticación entre emisores en el servidor de recursos de Spring Cloud Azure B2C Descripción AadB2cResourceServerAutoConfiguration en spring-cloud-azure-autoconfigure construye un JwtDecoder que confía en seis emisores de línea AAD login.microsoftonline.com,...

CVE-2026-41940-analysis

CVE-2026-41940 — Bypass de Root en Pre-Autenticación en cPanel y WHM mediante Inyección CRLF en Archivos de Sesión Un análisis técnico profundo orientado a defensores 1. Resumen ejecutivo Campo| Valor ---|--- ID CVE| CVE-2026-41940 CVSS v3.1| 9.8 Crítico — Red / Complejidad Baja / Sin Privilegios...

CVE-2026-0073

🤖 CVE-2026-0073 - Wireless ADB Authentication Bypass 📌 Overview CVE-2026-0073 is a critical authentication bypass vulnerability in Android’s Wireless ADB adbd daemon. An attacker on the same network can bypass the mutual TLS authentication and connect to the device without user approval or previo...

CVE-2026-27626-POC

CVE-2026-27626: OliveTin password-argument command injection OliveTin lets an admin define "actions": shell commands with parameterized arguments that users can trigger from a web UI or API. Before templating a user-supplied value into the shell command, OliveTin is supposed to run it through...

Kimai-CVE-2026-49865-POC

Kimai CVE-2026-52824 — Default APPSECRET Authentication Bypass Note: The repository URL contains an outdated CVE ID CVE-2026-49865. The correct and current CVE tracked in this repository is CVE-2026-52824 GHSA-jr9p-4h4j-6c58. Proof-of-concept exploit toolkit for the hardcoded default APPSECRET...

CVE-2026-43866

camel-jms: Reproductor de omisión de filtro con DefaultExchangeHolder forjado CVE-2026-43866 Este proyecto demuestra la CVE-2026-43866 , una omisión bypass de la corrección de la CVE-2026-40860 en los componentes camel-jms y camel-sjms / familia JMS de Apache Camel. La CVE-2026-40860 añadió una...

CVE-2026-46591

camel-neo4j Reproducción de Inyección Cypher CVE-2026-46591 Este proyecto demuestra una inyección Cypher en el componente camel-neo4j de Apache Camel, registrada como CVE-2026-46591. El productor construye la cláusula WHERE de Cypher para sus operaciones de coincidencia/recuperación y eliminación...

CVE-2026-46588

camel-couchdb CouchDb Header Injection Reproducer CVE-2026-46588 This project demonstrates a message-header injection in Apache Camel's camel-couchdb component, tracked as CVE-2026-46588. The component reads several Exchange headers to control its behaviour — CouchDbDatabase, CouchDbSeq, CouchDbI...

CVE-2026-46587

Inyección de cabecera CCB en camel-couchbase — Reproducción CVE-2026-46587 Este proyecto demuestra una inyección en las cabeceras del mensaje en el componente camel-couchbase de Apache Camel, registrada como CVE-2026-46587. El componente lee varias cabeceras del Exchange para controlar su...

CVE-2026-46585

camel-lucene QUERY Header Injection Reproducer CVE-2026-46585 This project demonstrates a message-header injection / authorization bypass in Apache Camel's camel-lucene component, tracked as CVE-2026-46585. The Lucene query producer reads the full-text search phrase from an Exchange header, but t...

CVE-2025-47227

CVE-2025-47227 Exploit para CVE-2025-47227 - Restablecimiento de contraseña de ScriptCase Pre-Auth CVE-2025-47227 es una omisión de autenticación pre-auth CVSS 9.8 en el entorno de producción de ScriptCase ≤ 9.12.006. El endpoint login.php permite restablecer la contraseña del administrador sin...