176413 matches found
CVE-2026-73727
HPE Networking Fabric Composer contains an information disclosure vulnerability in its API that allows an authenticated low-privilege operator user to access sensitive data beyond their authorized privilege level. A successful exploit could be leveraged to gain further access to network services ...
CVE-2026-73726 Authentication Bypass in HPE Networking Fabric Composer allows Unauthorized Administrative Access
A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an unauthenticated adjacent actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access,...
CVE-2026-73726
CVE-2026-73726 affects the underlying operating system of HPE Networking Fabric Composer , allowing an unauthenticated adjacent actor to circumvent existing authentication controls. Successful exploitation grants an attacker administrative access , the ability to modify system configurations , an...
EUVD-2026-69453
A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an unauthenticated adjacent actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access,...
CVE-2026-73706
CVE-2026-73706 is an Authentication Bypass vulnerability in the API of HPE Networking Fabric Composer . An unauthenticated remote attacker can obtain limited system information and change the state of certain settings on a vulnerable system. Successful exploitation may expose insight into interna...
CVE-2026-73706 Authentication Bypass in the API of HPE Networking Fabric Composer allows Data Exposure and Unauthorized Changes
A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system information and to change the state of certain settings of a vulnerable system. Successful exploitation could allow an attacker to gain insight into internal servic...
EUVD-2026-69431
A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system...
CVE-2026-73704
A command sanitization bypass in the API of HPE Networking Fabric Composer allows an authenticated low-privilege operator to escalate to administrative access , resulting in complete system compromise. The vulnerability is classified as Authenticated Command Injection per the CVELIST record. The ...
CVE-2026-73704 Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer API
A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system...
bypass360mimikatz_x64
طريقة: تعديل الموارد، إضافة توقيع رقمي كلمة فك الضغط: 6613kris清水川崎...
CVE-2020-5421
إعادة إنتاج الثغرة الأمنية CVE-2020-5421 في Spring نظرة عامة على الثغرة تتيح CVE-2020-5421 تجاوز الحماية ضد هجمات RFD من خلال معامل المسار jsessionid. وقد أُضيفت الحماية السابقة ضد RFD لمواجهة CVE-2015-5211. ما هي RFD ثغرة التنزيل الانعكاسي للملفات RFD هي أسلوب هجوم يتم من خلاله تنزيل ملف افتراضي...
hikvision_CVE-2017-7921_auth_bypass_config_decryptor
hikvisionCVE-2017-7921authbypassconfigdecryptor Ce fichier Python déchiffre le fichier de configuration utilisé par les caméras Hikvision vulnérables à la CVE-2017-7921. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Description Contournement d'authentification des...
SMSOTPBOT
ghost-OTPBOT ghost-OTPBOT هو أكثر روبوتات التقاط OTP والرسائل النصية SMS تقدمًا وتنوعًا، وهو قادر على الحصول على رموز OTP وSMS من الضحايا من خلال انتحال صفة شركة أو بنك. يمكنك استخدامه للحصول على رمز OTP لعمليات تسجيل الدخول والحسابات البنكية والبطاقات الائتمانية وApple Pay والمزيد. انضم إلى...
EUVD-2026-69577
An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...
CVE-2026-19766 Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer
An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...
CVE-2026-19766
HPE Networking Fabric Composer is affected by an authentication bypass vulnerability in the underlying operating system. An unauthenticated adjacent attacker can exploit this to execute arbitrary code as a privileged user , resulting in complete compromise of the AFC host . The NVD rates this as ...
CVE-2026-8181
CVE-2026-8181 — Burst Statistics 3.4.0 – 3.4.1.1 — Contournement d'authentification menant à la prise de contrôle du compte administrateur Résumé de la vulnérabilité Le plugin WordPress Burst Statistics versions 3.4.0 à 3.4.1.1 est vulnérable à un contournement d'authentification non authentifié...
CVE-2026-29000
تجاوز المصادقة عبر JWT/JWE - إثبات المفهوم PoC نص برمجي لإثبات المفهوم PoC يوضح ثغرة تجاوز المصادقة باستخدام رموز JSON Web Tokens JWT وتشفير JSON Web Encryption JWE. تستغل هذه الأداة البيئات التي تتحقق بشكل غير صحيح من خوارزميات الرموز بقبولها رموز JWT غير موقّعة alg: none داخل بنية JWE صالحة. كي...
CVE-2026-41940
⚠️ CVE-2026-41940 - Contournement d'authentification cPanel & WHM Contournement d'authentification préalable critique dans cPanel & WHM 📌 Aperçu CVE-2026-41940 est une vulnérabilité critique de contournement d'authentification affectant cPanel & WHM et WP Squared. Un attaquant distant non...
auth-bypass-CVE-2025-40554
CVE-2025-40554 – SolarWinds Web Help Desk تجاوز المصادقة PoC استعلام Shodan root@kitploit: http.favicon.hash:"1895809524" Nuclei root@kitploit: nuclei -u https://TARGET:8443 -t CVE-2025-40554.yaml nuclei -l listtarget.txt -t CVE-2025-40554.yaml root@kitploit: pip install -r requirements.txt...