Lucene search
+L

176413 matches found

CVE
CVE
added 2026/09/01 7:47 p.m.17 views

CVE-2026-73727

HPE Networking Fabric Composer contains an information disclosure vulnerability in its API that allows an authenticated low-privilege operator user to access sensitive data beyond their authorized privilege level. A successful exploit could be leveraged to gain further access to network services ...

6.5CVSS5.9AI score0.00201EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/09/01 7:47 p.m.35 views

CVE-2026-73726 Authentication Bypass in HPE Networking Fabric Composer allows Unauthorized Administrative Access

A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an unauthenticated adjacent actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access,...

6.8CVSS0.00169EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/01 7:47 p.m.12 views

CVE-2026-73726

CVE-2026-73726 affects the underlying operating system of HPE Networking Fabric Composer , allowing an unauthenticated adjacent actor to circumvent existing authentication controls. Successful exploitation grants an attacker administrative access , the ability to modify system configurations , an...

6.8CVSS5.8AI score0.00169EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/09/01 7:47 p.m.6 views

EUVD-2026-69453

A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an unauthenticated adjacent actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access,...

6.8CVSS5.8AI score0.00169EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/01 7:46 p.m.23 views

CVE-2026-73706

CVE-2026-73706 is an Authentication Bypass vulnerability in the API of HPE Networking Fabric Composer . An unauthenticated remote attacker can obtain limited system information and change the state of certain settings on a vulnerable system. Successful exploitation may expose insight into interna...

8.6CVSS5.9AI score0.00281EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/09/01 7:46 p.m.33 views

CVE-2026-73706 Authentication Bypass in the API of HPE Networking Fabric Composer allows Data Exposure and Unauthorized Changes

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system information and to change the state of certain settings of a vulnerable system. Successful exploitation could allow an attacker to gain insight into internal servic...

8.6CVSS0.00281EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/01 7:46 p.m.8 views

EUVD-2026-69431

A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system...

8.8CVSS5.9AI score0.00318EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/01 7:46 p.m.31 views

CVE-2026-73704

A command sanitization bypass in the API of HPE Networking Fabric Composer allows an authenticated low-privilege operator to escalate to administrative access , resulting in complete system compromise. The vulnerability is classified as Authenticated Command Injection per the CVELIST record. The ...

8.8CVSS5.9AI score0.00318EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/09/01 7:46 p.m.34 views

CVE-2026-73704 Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer API

A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system...

8.8CVSS0.00318EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 7:45 p.m.4 views

bypass360mimikatz_x64

طريقة: تعديل الموارد، إضافة توقيع رقمي كلمة فك الضغط: 6613kris清水川崎...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 7:43 p.m.4 views

CVE-2020-5421

إعادة إنتاج الثغرة الأمنية CVE-2020-5421 في Spring نظرة عامة على الثغرة تتيح CVE-2020-5421 تجاوز الحماية ضد هجمات RFD من خلال معامل المسار jsessionid. وقد أُضيفت الحماية السابقة ضد RFD لمواجهة CVE-2015-5211. ما هي RFD ثغرة التنزيل الانعكاسي للملفات RFD هي أسلوب هجوم يتم من خلاله تنزيل ملف افتراضي...

8.7CVSS6.8AI score0.10736EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 7:39 p.m.2 views

hikvision_CVE-2017-7921_auth_bypass_config_decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor Ce fichier Python déchiffre le fichier de configuration utilisé par les caméras Hikvision vulnérables à la CVE-2017-7921. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Description Contournement d'authentification des...

9.8CVSS7.3AI score0.99998EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/01 7:33 p.m.5 views

SMSOTPBOT

ghost-OTPBOT ghost-OTPBOT هو أكثر روبوتات التقاط OTP والرسائل النصية SMS تقدمًا وتنوعًا، وهو قادر على الحصول على رموز OTP وSMS من الضحايا من خلال انتحال صفة شركة أو بنك. يمكنك استخدامه للحصول على رمز OTP لعمليات تسجيل الدخول والحسابات البنكية والبطاقات الائتمانية وApple Pay والمزيد. انضم إلى...

5.9AI score
SaveExploits0
EUVD
EUVD
added 2026/09/01 7:30 p.m.5 views

EUVD-2026-69577

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...

9.6CVSS6.2AI score0.00265EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 7:30 p.m.32 views

CVE-2026-19766 Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...

9.6CVSS0.00265EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/01 7:30 p.m.27 views

CVE-2026-19766

HPE Networking Fabric Composer is affected by an authentication bypass vulnerability in the underlying operating system. An unauthenticated adjacent attacker can exploit this to execute arbitrary code as a privileged user , resulting in complete compromise of the AFC host . The NVD rates this as ...

9.6CVSS6.2AI score0.00265EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 7:29 p.m.5 views

CVE-2026-8181

CVE-2026-8181 — Burst Statistics 3.4.0 – 3.4.1.1 — Contournement d'authentification menant à la prise de contrôle du compte administrateur Résumé de la vulnérabilité Le plugin WordPress Burst Statistics versions 3.4.0 à 3.4.1.1 est vulnérable à un contournement d'authentification non authentifié...

9.8CVSS5.9AI score0.14608EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/01 7:28 p.m.3 views

CVE-2026-29000

تجاوز المصادقة عبر JWT/JWE - إثبات المفهوم PoC نص برمجي لإثبات المفهوم PoC يوضح ثغرة تجاوز المصادقة باستخدام رموز JSON Web Tokens JWT وتشفير JSON Web Encryption JWE. تستغل هذه الأداة البيئات التي تتحقق بشكل غير صحيح من خوارزميات الرموز بقبولها رموز JWT غير موقّعة alg: none داخل بنية JWE صالحة. كي...

9.3CVSS7AI score0.05856EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/01 7:28 p.m.3 views

CVE-2026-41940

⚠️ CVE-2026-41940 - Contournement d'authentification cPanel & WHM Contournement d'authentification préalable critique dans cPanel & WHM 📌 Aperçu CVE-2026-41940 est une vulnérabilité critique de contournement d'authentification affectant cPanel & WHM et WP Squared. Un attaquant distant non...

9.8CVSS7.4AI score0.98527EPSS
SaveExploits74
Kitploit
Kitploit
added 2026/09/01 7:28 p.m.6 views

auth-bypass-CVE-2025-40554

CVE-2025-40554 – SolarWinds Web Help Desk تجاوز المصادقة PoC استعلام Shodan root@kitploit: http.favicon.hash:"1895809524" Nuclei root@kitploit: nuclei -u https://TARGET:8443 -t CVE-2025-40554.yaml nuclei -l listtarget.txt -t CVE-2025-40554.yaml root@kitploit: pip install -r requirements.txt...

9.8CVSS7.4AI score0.58447EPSS
SaveExploits2
Rows per page
Query Builder