vulnerable-nextjs-14-CVE-2025-29927

Reproducción de la omisión de autorización CVE-2025-29927 Este repositorio es una reproducción de la vulnerabilidad CVE-2025-29927 en el paquete next Cómo reproducir 1. Siga los pasos a continuación para clonar y ejecutar la aplicación Next.js 2. Pruebe que la autorización deniega el acceso al...

CVE-2026-83743 invoiceninja Invoice Ninja Vendor Portal Profile Update profile authorization

A weakness has been identified in invoiceninja Invoice Ninja up to 5.13.26. This affects an unknown part of the file /vedor/profile/ of the component Vendor Portal Profile Update. Executing a manipulation of the argument vendorcontact can lead to authorization bypass. The attack may be performed...

CVE-2026-83743

Invoice Ninja versions up to 5.13.26 are affected by an authorization bypass in the Vendor Portal Profile Update component (file /vendor/profile/). By manipulating the vendor_contact argument, a remotely authenticated user (low privileges) can bypass access controls, resulting in low impact on co...

EUVD-2026-68981

A weakness has been identified in invoiceninja Invoice Ninja up to 5.13.26. This affects an unknown part of the file /vedor/profile/ of the component Vendor Portal Profile Update. Executing a manipulation of the argument vendorcontact can lead to authorization bypass. The attack may be performed...

CVE-2026-83743 invoiceninja Invoice Ninja Vendor Portal Profile Update profile authorization

A weakness has been identified in invoiceninja Invoice Ninja up to 5.13.26. This affects an unknown part of the file /vedor/profile/ of the component Vendor Portal Profile Update. Executing a manipulation of the argument vendorcontact can lead to authorization bypass. The attack may be performed...

CVE-2023-27350-PoC

CVE-2023-27350 Este PoC demuestra cómo es posible eludir la autenticación en las versiones de PaperCut MF/NG desde la 8.0 hasta, sin incluir, 20.1.7, 21.2.11 y 22.0.9. Permite interactuar con el sistema sin utilizar credenciales de inicio de sesión válidas. Consultas de Shodan 1...

CVE-2018-12633-TPLink-Auth-Bypass

CVE-2018-12633-TPLink-Auth-Bypass Un estudio de caso técnico y análisis de explotación de la vulnerabilidad de omisión de autenticación en el firmware TP-Link TL-WR840N CVE-2018-12633. Análisis de Vulnerabilidad: TP-Link TL-WR840N Authentication Bypass CVE-2018-12633 ⚠️ Descargo de responsabilidad...

CVE-2026-19948 Cozy Blocks <= 2.2.17 - Missing Authorization to Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' Parameter

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.2.17. This is due to the plugin not properly verifying that a user is authorized to perform an...

EUVD-2026-68980

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.2.17. This is due to the plugin not properly verifying that a user is authorized to perform an...

EUVD-2026-68969

The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 1.4.52 via the guestticketlogin function and its p parameter. Th...

CVE-2026-19806 Support Genix <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token

The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 1.4.52 via the guestticketlogin function and its p parameter. Th...

CVE-2026-19806

The Support Genix WordPress plugin (≤ 1.4.52 ) is vulnerable to Authentication Bypass leading to Administrator Account Takeover via its guest_ticket_login() function and the publicly reachable /sgnix/?p= endpoint. The root cause is a weak site-wide AES-256-CBC encryption key derived from three tw...

CVE-2025-29927

CVE-2025-29927 Introducción Este documento presenta la investigación de la vulnerabilidad CVE-2025-29927 , que afecta al mecanismo Middleware en el framework Next.js. Next.js es un popular framework de código abierto de Vercel para desarrollar aplicaciones basadas en React. Admite renderizado del...

CVE-2021-3560

Exploit de omisión de autenticación de Polkit D-Bus Existe una vulnerabilidad en el servicio del sistema polkit que puede ser aprovechada por un atacante local sin privilegios para realizar operaciones privilegiadas. Para aprovechar la vulnerabilidad, el atacante invoca un método a través de D-Bu...

CVE-2024-4577-PHP-CGI-RCE

Este es un archivo YAML específicamente escrito para la vulnerabilidad php-CGI RCE - Alto Riesgo Resumen root@kitploit: php-CGI es una interfaz utilizada en servidores web para ejecutar scripts PHP, que conecta el intérprete de PHP con el servidor web a través de CGI Interfaz de Puerta de Enlace...

CVE-2019-12476

ADSelfService-Plus-PoC CVE-2019-12476 ADSelfService Plus versión 4.3.3 PoC para una evasión de autenticación en Windows 10. Afecta a todas las versiones de Windows Video del PoC Pasos para reproducir 1. Desconéctese de su red empresarial 2. Conéctese a su propio punto de acceso 3. Haga clic en...

CVE-2025-43921

CVE-2025-43921: Creación no autenticada de listas de correo en GNU Mailman 2.1.39 paquete cPanel/WHM Descubierto por: Firudin Davudzada y Musazada Aydan Fecha de divulgación: Abril 2025 ID de CVE: CVE-2025-43921 Gravedad: 5.3 Medio CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Tipo de ataque: Remo...

cloudflare-bypass-2026

Cloudflare Bypass Tool 2026 Un conjunto de herramientas multiestrategia para investigar y probar flujos de Cloudflare Turnstile / Challenge en macOS, Windows y Linux. Un conjunto de herramientas multienfoque para investigación y pruebas autorizadas de Cloudflare Turnstile / Challenge , compatible...

CVE-2026-82744

Not Failing Securely Failing Open vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling it raises, so a change meant to run does not. An Ash.Reactor change step can be gated by where validations that decide whether the change runs. Ash.Reactor.ChangeStep...

CVE-2026-82746

Missing Authorization vulnerability in ash-project ash allows an actor to update records forbidden by resource policies through the atomic path of Ash.updatemany/4. Ash.updatemany/4 runs as a single atomic statement a data-layer updatemany, for example a SQL MERGE whenever an atomic strategy is...