CVE-2024-57521-SQL-Injection-PoC

Authenticated SQL Injection in RuoYi v4.7.9 Bypass of CVE-2024-42900 Introduction I discovered a Blind SQL Injection vulnerability in the createTable feature of RuoYi Framework v4.7.9. This allows an authenticated administrator to execute arbitrary SQL commands via the sql parameter. This is a...

CVE-2026-80254

ShizenBox2 (edge-app) , a product by se-digital.net, is affected by an authorization bypass caused by a user-controlled key issue. An attacker with valid credentials can exploit this to change another user's password , resulting in a high integrity impact (CVSS v3.0: 6.5 MEDIUM , CVSS v4.0: 7.1 H...

CVE-2026-80254

Authorization bypass through user-controlled key issue exists in ShizenBox2 edge-app. If exploited, an attacker who can log in to the product may change the other user's password...

EUVD-2026-70366

Authorization bypass through user-controlled key issue exists in ShizenBox2 edge-app. If exploited, an attacker who can log in to the product may change the other user's password...

CVE-2026-23004-Automotive-UDS-Authentication-Bypass-via-Replay-Attack

CVE-2026-23004 – Automotive UDS Authentication Bypass via Replay Attack Program Code Python CAN‑UDS sim root@kitploit: udssim.py - ECU that authenticates with a simple challenge import random, hashlib class ECU: def initself: self.secret = b'longsecretkey' def generatechallengeself: self.challeng...

EUVD-2026-70363

SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authentication enrollment is completed. An attacker with the password for an MFA-required but unenrolled account can access protected functionality without providing a second factor...

CVE-2026-84831 Mandatory MFA bypass before enrollment

SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authentication enrollment is completed. An attacker with the password for an MFA-required but unenrolled account can access protected functionality without providing a second factor...

CVE-2026-84831

SEPPmail Secure Email Gateway versions before 15.0.7 create a fully privileged session before mandatory multi-factor authentication enrollment is completed. An attacker who knows the password for an MFA-required but not-yet-enrolled account can access protected functionality without providing a s...

EUVD-2026-70327

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API. A low privileged remote attacker could potentially exploit this vulnerability, leading to Protection mechanism bypass...

CVE-2026-74769

Dell PowerProtect Data Manager versions 20.2.0.0 and below contain an Incorrect Authorization vulnerability in the REST API . A low-privileged remote attacker could exploit this to bypass protection mechanisms, resulting in a HIGH integrity impact (CVSS 3.1 base score 6.5 MEDIUM , vector AV:N/AC:...

CVE-2026-74769

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API. A low privileged remote attacker could potentially exploit this vulnerability, leading to Protection mechanism bypass...

inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth

...

httpd mod_auth directory protection bypassed by a doubled slash in the request path

...

EUVD-2026-70320

A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without being authenticated to the SYS600 system itself. Only the SYS600 system users should be permitted to view and modify...

CVE-2026-9853

CVE-2026-9853 is a vulnerability in Hitachi Energy's SYS600 application that allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without completing SYS600's own authentication. This effectively bypasses the intended ac...

CVE-2026-9853

A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without being authenticated to the SYS600 system itself. Only the SYS600 system users should be permitted to view and modify...

next88

next88 - React Server Components RCE Scanner High-performance Go implementation for detecting React Server Components RCE vulnerabilities CVE-2025-55182 & CVE-2025-66478. Features 🚀 High Performance : Compiled Go binary with goroutine-based concurrency 🔍 Multiple Detection Methods : Safe...

auth-header-trust-rules

auth-header-trust-rules Un pequeño conjunto de reglas de Semgrep que señala código que toma decisiones de autenticación, autorización o confianza basadas en cabeceras de solicitudes HTTP que un atacante controla. El ejemplo canónico de esta clase de vulnerabilidad es CVE-2025-29927: Next.js...

CVE-2015-8522.RCE

CVE-2015-8522 The Tivoli FastBack Server 6.1.4 application is vulnerable to a stack-based buffer overflow allowing threat-actors to gain Arbitrary Code Execution ACE via a remote TCP-connection. The PoC provided in this repository leverages this vulnerability to both execute CMD.exe on the target...

OurSharePoint-CVE-2025-53770

OurSharePoint — CVE-2025-53770 PoC Self-contained, single-binary SharePoint RCE tool. Generates a TypeConfuseDelegate gadget chain as raw MS-NRBF bytes no ysoserial.exe, wraps it in a DataSet deserialization payload, and delivers it over HTTP using the authentication bypass — all in one shot...