CVE-Newgen-Software-Advisories

Newgen Software – CVE Proof of Concepts This repository contains Proof of Concept PoC material and technical documentation for multiple CVE vulnerabilities discovered in products developed by Newgen Software Technologies Limited. The vulnerabilities documented here are publicly assigned CVEs and...

CVE-2023-3460_POC

CVE-2023-3460 Exploit for CVE-2023-3460 - Unauthorized admin access for Ultimate Member plugin. Made with Golang root@kitploit: ╔══════════════════════════════════════════════════╗ ╔══════════════════════════════════════════════════╗ ║ DISCLAIMER ║ ║ ABOUT THE PROJECT ║ ║ ║ ║ ║ ║ This Proof of...

cve-2025-24472-fortinet_authbypass_reproduction

CVE-2025-24472 — Fortinet FortiOS / FortiProxy Authentication Bypass Overview CVE-2025-24472 is an authentication bypass vulnerability in Fortinet FortiOS and FortiProxy. An unauthenticated attacker can craft specially formed CSF Central Security Fabric proxy requests to gain super-admin privileg...

CVE-2023-7028

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

CVE-2026-75816

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-75816 CVE-2026-75816 Frontend Admin by DynamiApps 3.29.11 — shabti The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, 3.29.12. This i...

Triofox - Improper Access Control

The Gladinet Triofox solution before 12.91.1126.65588 and CentreStack before 12.10.595.65696 allow unauthenticated access to the /management/admindatabase.aspx endpoint, exposing sensitive database management functionality to anyone with network access. An unauthenticated attacker can remotely...

CVE-2024-10924-Bypass-MFA-Wordpress-LAB

CVE-2024-10924 Bypass MFA WordPress - Exploit Lab This repository provides a lab for exploiting the CVE-2024-10924 vulnerability in WordPress, specifically to bypass two-factor authentication MFA and gain access to the WordPress administration panel. Prerequisites To deploy this lab in your...

EUVD-2026-87367

Flame through 2.4.0 contains an improper restriction of excessive authentication attempts vulnerability in the POST /api/auth login endpoint that allows unauthenticated attackers to brute-force the admin password. Attackers can submit unlimited password guesses without rate limiting, attempt...

CVE-2022-26923_AD-Certificate-Services

CVE-2022-26923 AD Certificate Services Date of publication : 10/05/2022 Attack complexity: Low Privileges required: Low CVSS Score : 8.1 The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Directo...

bw-dump

BW-Dump Updated 2 : This vulnerability was assigned CVE-2023-38840. Updated : A patch was released on GitHub pull request 5813 which fixes the vulnerability. The affected versions are Bitwarden Desktop 2023.7.0 and below. Description A proof-of-concept tool that extracts the master password from ...

CVE-2026-82329

CVE-2026-82329 — JFrog Artifactory Unauthenticated Authentication Bypass Mass Exploit -red.svg Critical Authentication Bypass CVSS 9.8 — Actively Exploited in the Wild This tool is a mass exploit for CVE-2026-82329, a vulnerability that allows an unauthenticated attacker with network access to...

CVE-2026-100502 Flame through 2.4.0 Admin Token Insufficient Session Expiration

Flame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpoint that allows attackers with former admin access to obtain tokens with arbitrary lifespans by supplying unvalidated duration parameters. Attackers can mint near-permanent administrator tokens that...

p2p

P2P Remote Desktop Remote Desktop P2P based - Portable, No Configuration or Installation Needed. How it works Compile and Open p2p.exe as admin in 2 different PC's. Copy the My Lan or Wan IP and communicate it to other peer and vice versa. The 2 peers have now the 2 endpoint to connect to, so pre...

CVE-2026-19952

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-19952 CVE-2026-19952 — WordPress WordPress — Frontend Admin by DynamiApps 3.29.12 — DynamiApps The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in...

CVE-2025-3102

🔐 CVE-2025-3102 – Authentication Bypass in SureTriggers WordPress Plugin 🚨 CVE-2025-3102 is a critical authentication bypass vulnerability affecting the SureTriggers: All-in-One Automation Platform WordPress plugin, which is actively installed on over 100,000 websites. Due to the nature of the fl...

CVE-2021-21014

PoC Limited CVE-2021-21014 Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Affected version: = Magento 2.4.1 User...

CVE-2026-7654

CVE-2026-7654 CVE-2026-7654 Admin Columns PHP Object Injection RCE Exploit...

CVE-2026-37072

CVE-2026-37072 Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php An unauthenticated attacker can exploit a Local File Inclusion vulnerability in the 'lang' GET parameter. By sending a specially crafted POST request with t...

CVE-2026-5076

☠️ CVE-2026-5076 ARMember Premium = 7.3.1 Insecure Password Reset Mechanism → Full Admin Account Takeover Plaintext Password Reset Keys Stored in Database + SQL Injection = Complete Admin Takeover 📋 Vulnerability Information Item| Detail ---|--- CVE ID| CVE-2026-5076 Plugin| ARMember – Membership...

CVE-2020-10129

CVE-2020-10129 - SearchBlox product before V-9.2 is vulnerable to Privileged Escalation-Lower user is able to access Admin Product Description: SearchBlox simplifies enterprise search for complex organizations. SearchBlox intuitive and intelligent tools offer out-of-the-box setup, secure...