CVE-2022-0492

CVE-2022-0492 Container Escape Analysis toc Vulnerability Overview Vulnerability ID: CVE-2022-0492 Vulnerable Product: linux kernel - cgroup Affected Versions: linux kernel 5.17-rc3 Vulnerability Impact: When a container does not have additional security measures enabled, an attacker with root...

CVE-2022-45451

Introduction System Specs: Windows 10 1809 x64 EN Target: Acronis Home Cyber Protect Acronis Cyber Protect Vulnerability Description The Acronis "ngscan" anti-malware scan driver suffers from incorrect / improper access control placed on the filter communication port. The minifilter driver suppor...

CVE-2024-3656

Keycloak 24.0.5 is vulnerable to Broken Access Control vulnerability, where the attacker can use any authenticated user to perform some api action such as : Test LDAP connections via the testLDAPConnection endpoint. Retrieve unmanaged attributes of any user via the getUnmanagedAttributes endpoint...

CVE-2024-6782

CVE-2024-6782 Calibre 远程代码执行（CVE-2024-6782）Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...

CVE-2023-22515-Scan.

CVE-2023-22515-Scan About This is simple scanner for CVE-2023-22515, a critical vulnerability in Atlassian Confluence Data Center and Server that is actively being exploited in the wild by threat actors in order "to create unauthorized Confluence administrator accounts and access Confluence...

Digisol-DG-GR1321-s-Improper-Access-Control-CVE-2024-4231

Digisol-DG-GR1321-s-Improper-Access-Control-CVE-2024-4231...

CVE-2025-25618

CVE-2025-25618 Unifiedtransform v2.0 is vulnerable to Incorrect Access Control, allowing teachers to change the Section Name and Room Number — permissions that should be restricted to administrators. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2: Browse to th...

CVE-2023-22515-POC

CVE-2023-22515 CVE-2023-22515, a critical vulnerability affecting on-premises instances of Confluence Server and Confluence Data Center, a Broken Access Control vulnerability. Attlassian has provided a CVSS base score of 10.0 Exploit Brief explanation: 1- Due to how Xwork interceptors parses...

CVE-2023-32407-a-macOS-TCC-bypass-in-Metal

CVE-2023-32407-a-macOS-TCC-bypass-in-Metal...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

403bypasser

403bypasser Turco 403bypasser automatiza las técnicas utilizadas para eludir las restricciones de control de acceso en páginas objetivo. Esta herramienta continuará en desarrollo, está abierta a contribuciones. Inglés 403bypasser automatiza las técnicas utilizadas para eludir las restricciones de...

403bypasser

403bypasser Türkçe 403bypasser , hedef sayfalardaki erişim kontrolü kısıtlamalarını aşmak için kullanılan teknikleri otomatikleştirir. Bu araç geliştirilmeye devam edecektir, katkılara açıktır. English 403bypasser automates the techniques used to circumvent access control restrictions on target...

brokeCLAUDIA

🔓 brokeCLAUDIA - CVE-2025-41090 CVE-2025-41090 - Broken access control vulnerability in microCLAUDIA 📑 Table of Contents What is microCLAUDIA? Vulnerability CVE-2025-41090 📂 Public Disclosure CWE Broken Access Control Remediation Presentation Exploit 📂 Overview Requirements Installation Usage Not...

CVE-2024-38473-Nuclei-Template

CVE-2024-38473 Nuclei Template Description Nuclei template designed to detect Apache servers vulnerable to CVE-2024-38473. It first identifies servers running Apache 2.4.60 with default PHP-FPM settings. Then, it fuzzes for potential PHP files protected by ACLs that might be bypassed due to this...

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload POC of DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite I'm a simple man, I see cvss:10/10 I go in xD I saw this new CVE CVE-2025-64095 DNN Insufficient Access Control - Image Upload allows for Site Content...

derailed

derailed CVE-2021-40875: Improper Access Control in Gurock TestRail versions give it the url of the target without the md5 path https://foo.com Run dirsearch or your preferred fuzzing tool against the list. You'll noticed that a lot of the files a fairly standard in size 0B/15B or 25B/31B/32MB --...

CVE-2020-14965

CVE-2020-14965 root@kitploit: ██╗ ██╗████████╗███╗ ███╗██╗ ██╗███╗ ██╗ ██╗███████╗ ██████╗████████╗██╗ ██████╗ ███╗ ██╗ ██║ ██║╚══██╔══╝████╗ ████║██║ ██║████╗ ██║ ██║██╔════╝██╔════╝╚══██╔══╝██║██╔═══██╗████╗ ██║ ███████║ ██║ ██╔████╔██║██║ ██║██╔██╗ ██║ ██║█████╗ ██║ ██║ ██║██║ ██║██╔██╗ ██║...

WebminRCE-exploit

WebminRCE-exploit CVE-2022-0824, CVE-2022-0829 - File Manger privilege exploit Vulnerable application to test this PoC can be found here as a docker image. Prerequisites: Python3 Requests module Description Vulnerability Improper Access Control to Remote Code Execution Safe users Unpriviledged us...

CVE-2023-49982

CVE-2023-49982 School Fees Management System v1.0 - Incorrect Access Control - Privilege Escalation Description : Broken access control in School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...