moodle-login-csrf

Этот репозиторий содержит файлы, используемые для обнаружения и эксплуатации двух уязвимостей Moodle: MSA-18-0020 CVE-2018-16854 и MSA-19-0004 CVE-2019-3847, которые используют возможность пользователей добавлять JavaScript на свои панели управления. MSA-18-0020 основана на CSRF на форме входа,...

ProxyLogon

ProxyLogon ProxyLogon — это формальное общее название для CVE-2021-26855, уязвимости на Microsoft Exchange Server, которая позволяет злоумышленнику обойти аутентификацию и выдать себя за администратора. Мы также объединили эту ошибку с другой уязвимостью после аутентификации — произвольной запись...

sam-the-admin

CVE-2021-42278 및 CVE-2021-42287을 악용하여 표준 도메인 사용자로부터 DA로 위장 알려진 이슈 Kali 외부에서는 작동하지 않습니다. 나중에 업데이트할게요 : 참고 CVE-2021-42287/CVE-2021-42278 무기화 sAMAccountName 스푸핑...

WordPress Burst Statistics 3.4.0-3.4.1.1 - Authentication Bypass

Burst Statistics – Privacy-Friendly WordPress Analytics plugin 3.4.0 to 3.4.1.1 contains an authentication bypass caused by incorrect return-value handling in ismainwpauthenticated function, letting unauthenticated attackers impersonate administrators, exploit requires knowledge of an administrat...

Gogs_RCE

GogsRCE 취약점 재현 0x01 프론트엔드에서 일반 계정 등록 0x02 go 컴파일로 관리자 세션 위조 go run main.go root@kitploit: package main import "bytes" "encoding/gob" "encoding/hex" "fmt" "io/ioutil" func EncodeGobobj mapinterfaceinterface byte, error for , v := range obj gob.Registerv buf := bytes.NewBuffernil err :=...

noPac

소개 NoPac 익스플로잇은 CVE-2021-42278 및 CVE-2021-42287과 같은 오래된 취약점을 악용하여 일반 사용자로부터 도메인 관리자를 가장합니다. 더 이상 귀찮은 의존성은 없습니다. 단일 바이너리일 뿐입니다. 세상에, 저는 Go를 사랑합니다. Python은 절대 못 따라옵니다. -shell 플래그는 impacket-smbexec를 실행합니다. 가장된 계정의 ccache 파일을 그냥 사용할 수도 있습니다. 주로 Impacket의 새로운 Go 구현gopacket을 테스트하기 위해 만들었고, 솔직히 꽤 멋집니다...

CVE-2021-34646

CVE-2021-34646 PoC Описание уязвимости от NVD Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the processemailverification function due to a random token generation weakness in the resetandmailactivationlink functio...

CVE-2026-8181-Lab

CVE-2026-8181 — Laboratorio di Bypass dell'Autenticazione di Burst Statistics Laboratorio Docker locale per CVE-2026-8181 , un bypass dell'autenticazione nel plugin WordPress Burst Statistics – Privacy-Friendly WordPress Analytics. Questo laboratorio confronta una versione vulnerabile del plugin...

CVE-2026-64961

ATutor is vulnerable to authentication bypass . Although a token validation check is present in the auto-login functionality, the values required for token validation remain uninitialized in certain code paths. An unauthenticated attacker who can determine a user's identifier and registration...

EUVD-2026-62678

A flaw was found in search-v2-operator. The operator's ClusterRole has permissions equivalent to a cluster administrator, allowing it to impersonate other entities, write Role-Based Access Control RBAC configurations, approve Certificate Signing Requests CSRs, and manage ManifestWork. This grants...

CVE-2026-19834

Technical details about CVE-2026-19834 are not publicly available in the provided documents. Based on the supplied sources, only high-level description is given; no verified affected versions, vulnerable components, exploit specifics, or remediation steps are included. Monitor for updates.

PT-2026-72034

Name of the Vulnerable Software and Affected Versions Webkul Bagisto versions prior to 2.4.5 Description An authorization bypass exists in the Admin Customer Impersonation Feature within the file /admin/customers/login-as-customer/. A remote attacker can exploit this by manipulating the ID...

CVE-2026-54489

Dell Virtual Storage Integrator for VMware vSphere Client (pre-10.11.1.0) contains a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially disclose information and hijack active sessions, impersonating users (including admins). Dell recommends upgrad...

CVE-2026-15348

The CVE affects the WordPress plugin Premium Packages – Sell Digital Products Securely up to version 7.0.4 . The vulnerability arises in the download() function, which is hooked to the unauthenticated WordPress wp action and decodes the attacker-controlled wpdmppdl parameter with only base64_deco...

CVE-2026-32823

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, the application exposes server-side state changes through GET routes...

GHSA-C2XG-QJQW-2V98 MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator

MantisBT 2.28.3 and earlier contains a critical authentication bypass in the SOAP API's mcichecklogin function. Any user knowing any valid cookiestring can authenticate as any other user knowing their username, including the administrator, without knowing the target's password. The vulnerability ...

CVE-2026-56451

A vulnerability has been identified in Opcenter X All versions V2604. Affected applications do not properly validate the algorithm specified in the JSON Web Token JWT header. This could allow an unauthenticated remote attacker to forge arbitrary JWT, bypass authentication mechanisms and impersona...

CVE-2026-56451

A vulnerability has been identified in Opcenter X All versions V2604. Affected applications do not properly validate the algorithm specified in the JSON Web Token JWT header. This could allow an unauthenticated remote attacker to forge arbitrary JWT, bypass authentication mechanisms and impersona...

EUVD-2026-43650

A vulnerability has been identified in Opcenter X All versions V2604. Affected applications do not properly validate the algorithm specified in the JSON Web Token JWT header. This could allow an unauthenticated remote attacker to forge arbitrary JWT, bypass authentication mechanisms and impersona...

PT-2026-58855

Name of the Vulnerable Software and Affected Versions Citrix XenServer SDK versions prior to 26.15.0 XenCenter versions prior to 2026.4.0 Description Some SDKs lack proper TLS verification during network communication with a host running XAPI. This flaw allows an attacker to perform a...