645 matches found
RestroPress 3.0.0-3.2.1 - Authentication Bypass
RestroPress Online Food Ordering System WordPress plugin 3.0.0 to 3.1.9.2 contains an authentication bypass caused by exposure of user private tokens and API data via /wp-json/wp/v2/users endpoint, letting unauthenticated attackers forge JWT tokens and authenticate as other users including...
N-able N-central < 2026.3.1.10 - Authentication Bypass
N-able N-central versions through 2026.3.1 contain an authentication bypass that lets a remote unauthenticated attacker take over an administrator account and gain full control of the N-central server. CVE-2026-18577 is a bypass of the incomplete fix for CVE-2026-18556, so the 2026.3.1 Hotfix 1...
Hippoo Mobile App for WooCommerce <= 1.9.4 - Authentication Bypass to Admin Account Takeover
Hippoo Mobile App for WooCommerce WordPress plugin = 1.9.4 contains an authentication bypass caused by logic conflation in user permission checks, letting unauthenticated attackers take over administrator accounts via REST API password reset. id: CVE-2026-10580 info: name: Hippoo Mobile App for...
Nginx UI <= 2.3.7 - Unauthenticated Installer Exposure
Nginx UI 2.0.0 to 2.3.8 contains an authentication bypass caused by unauthenticated access to /api/install during first-run setup, letting remote attackers claim the initial admin account, exploit requires attacker to access the service before legitimate operator. id: CVE-2026-42221 info: name:...
CVE-2026-45156-POC
Hacker Matrix Glitch 🚨 CVE-2026-45156 🚨 Nextcloud useroidc ID4me JWT Signature Bypass Fully Automated Proof of Concept PoC Exploit for Admin Takeover. 📖 The Story Behind every CVE, there's a story. This one was found at 2 AM on a cold winter night, fueled by a breakup mashup on loop. Read the ful...
CVE-2025-31161
🚨 CVE-2025-31161 - Critical Authentication Bypass in CrushFTP CVE-2025-31161 is a critical authentication bypass vulnerability in CrushFTP, a popular Managed File Transfer MFT solution. An unauthenticated remote attacker can impersonate any known user including the default crushadmin administrato...
cve-2026-9558-poc
CVE-2026-9558 — Mautic Theme Templates Server-Side Template Injection SSTI to Full Admin Takeover Table of Contents Overview Affected Versions Root Cause Analysis Repository Structure Requirements Usage Expected Output References Disclaimer Overview CVE-2026-9558 is a Server-Side Template Injecti...
CVE-2026-8181
CVE-2026-8181 — Burst Statistics Authentication Bypass to Admin Account Takeover 📋 Vulnerability Information Item| Detail ---|--- CVE ID| CVE-2026-8181 Plugin| Burst Statistics – Privacy-Friendly WordPress Analytics Affected Versions| 3.4.0 – 3.4.1.1 Patched Version| 3.4.2 CVSS Score| 9.8 Critica...
CVE-2026-mikrotik-poc
MikroTik RouterOS PoC Collection This repository contains proof-of-concept PoC scripts for several MikroTik RouterOS security issues researched and documented in 2026. The materials are intended for authorized security research, laboratory validation, and controlled testing only. This project is...
CVE-2026-5076
☠️ CVE-2026-5076 ARMember Premium = 7.3.1 Insecure Password Reset Mechanism → Full Admin Account Takeover Plaintext Password Reset Keys Stored in Database + SQL Injection = Complete Admin Takeover 📋 Vulnerability Information Item| Detail ---|--- CVE ID| CVE-2026-5076 Plugin| ARMember – Membership...
CVE-2026-72898
🔴 CVE-2026-72898 - Unauthenticated SQL Injection Metabase — Unauthenticated SQL Injection → Full Administrator Takeover 📌 Overview CVE-2026-72898 is a maximum-severity CVSS 10.0 unauthenticated SQL injection vulnerability in Metabase that allows a remote attacker to inject arbitrary SQL into the...
CVE-2026-8181
CVE-2026-8181 - Burst Statistics Authentication Bypass CVSS 9.8 Critical — Authentication Bypass to Admin Account Takeover Description CVE-2026-8181 is an Authentication Bypass vulnerability in the Burst Statistics WordPress plugin version 3.4.0 to 3.4.1.1. This plugin is used by 200,000+ WordPre...
CVE-2026-72898
CVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection Metabase Pre-Authentication SQL Injection Leading to Admin Takeover Proof-of-concept for CVE-2026-72898, a critical unauthenticated SQL injection in Metabase's password-reset endpoint. The PoC injects a forged admin session row into the...
CVE-2026-23550
CVE-2026-23550 Modular DS header'User-Agent'; $userAgentMatches = $userAgent && Str::is'ModularConnector/ Linux', $userAgent; $originQuery = $request-has'origin' && $request-get'origin' === 'mo'; $isFromQuery = $originQuery || $userAgentMatches && $request-has'type'; // When is wp-load.php reques...
Mass-CVE-2026-23550-Exploit
🔥 CVE-2026-23550 Modular DS Scanner Multi-threaded Python scanner for CVE-2026-23550 CVSS 10.0 WordPress Modular DS plugin ≤2.5.1 vulnerability affecting 40k+ sites. Detects unauthenticated admin takeover via getLogin bypass with full wp-admin access verification. Features ✨ 🔥 Full admin access...
By-Poloss..-..CVE-2026-10580
CVE-2026-10580: Hippoo Mobile App for WooCommerce = 1.9.4 - Unauthenticated Authentication Bypass to Admin Takeover Unauthenticated → Administrator Account Takeover via Logic Conflation Bug 📌 Summary | ---|--- CVE| CVE-2026-10580 Plugin| Hippoo Mobile App for WooCommerce Versi| ≤ 1.9.4 CVSS| 9.8...
CVE-2025-5947
CVE-2025-5947 CVE-2025-5947 WordPress Service Finder Bookings ≤ 6.0 Exploit CVE-2025-5947 Exploit - Service Finder Bookings Exploit tool for authentication bypass vulnerability in WordPress Service Finder Bookings ≤ 6.0 plugin 📋 Table of Contents About the Vulnerability Technical Details...
CVE-2026-30862
CVE-2026-30862 PoC - Privilege Escalation in Appsmith Proof-of-Concept for Privilege Escalation in Appsmith via Stored XSS Disclosure: Originally reported by me via GHSA-5hw4-whxv-6794 ⚠️ Authorized pentesting/research use only. Vulnerability Information Field| Value ---|--- CVE ID| CVE-2026-30862...
siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization
CVE-2026-66012 — SiYuan MCP Unauthenticated Administrator Takeover Proof of Concept for CVE-2026-66012 CVSS 10.0 Critical, a missing-authorization vulnerability in SiYuan's MCP Model Context Protocol endpoint that allows an unauthenticated attacker to achieve administrator takeover and remote cod...