CVE-2025-31161

CVE-2025-31161 Proof of Concept for CVE-2025-31161 / CVE-2025-2825 This POC will exploit the authbypass vulnerability to create a new user account with Admin level permissions. The Auth Bypass requires the username targetuser of an existing user on the CrushFTP server. The default is set to...

CVE-2023-27524

CVE-2023-27524 Apache Superset Auth Bypass CVE-2023-27524 Reference https://nvd.nist.gov/vuln/detail/CVE-2023-27524 https://github.com/horizon3ai/CVE-2023-27524 https://www.horizon3.ai/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/...

CVE-2024-9821

CVE-2024-9821 Bot for Telegram on WooCommerce = 1.2.4 - Authenticated Subscriber+ Telegram Bot Token Disclosure to Authentication Bypass Description The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to sensitive information disclosure due to missing authorization checks on th...

CVE-2026-29000-pac4j-jwt-auth-bypass

HTB Principal — CVE-2026-29000 Writeup Disclaimer: This exploit was developed solely for the retired HackTheBox machine "Principal". For educational purposes only. Do not use against systems you do not own or have explicit permission to test. Machine Info Field| Details ---|--- Name| Principal...

CVE-2017-3143

TSIG Bypass exploit Exploit for CVE-2017-3143 in Bind and CVE-2017-11104 in Knot DNS. See https://www.synacktiv.com/ressources/CVE-2017-3143BIND9TSIGdynamicupdatesvulnerabilitySynacktiv.pdf for more info. Author Clément Berthaux - clement dot berthaux at synacktiv dot com...

tscan

Telnetd Auth Bypass Scanner CVE-2026-24061 A Python-based scanner for detecting and exploiting the CVE-2026-24061 vulnerability in GNU Inetutils telnetd services. This tool scans IP addresses or networks for vulnerable telnetd services that allow authentication bypass leading to root shell access...

transfer.sh

SECURITY WARNING IP filter and HTTP auth bypass via unauthenticated X-Forwarded-For header spoofing transfer.sh Easy and fast file sharing from the command-line. This code contains the server with everything you need to create your own instance. Transfer.sh currently supports the s3 Amazon S3,...

CVE-2026-90800 Apache CouchDB: Auth bypass in prefixed _users and _replicator databases

Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the full contents of a prefixed user or replicator database via an unauthorised API endpoint. The use of prefixed system databases is very rare. Users are recommended to upgrade to...

CVE-2026-90800

Apache CouchDB versions 3.5.2 and below on all platforms are vulnerable to an authentication bypass in the chttpd component. The root cause is missing authorization checks, which allows any request to read the full contents of a prefixed _user or _replicator database via an unauthorized API endpo...

CVE-2026-90800 Apache CouchDB: Auth bypass in prefixed _users and _replicator databases

Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the full contents of a prefixed user or replicator database via an unauthorised API endpoint. The use of prefixed system databases is very rare. Users are recommended to upgrade to...

EXPLOIT-CVE-2026-40901

DataEase — Unauthenticated RCE via a 4-vulnerability chain CVE-2026-40901 & friends Auth bypass → JDBC blocklist bypass arbitrary file read → SQL injection → Java deserialization in Quartz → remote code execution asroot. Self-contained local lab Docker + working PoC. Fixed in DataEase v2.10.21...

proftpd-CVE-2026-42167-analysis

CVE-2026-42167 — ProFTPD modsql SQL Injection / Auth Bypass / RCE Independent reproduction, code-level root-cause walkthrough, and a frank exposure analysis for CVE-2026-42167 — the isescapedtext bypass in ProFTPD's modsql logging pipeline disclosed by ZeroPath Research and fixed in ProFTPD 1.3.9...

CVE-2026-41940

CVE-2026-41940 – cPanel/WHM Auth Bypass + Root Password Changer This script exploits an authentication bypass vulnerability in cPanel/WHM CVE-2026-41940 using a CRLF injection technique to forge an administrator session. Once successful, the script can change the root user's password in WHM and...

CVE-2026-49869

Kestra CVE-2026-49869 / CVE-2026-53576 Scanner Scans Kestra instances for the endsWith"/configs" authentication filter bypass. Kestra's AuthenticationFilter.java checks request.getPath.endsWith"/configs" instead of matching the exact path /api/v1/configs. Since Kestra addresses resources via...

cve-2026-20127

CVE-2026-20127 Scanner Overview This project is a Windows-based network scanning tool written in C++ that attempts to identify potential Cisco SD-WAN / vManage-like services and perform a vulnerability check against a referenced issue labeled CVE-2026-20127. Features IP range scanning start → end...

telnetd_CVE-2026-24061_tester

Telnetd CVE-2026-24061 Test Script A Python security testing tool to detect vulnerability to environment variable injection in telnetd servers via the NEW-ENVIRON telnet option. Overview This script tests telnetd servers for CVE-2026-24061 , a vulnerability that allows attackers to inject...

CVE-2022-36537

CVE-2022-36537 Summary R1Soft Server Backup Manager uses the ZK framework as the main framework. Its security requires all Web3 project parties to pay more attention to the security vulnerabilities of various Web3 infrastructures and patch them in time to avoid potential security risks and digita...

misfortune-cookie

CVE-2014-9222 "Misfortune Cookie" PoC suite Stack overflow in AllegroSoft RomPager's HTTP cookie handling all versions 4.34. A single unauthenticated request with a crafted Cookie: header corrupts memory. Effects: admin auth bypass, DoS/reboot, and with firmware-specific offsets remote code...

CVE-2026-58455-PoC

CVE-2026-58455 — Dockwatch Unauthenticated RCE auth bypass + command injection Proof-of-concept for CVE-2026-58455 : unauthenticated remote code execution in Dockwatch by Notifiarr, a self-hosted Docker container management web UI. Affects all versions through 0.6.567. Root cause verified from...

Old Age Home Management System v1.0 - SQL Injection

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter. id: CVE-2023-33338 info: name: Old Age Home Management System v1.0 - SQL Injection author: Harsh severity: critical description: | Old Age Home Management 1.0 is vulnerable to SQL Injection via the username...