Xiaomi Mi WiFi R3G Routers - Local file Inclusion

Xiaomi Mi WiFi R3G devices before 2.28.23-stable are susceptible to local file inclusion vulnerabilities via a misconfigured NGINX alias, as demonstrated by api-third-party/download/extdisks../etc/config/account. With this vulnerability, the attacker can bypass authentication. id: CVE-2019-18371...

Next.js Middleware Bypass

Next.js contains a critical middleware bypass vulnerability affecting versions 11.1.4 through 15.2.2. The vulnerability allows attackers to bypass middleware security controls by sending a specially crafted 'x-middleware-subrequest' header, which can lead to authorization bypass and other securit...

Airflow Experimental <1.10.11 - REST API Auth Bypass

Airflow's Experimental API prior 1.10.11 allows all API requests without authentication. id: CVE-2020-13927 info: name: Airflow Experimental 1.10.11 - REST API Auth Bypass author: pdteam severity: critical description: | Airflow's Experimental API prior 1.10.11 allows all API requests without...

HPE Smart Update Manager < 8.5.6 - Remote Unauthorized Access

HPE Smart Update Manager SUM prior to version 8.5.6 could allow remote unauthorized access. id: CVE-2020-7136 info: name: HPE Smart Update Manager 8.5.6 - Remote Unauthorized Access author: gy741 severity: critical description: HPE Smart Update Manager SUM prior to version 8.5.6 could allow remot...

Cisco Small Business RV Series - OS Command Injection

Cisco Small Business RV Series routers RV16X/RV26X versions 1.0.01.02 and before and RV34X versions 1.0.03.20 and before contain multiple OS command injection vulnerabilities in the web-based management interface. A remote attacker can execute arbitrary OS commands via the sessionid cookie or...

Atlassian Jira Seraph - Authentication Bypass

Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also...

Zabbix - SAML SSO Authentication Bypass

When SAML SSO authentication is enabled non-default, session data can be modified by a malicious actor because a user login stored in the session was not verified. id: CVE-2022-23131 info: name: Zabbix - SAML SSO Authentication Bypass author: For3stCo1d,spac3wh1te severity: critical description:...

WooCommerce Payments - Unauthorized Admin Access

An issue in WooCommerce Payments plugin for WordPress versions 5.6.1 and lower allows an unauthenticated attacker to send requests on behalf of an elevated user, like administrator. This allows a remote, unauthenticated attacker to gain admin access on a site that has the affected version of the...

UniFi OS - Authentication Bypass via Path Traversal (..%2f)

UniFi OS devices contain an improper access control vulnerability caused by insufficient authorization checks, letting network attackers make unauthorized system changes, exploit requires network access. id: CVE-2026-34908 info: name: UniFi OS - Authentication Bypass via Path Traversal ..%2f...

CVE-2024-55211

CVE-2024-55211 Vulnerabilità di autenticazione basata su cookie in Tk-Rt-Wr135G Fornitore interessato : Think Technology Prodotto interessato : Wireless Router Ac 1199Mbps Tk-Rt-Wr135G Versione interessata : Firmware V3.0.2-X000 Descrizione La vulnerabilità consente di bypassare il modulo di logi...

CVE-2020-7598

CVE-2020-7598 - Prototype Pollution in minimist Disclaimer Questo progetto è stato creato solo per: apprendimento, ricerca sulla sicurezza, e laboratorio locale privato. Non utilizzarlo contro sistemi senza autorizzazione. Informazioni sulla CVE CVE-2020-7598 è una vulnerabilità di Prototype...

BadHost-CVE-2026-48710-Exploit

BadHost — CVE-2026-48710 Scanner Scanner solo di rilevamento per il bypass di autenticazione BadHost in Starlette / FastAPI — dove il middleware di autenticazione legge request.url.path invece di request.scope"path", consentendo a un'intestazione Host manipolata di introdurre un percorso consenti...

CVE-2026-24061

🚨 CVE-2026-24061 — “TelneTD” Bypass critico dell'autenticazione remota in GNU Inetutils telnetd Il fantasma del 2015 è tornato per possedere tutto ciò che esegue ancora telnet. Zero autenticazione. Una variabile d'ambiente. Shell root immediata. ⚠️ Panoramica CVE-2026-24061 è una vulnerabilità...

CVE-2026-76548

CVE-2026-76548 affects the User Profile Builder WordPress plugin in versions before 4.0.1 . The front-end file upload feature fails to properly restrict access, granting unauthenticated visitors capabilities normally reserved for privileged roles. This allows attackers to list the site's media li...

CVE-2023-27350

! Be careful executing this as it re-configures the server config in order to execute commands. The script reverts the changes on exit but might not revert it if the process is improperly killed ! CVE-2023-27350 Papercut अप्रमाणित RCE Versions root@kitploit: स्क्रिप्ट स्वचालित रूप से जाँचती है कि...

fortiweb-auth-bypass-check

Verifica del bypass di autenticazione FortiWeb Scanner per il bypass di autenticazione FortiWeb di Bishop Fox Verifica se un target è soggetto al bypass dell'autenticazione CVE-2025-64446 Utilizza solo un path traversal, non sfrutta il bypass dell'autenticazione vero e proprio Non esegue alcuna...

Exploitarium-Detections

Exploitarium KQL-Erkennungsabdeckung KQL-Erkennungsregeln für Microsoft Sentinel und Defender XDR, die die bikini/exploitarium -Veröffentlichung abdecken – ein persönliches Forschungsarchiv mit über 15 verschiedenen Schwachstellenzielen in über 109 verfolgten Dateien, veröffentlicht ohne...

CVE-2023-27524

CVE-2023-27524 Descrizione - POC per CVE-2023-27524: vulnerabilità di bypass dell'autenticazione in Apache Superset. - creato da antx il 2023-04-27. Dettagli - Attacchi di convalida delle sessioni in Apache Superset versioni fino alla 2.0.1 inclusa. Le installazioni che non hanno modificato la...

nextjs-middleware-auth-bypass

Deploy Docker per app Next.js Questo progetto è stato preparato per avviare l'app Next.js con Docker. Build Creazione dell'immagine Docker: root@kitploit: docker build -t next-app . Esecuzione Avviare il container: root@kitploit: docker run -d --name next-app --restart always -p 3000:3000 next-ap...

CVE-2026-63030

wp2shell — वर्डप्रेस कोर प्री-ऑथ RCE CVE-2026-63030 बैच रूट कन्फ्यूज़न + CVE-2026-60137 SQL इंजेक्शन बिना किसी डिपेंडेंसी वाला शोषण टूलकिट, WordPress Core में wp2shell कमज़ोरियों की श्रृंखला के लिए। एक अकेला अनाम HTTP अनुरोध, बिना किसी प्लगइन की आवश्यकता के, एक डिफ़ॉल्ट WordPress इंस्टॉलेशन पर...