CVE-2025-1739

CVE-2025-1738 & CVE-2025-1739 — Trivision Camera NC227WF PoC 📋 Overview CVE| CVSS v3.1| Score| CWE| Type ---|---|---|---|--- CVE-2025-1739| AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N| 7.1| CWE-288| Authentication Bypass via Basic Auth Leak 🔓 CVE-2025-1739 — Basic Auth Code Exposure / Auth Bypass CWE-288...

CVE-2026-90579

CVE-2026-90579 affects Cheshire Cat AI up to version 1.9.2 . The flaw resides in the _authorize_http_key function within core/cat/factory/custom_auth_handler.py, where manipulation of the user_id argument leads to missing authentication . An unauthenticated remote attacker can exploit this over t...

EUVD-2026-77064

A vulnerability has been found in cheshire-cat-ai Cheshire Cat AI up to 1.9.2. This affects the function authorizehttpkey of the file core/cat/factory/customauthhandler.py. The manipulation of the argument userid leads to missing authentication. The attack may be initiated remotely. The exploit h...

CVE-2026-90579 cheshire-cat-ai Cheshire Cat AI custom_auth_handler.py _authorize_http_key missing authentication

A vulnerability has been found in cheshire-cat-ai Cheshire Cat AI up to 1.9.2. This affects the function authorizehttpkey of the file core/cat/factory/customauthhandler.py. The manipulation of the argument userid leads to missing authentication. The attack may be initiated remotely. The exploit h...

CVE-2025-0324-axis-vapix-privesc

CVE-2025-0324 — Root Cause Analysis A client-controlledHost header as a root-group backdoor in the AXIS OS VAPIX Device Configuration framework. %20%2F%208.8%20High%20\NVD-b3261e TL;DR Axis Communications disclosed CVE-2025-0324 on 2025-06-02 as a critical CVSS 9.4 privilege-escalation flaw in th...

vicidial-cve-2024-8503-blind-sqli-poc

vicidial-cve-2024-8503-blind-sqli-poc Unauthenticated time-based blind SQL injection proof of concept for VICIdial's VERMAJAXfunctions.php endpoint CVE-2024-8503. The project is intended for authorized security testing, validation, and education only. Overview CVE-2024-8503 is an unauthenticated...

CVE-2023-31714

CVE-2023-31714 - Chitor-CMS 1.1.2 Pre-Auth SQL Injection Found by msd0pe https://github.com/waqaskanju/Chitor-CMS Project by waqaskanju chitor1.1.py Patched since 69d3442 commit 2023/04/13 SQL Injection was found in the /editschool.php?id= endpoint and doesn't need any authentication. chitor1.0.p...

nextjs-middleware-auth-bypass

Next.js App Docker Deploy This project is prepared for running a Next.js application using Docker. Build Creating a Docker image: root@kitploit: docker build -t next-app . Run Starting the container: root@kitploit: docker run -d --name next-app --restart always -p 3000:3000 next-app Access Access...

Ivanti Sentry - Authentication Bypass

A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration. id: CVE-2023-38035 info: name: Ivanti...

WooCommerce Payments - Unauthorized Admin Access

An issue in WooCommerce Payments plugin for WordPress versions 5.6.1 and lower allows an unauthenticated attacker to send requests on behalf of an elevated user, like administrator. This allows a remote, unauthenticated attacker to gain admin access on a site that has the affected version of the...

Zabbix - SAML SSO Authentication Bypass

When SAML SSO authentication is enabled non-default, session data can be modified by a malicious actor because a user login stored in the session was not verified. id: CVE-2022-23131 info: name: Zabbix - SAML SSO Authentication Bypass author: For3stCo1d,spac3wh1te severity: critical description:...

CVE-2026-0073-Android-client-TLS-auth-bypass

CVE‑2026‑0073 is a logic bug in Android’s ADB daemon adbd that allows an attacker to bypass TLS mutual authentication and open a remote shell on a device that has wireless debugging enabled and has been paired with any computer at least once. The root cause is a single misused API: the return val...

CVE-2026-33439-Python-PoC

CVE-2026-33439 Python PoC Standalone Python proof of concept for the OpenAM pre-authentication remote code execution vulnerability in jato.clientSession deserialization. The embedded shaded Click/Xalan gadget reads a shell command from the cmd HTTP header and returns its output in the HTTP...

JFrog_CVE-2026-65615-ByGLM

JFrog Artifactory 预认证 RCE 全链复现（CVE-2026-42018 / CVE-2026-65616 / CVE-2026-65615） 仅供授权安全测试、防御研究与安全教学使用。该漏洞链已被厂商修复（建议升级至 7.161.15+），请仅在一次性的隔离实验环境中复现。未经授权对他人系统实施本仓库所述任何操作均属违法行为，由此产生的一切后果由操作者自行承担。 本仓库为 edrabb.fr 披露的 JFrog Artifactory 预认证 RCE 漏洞链的完整复现交付物：基于官方镜像...

DashOverride

DashOverride What This is a pre-authenticated RCE exploit for VMware vRealize Operations Manager vROPS that impacts versions Run root@kitploit: researcher@mars:$ ./poc.py + usage: ./poc.py connec...

Another-Metabase-RCE-CVE-2023-38646

Extensión del RCE sin autenticación en Metabase CVE-2023-38646 explicado aquí Esto me ayudó a evitar errores relacionados con "base de datos ya en uso" con H2 y postgre como motores root@kitploit: "token": "TOKEN", "details": "isondemand": false, "isfullsync": false, "issample": false, "cachettl"...

CVE-2017-7921

Hikvision Camera Lister & Snapshot Tool Standalone tool to list Hikvision cameras from a file and take a snapshot from each using valid credentials HTTP Basic or Digest auth or the CVE auth bypass. Intended to run on another host for testing. Features List cameras from a text file one host or...

cve-2026-67363-67364

Balbooa Forms pre-auth RCE + Payment Tampering CVE-2026-67364 / CVE-2026-67363 PoC and detection templates for two pre-auth vulnerabilities in Balbooa Forms combaforms for Joomla, fixed in 2.4.3.2. CVE-2026-67364 — Pre-auth PHP Code Injection - RCE CVSS 9.8 CVE-2026-67363 — Pre-auth Payment Amoun...

CVE-2026-39987

CVE-2026-39987 marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability root@kitploit: / | |// / / / / / / |/ |/ \ / | | | \ /| | /| //|/|/ / | | | / -----/ | |/ |/ ----- \ | |/ \ / / / / //// / | |// CVE-2026-39987 Marimo /terminal/ws —...

cve-2026-42945

CVE-2026-42945 — NGINX Rewrite Heap Overrun: Analysis, DoS & Credited RCE Port Security research on CVE-2026-42945 CVSS 4.0 9.2 CRITICAL: a heap buffer overrun in NGINX's script engine where a rewrite with arguments in the replacement e.g. rewrite ^. /new?c=1; leaves the engine's isargs flag set...