cve-2018-10933

CVE-2018-10933 CVE-2018-10933 omisión de autenticación de libssh, un contenedor Docker vulnerable que escucha en el puerto 2222 para explotación. Un parche básico de prueba de concepto de libssh incluido en el contenedor para omitir la autenticación. Para iniciar sesión use el "myuser" /...

cve-2018-10933

CVE-2018-10933 CVE-2018-10933 libssh authentication bypass, a vulnerable Docker container that listens on port 2222 for exploitation. A basic proof-of-concept libssh patch included in the container to bypass auth. To login use the default "myuser" / "mypassword" from libssh. A patch is applied to...

CVE-2022-33891

CVE-2022-33891 - Apache Spark Command Injection Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author AkbarTrilaksana Description The Apache Spark UI offers the possibility to enable ACLs via the...

CVE-2026-41940

CVE-2026-41940: cPanel/WHM Authentication Bypass Single & Multi-Target Disclaimer: This document and the associated script exploit.py are provided strictly for educational purposes, security research, and authorized penetration testing. Do not use this software against systems you do not own or d...

CVE-2024-31964

CVE-2024-31964 CVE-2024-31964 PoC: Mitel 6900w Series SIP Phone - Temporary Authentication Bypass Vulnerability details Summary It consists of a temporary authentication bypass vulnerability in the HTTP administrative website panel of several Mitel Products. Impact Allows an attacker to modify th...

f5-bigip-rce-cve-2020-5902

F5 BIG-IP RCE CVE-2020-5902 Herramienta de detección de vulnerabilidades Resumen El 20200706, se filtró en línea una vulnerabilidad RCE en la interfaz de administración de tráfico TMUI de F5 BIG-IP. El componente TMUI Interfaz de usuario de gestión de tráfico de F5 BIG-IP tiene una vulnerabilidad...

cve-2022-37298

CVE-2022-37298: RCE in Shinken Monitoring Versions affected: 2.4.3 Disclosure link: https://github.com/naparuba/shinken/commit/2dae40fd1e713aec9e1966a0ab7a580b9180cff2 CVE link: https://vulners.com/cve/CVE-2022-37298 Description The SafeUnpickler class found in shinken/safepickle.py implements a...

CVE-2019-10915

The vulnerability is an authentication bypass in the TIA Administrator server. An attacker could execute arbitrary application commands through websockets on the node.js server which is externally exposed by default. By exploiting this vulnerability, an unauthenticated remote attacker could perfo...

cpanel2shell-scanner

cpanel2shell-scanner A high-fidelity scanner for the cPanel/WHM authentication bypass tracked as CVE-2026-41940. It identifies vulnerable hosts without producing the false-negatives common to public proofs-of-concept and detections, and without triggering the account lockout and root-IP-allowlist...

CVE-2025-0108-PoC

CVE-2025-0108 Proof of Concept PoC This repository contains a Proof of Concept PoC for the CVE-2025-0108 vulnerability, which is an authentication bypass issue in Palo Alto Networks' PAN-OS software. The scripts provided here test for the vulnerability by sending a crafted HTTP request to the...

CVE-2024-29855

CVE-2024-29855 Veeam Recovery Orchestrator Authentication Bypass CVE-2024-29855 by Sina Kheirkhah @SinSinology of SummoningTeam @SummoningTeam Technical Analysis A root cause analysis of the vulnerability can be found on my blog Summary Veeam published a CVSS 9 advisory for a authentication bypas...

watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.py

cve-2026-41940 cPanel/WHM Authentication Bypass - Detection Artifact Generator cPanel/WHM Authentication Bypass Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if cPanel/WHM is vulnerable to a recent authentication bypass. Detection in Action Test against ...

Apache-OFBiz-Authentication-Bypass

Vulnerabilidad de Bypass de Autenticación en Apache OFBiz CVE-2023-51467 y CVE-2023-49070 Este script de exploit y PoC están escritos para un análisis detallado de CVE en vsociety. El sistema de planificación de recursos empresariales ERP Apache OFBiz, un marco web versátil basado en Java...

CVE-2024-45409

Explotación de omisión de autenticación Ruby-SAML / GitLab CVE-2024-45409 Este script explota la CVE-2024-45409 que permite a un atacante no autenticado con acceso a cualquier documento SAML firmado emitido por el IDP forjar una Respuesta/Aserción SAML y obtener acceso como cualquier usuario en...

CVE-2023-51764

CVE-2023-51764 Postfix SMTP Smuggling - Expect Script POC send an email that is legitimate, but inside the email there is many others emails different senders, recipients, subjet, etc. The initial email is check for SPF/DKIM/DMARC, the others inside are not ! usage: ./cve-2023-51764.sh mx.fqdn po...

CVE-2024-1709-ConnectWise-ScreenConnect-Authentication-Bypass

ConnectWise ScreenConnect: Authentication Bypass Introduction This project aims to exploit an authentication bypass vulnerability in ConnectWise ScreenConnect. It provides a script to demonstrate the exploit. Please ensure you have the necessary permissions before attempting to use this script...

CVE-2022-46169_unauth_remote_code_execution

CVE-2022-46169 - Ejecución remota de código no autenticado en Cacti Ejecución remota de código no autenticado a través de omisión de autenticación e inyección de comandos en Cacti 1.2.23 y 1.3.0 DESCARGO DE RESPONSABILIDAD: Este script está diseñado para auditar la seguridad de los sistemas. Solo...

ProxyLogon

ProxyLogon ProxyLogon es el nombre genérico formal para CVE-2021-26855, una vulnerabilidad en Microsoft Exchange Server que permite a un atacante eludir la autenticación y hacerse pasar por el administrador. También hemos encadenado este error con otra vulnerabilidad posterior a la autenticación ...

CVE-2020-1472

CVE-2020-1472 Checker & Exploit Code for CVE-2020-1472 aka Zerologon Tests whether a domain controller is vulnerable to the Zerologon attack, if vulnerable, it will resets the Domain Controller's account password to an empty string. NOTE: It will likely break things in production environments eg...

Published-CVE

Published-CVE Este repositorio contiene descripciones y exploits para dos vulnerabilidades de seguridad: 1. CVE-2023-33580: Cross-Site Scripting Almacenado XSS en el Student Study Center Management System V1.0, que permite a atacantes ejecutar código JavaScript arbitrario. 2. CVE-2023-33584:...