CVE-2026-86770

Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication. Due to the default utf8mb4_unicode_ci database collation, an attacker who registers IdP accounts with accent or case variants of a victim's username can bypass username matching and achieve account takeo...

CVE-2026-86762

Snipe-IT before 8.7.0 is vulnerable to an authentication bypass via its API middleware. The CheckUserIsActivated middleware is not applied to the api middleware group in app/Http/Kernel.php, and deactivating a user does not revoke existing Passport personal access tokens . A deactivated account t...

cve-2021-33045

cve-2021-33045 Log in to the camera's web page by modifying the packets sent by the browser to /RPC2Login. Here, a mitmproxy script is used to implement the relevant functionality. Similar functionality can also be implemented using Fiddler or Burp Suite. Usage: root@kitploit: mitmweb --showhost...

CVE-2026-86760

Snipe-IT versions 8.2.0 through 8.6.x (fixed in 8.7.0 ) contain an incorrect authorization flaw in the single-user edit controller (UsersController::update). The activated field was assigned from the request payload before the canEditAuthFields authorization gate was evaluated. An authenticated n...

CVE-2026-29000-PoC

CVE-2026-29000 — pac4j-jwt JwtAuthenticator Authentication Bypass PoC A proof-of-concept for CVE-2026-29000 , an authentication bypass in the pac4j-jwt JwtAuthenticator component CVSS 10.0 , Critical. The script forges a token that impersonates any user with any role — without knowing a single...

CVE-2026-24061

CVE-2026-24061 GNU Inetutils telnetd Remote Authentication Bypass Seriously, telnet in 2026? Come on guys, it's time to move on. SSH exists since 1995. 🤦 Description A critical authentication bypass vulnerability in GNU Inetutils telnetd affecting versions 1.9.3 through 2.7. The vulnerability...

cve-2025-22235-demo

CVE-2025-22235: Spring Boot EndpointRequest.to Authentication Bypass Vulnerability Demo Vulnerability Description CVE-2025-22235 is a Spring Boot security vulnerability involving the EndpointRequest.to method, which may generate an incorrect matcher when configuring security rules, leading to the...

CVE-2019-1619

CVE-2019-1619 Script de Powershell para construir el token necesario para el Bypass de Autenticación. Estaba realizando una prueba de penetración y encontré un servidor vulnerable a CVE-2019-1619. No pude aprovechar el módulo de metasploit debido al acceso restringido, así que lo exploté...

CVE-2026-20896

Código de la Prueba de Concepto CVE-2026-20896 Este script automatiza la explotación del fallo de lógica en la validación de rutas de la API de Gitea, permitiendo forzar al servidor a otorgar un token administrativo válido mediante un ataque de salto de directorio Directory Traversal en la cabece...

CVE-2025-3102

CVE-2025-3102 The SureTriggers WordPress plugin contains a critical authentication bypass vulnerability CVE-2025-3102 that affects all versions up to and including 1.0.78...

lgosp-poc

LG On Screen Phone authentication bypass PoC ¿Qué es LG On Screen Phone? La aplicación LG On-Screen Phone OSP facilita el acceso y control de los smartphones Android de LG a través de un PC. La conexión puede establecerse mediante un cable USB o de forma inalámbrica a través de Wi-Fi o Bluetooth...

CVE-2026-29145-Everything

CVE-2026-29145 Everything Apache Tomcat CLIENTCERT + OCSP soft-fail bypass complete reproduction environment, exploit traffic captures, and Suricata detection rule writing materials. For authorized security research and detection rule development only. Do not use on unauthorized systems...

cve-2022-25640-exploit

Exploiting CVE-2022-25640 using scapy See CVE-2022-25640.ipynb. CVE-2022-25640 is a vulnerability in wolfSSL before 5.2. It allows a client to circumvent mututation authentication in TLS 1.3 connections...

cve-2018-10933

CVE-2018-10933 CVE-2018-10933 libssh authentication bypass, a vulnerable Docker container that listens on port 2222 for exploitation. A basic proof-of-concept libssh patch included in the container to bypass auth. To login use the default "myuser" / "mypassword" from libssh. A patch is applied to...

CVE-2025-29927

Advanced CVE-2025-29927 Vulnerability Scanner This is a professional-grade scanner designed to detect the CVE-2025-29927 middleware bypass vulnerability in Next.js applications. 🧠 What It Does Uses a real headless browser Playwright to deeply crawl a target website JS-rendered content included...

CVE-2025-53770-Scanner

CVE-2025-53770 Scanner by DanSec A simple, effective reconnaissance tool to identify potential exposure to the critical SharePoint vulnerability CVE-2025-53770. !Warning This tool is intended for authorised testing purposes only. The author DanSec takes no responsibility for misuse or damage caus...

CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass

CVE-2026-24858 | FortiCloud SSO Authentication Bypass Executive Summary FortiCloud Single-Sign-On SSO a factory default enabled feature once you register any FortiGate/FortiManager/FortiAnalyzer contains a critical authentication-bypass flaw. An attacker who owns any FortiCloud account free or pa...

next-js-auth-bypass

Hello World - Next.js 12.2 A simple proof of concept Next.js 12.2 application. 🚀 Quick Start 1. Install Dependencies root@kitploit: npm install 2. Run the Development Server root@kitploit: npm run dev The application will be available at http://localhost:3000 🛠️ Available Scripts npm run dev -...

CVE-2024-1403

CVE-2024-1403 Progress OpenEdge Authentication Bypass An exploit proof of concept for Progress OpenEdge CVE-2024-1403. Blog Post More details here: https://www.horizon3.ai/attack-research/cve-2024-1403-progress-openedge-authentication-bypass-deep-dive Usage You must provide your own versions of t...

CVE-2022-25226

ThinVNC 1.0b1 - Bypass de Autenticación a Ejecución Remota de Código CVE-2022-25226 Autor: krill-x7 Referencia: https://fluidattacks.com/advisories/sinatra Descripción general ThinVNC 1.0b1 contiene una vulnerabilidad de omisión de autenticación CVE-2022-25226 que permite a atacantes remotos...