CVE-2025-41646---Critical-Authentication-Bypass-

CVE-2025-41646---Critical-Authentication-Bypass- CVE-2025-41646 - Critical Authentication bypass 🔓 CVE-2025-41646 - RevPi WebStatus Authentication Bypass PoC A critical authentication bypass vulnerability CVE-2025-41646 in RevPi WebStatus ≤ v2.4.5 allows an attacker to log in as admin without val...

salt-rce-scanner-CVE-2020-11651-CVE-2020-11652

1 What is it? Scanning tool to test for SaltStack vulnerabilities CVE-2020-11651 & CVE-2020-11652. The vulnerabilities allow an attacker who can connect to the "request server" port to bypass all authentication and authorization controls and publish arbitrary control messages, read and write file...

offensive-security-writeups

Offensive Security Write-ups from the CTF challenges tackled...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 with Metasploit-Framework The CVE-2019-0708 vulnerability exploits a flaw in user authentication, allowing bypass of authentication without any interaction. It directly connects via the RDP protocol to send malicious code and execute commands on the server. If exploite...

CVE-2022-40684

CVE-2022-40684 CVE-2022-40684 - Auth bypass extract admin users and LDAP config - This PoC do only read-only actions. Run exploit root@kitploit: USE: python3 exploit.py https://target.com Ex: python3 exploit.py https://target.com Run nuclei template root@kitploit: echo https://target.com | nuclei...

CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when succesfully performing the bypass, and not perform any...

SecuraBV-CVE-2020-1472

Script de prueba de ZeroLogon Un script de Python que utiliza la biblioteca Impacket para probar la vulnerabilidad del exploit Zerologon CVE-2020-1472. Intenta realizar la omisión de autenticación de Netlogon. El script finalizará inmediatamente al realizar la omisión con éxito, y no realizará...

zabbix-cve-2022-23131

cve-2022-23131 cve-2022-23131 zabbix-saml-bypass-exp 1. replace zbxsignedsession to cookie 2. sign in with Single Sign-On SAML author: @random-robbie、@jweny and @Mr-xn link: https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage...

GPON

RCE on GPON home routers CVE-2018-10561 Vulnerability Many routers today use GPON internet, and a way to bypass all authentication on the devices CVE-2018-10561 was found by VPNMentor. With this authentication bypass, it's also possible to unveil another command injection vulnerability...

Blackash-CVE-2025-31161

Blackash-CVE-2025-31161 CVE-2025-31161 Proof of Concept for CVE-2025-31161 / CVE-2025-2825 This POC will exploit the authbypass vulnerability to create a new user account with Admin level permissions. The Auth Bypass requires the username targetuser of an existing user on the CrushFTP server. The...

CVE-2020-11651

CVE-2020-11651 Un script que explota SaltStack CVE-2020-11651 y CVE-2020-11652 para añadir nuevos usuarios a un master Salt vulnerable inyectando entradas en /etc/passwd y /etc/shadow. root@kitploit: Exploit Title: Saltstack 3000.1 - Remote Code Execution Date: 2020-05-04 Orignal Exploit Author:...

CVE-2022-1040

CVE-2022-1040 : Sophos XG115w Firewall 17.0.10 MR-10 - Bypass de Autenticación Esta vulnerabilidad permite a un atacante obtener acceso no autorizado al espacio de administración del firewall eludiendo la autenticación ☕️ En vivo : ....... actualizado...

Superset_auth_bypass_check

Supersetauthbypasscheck Apache-Superset authentication bypass vulnerability CVE-2023-27524 detection tool Fix date: 2023.8.3 Fixed session invalidation caused by hardcoded session expiry time, introduced flasksessioncookiemanager tool to generate real-time sessions for detection. Fixed the bug...

CVE-2022-45599

CVE-2022-45599 URL de CVE:| https://vulners.com/cve/CVE-2022-45599 ---|--- Reportado por:| TanYeeTat Producto:| Aztech WMB250AC Wireless Mesh Routers Firmware afectado:| Lanzamiento 2020 topaz-linux.lzma.img Descarga de firmware:| código cerrado Manual del producto:...

CVE-2026-80099

Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the authenticate method — registered on the restauthenticationerrors filter and therefore evaluated for every unauthenticated REST API...

CVE-2017-14322

CVE-2017-14322 Interspire Email Marketer emailmarketer Exploit Google Dork root@kitploit: intitle:"Control Panel" + emailmarketer Exploit using Burp Suit Add a Match and Replace for Request header like below: root@kitploit: Match: ^Cookie.$ Replace: Cookie:...

POC-CVE-2025-29927-

Affected Next.js 15.x 15.2.3, 14.x 14.2.25, Next.js 13.x 13.5.9 Self-hosted setups that use Middleware for critical functionality, such as authentication. Guide root@kitploit: npm run dev root@kitploit: curl --compressed -X GET http://localhost:3000/dashboard \ -H "Host: localhost:3000" \ -H...

RCity-CVE-2024-27198

RCity - CVE-2024-27198 RCE y Creación de Cuenta de Administrador y CVE-2024-27199 Omisión de Autenticación Explotando CVE-2024-27198 y CVE-2024-27199 RCity es un script de Python que interactúa con un servidor TeamCity vulnerable. El CVE facilita la creación de cuentas de administrador no...

CVE-2024-9464

CVE-2024-9464: Palo Alto Expedition Authenticated Command Injection Proof of concept to exploit CVE-2024-9464 on vulnerable devices. This script chains the admin reset of CVE-2024-5910 to achieve "unauthenticated" arbitrary command execution. Blog Post Root cause and indicators of compromise here...

crushftp-CVE-2025-2825

crushftp-CVE-2025-2825 A severe authentication bypass vulnerability has been discovered in CrushFTP! 💥 Attackers can potentially gain unauthorized access without needing valid credentials. What's the Danger? ⚠️ This flaw allows for complete authentication bypass, leading to data breaches,...