48589 matches found
2026-41940-poc
CVE-2026-41940 - cPanel/WHM Authentication Bypass CVSS 9.8 | Unauthenticated root access via CRLF injection Usage python3 cp.py -t cpanel.target.com detect python3 cp.py -t cpanel.target.com --exploit exploit @nickpaulsec...
CVE-2019-10915
The vulnerability is an authentication bypass in the TIA Administrator server. An attacker could execute arbitrary application commands through websockets on the node.js server which is externally exposed by default. By exploiting this vulnerability, an unauthenticated remote attacker could perfo...
CVE-2025-29927-Proof-of-Concept
Walkthrough Step 1 5 min Hint Which network services are exposed by the target? β β β Solution root@kitploit: kali@kali:$ nmap kali@kali:$ nmap -sC -sV -p Step 2 5 min Hint 1 The landing page only reveals a login page, but web servers often expose additional paths. Hint 2 Try using a directory...
Web-Penetration-Test
Web-Penetration-Test Exploiting WordPress vulnerabilities CVE-2025-34077, authentication bypass via cookie injection, and privilege escalation to root. Part of my Cybersecurity Specialization. Day 1: Hacking my First Website Lab Report: Exploiting the "BigWear" Server In this first session of my...
FORTIWEB_CVE-2025-64446-58034
SimulaciΓ³n de explotaciΓ³n de FortiWeb CVE-2025-64446 & CVE-2025-58034 Nota: Este documento es solo para fines educativos y de investigaciΓ³n de seguridad. No lo utilice para atacar sistemas sin autorizaciΓ³n. 1. Resumen FortiWeb es un dispositivo Web Application Firewall WAF utilizado para proteger...
cups-script-final-project
What it does Two-stage detection tool for CVE-2025-58060, authentication bypass vulnerability in the Common UNIX Printing System CUPS. Rather than relying on version numbers alone, the tool combines a banner-based version check with an active auth bypass probe. This helps confirming real...
CVE-2025-0108-SCAN
CVE-2025-0108 PAN-OS: Authentication Bypass in the Management Web Interface An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS...
cve-2018-10933
CVE-2018-10933 CVE-2018-10933 omisiΓ³n de autenticaciΓ³n de libssh, un contenedor Docker vulnerable que escucha en el puerto 2222 para explotaciΓ³n. Un parche bΓ‘sico de prueba de concepto de libssh incluido en el contenedor para omitir la autenticaciΓ³n. Para iniciar sesiΓ³n use el "myuser" /...
CVE-2026-71809
Authentication Bypass via Hardcoded Master Verification Code vulnerability in Siam Ordering siam-server 1.0.0 allows remote unauthenticated attackers to log in as any user, merchant, or administrator...
CVE-2025-69295
CVE-2025-69295 β TeconceTheme Coven Core Blind SQL Injection Vulnerability CVE-2025-69295 is a SQL Injection vulnerability affecting the Coven Core component of the TeconceTheme Coven Core WordPress theme. The vulnerability exists due to improper neutralization of user-supplied input before it is...
CVE-2026-19490
CVE-2026-19490 β NetScaler ADC/Gateway SAML authentication bypass Unauthenticated session forgery on Citrix NetScaler ADC / NetScaler Gateway via the SAML HTTP-Redirect binding handler at GET /cgi/samlauth. CVSS 4.0 9.3, CWE-288. Bulletin CTX696939 2026-08-19, no workarounds. Credit for the...
CVE-2024-27198-RCE
Cyberspace Mapping Dork Fofa root@kitploit: app="JETBRAINS-TeamCity" ZoomEye root@kitploit: app:"JetBrains TeamCity" Hunter.how root@kitploit: product.name="TeamCity" Shodan root@kitploit: http.component:"teamcity" How to use I'm using Python3.9. root@kitploit: pip install requests urllib3 faker...
cve-2025-57819
π‘οΈ FreePBX Hunter - CVE-2025-57819 π‘οΈ A powerful Nuclei toolkit for detecting and validating the critical FreePBX authentication bypass vulnerability. π Table of Contents Click to expand About This Project Key Features Vulnerability Breakdown Templates in Action Finding Targets with Shodan Legal...
CVE-2022-46169
Cacti | Auth Bypass | RCE | CVE-2022-46169 Cacti: Unauthenticated Remote Code Execution Exploit in Ruby Cacti Docker This is a dockerized application that is vulnerable to the Cacti RCE vulnerability CVE-2022-46169. Follow the link to get Cacti running root@kitploit:...
Libssh-server-CVE-2018-10933
libssh Authentication Bypass VulnerabilityCVE-2018-10933 δΈζηζ¬Chinese version libssh is a multiplatform C library implementing the SSHv2 protocol on client and server side. A logic vulnerability was found in libssh's server-side state machine. The attacker can send the MSGUSERAUTHSUCCESS message...
CVE-2026-24061
GNU InetUtils telnetd Authentication Bypass via Argument Injection - CVE-2026-24061 π Introduction A recently identified argument injection vulnerability in GNU InetUtils telnetd allows attackers to circumvent authentication by setting the USER environment variable to the value β-f rootβ. As a...
watchTowr-vs-Progress-ShareFile-CVE-2026-2699
CVE-2026-2699 Progress ShareFile Authentication Bypass Progress ShareFile Authentication Bypass Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if Progress ShareFile instance is vulnerable to CVE-2026-2699 authentication bypass. Detection Artifact Generato...
CVE-2025-40554
CVE-2025-40554 Exploitation Suite A comprehensive security testing tool for detecting and exploiting the authentication bypass vulnerability CVE-2025-40554 / CVE-2025-40536 in SolarWinds Web Help Desk. β οΈ Disclaimer FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING PURPOSES ONLY This tool is provide...
CVE-2017-12542-Exploit
HP iLO Authentication Bypass CVE-2017-12542 This repository contains a proof-of-concept exploit for CVE-2017-12542 , an authentication bypass vulnerability affecting certain versions of HP Integrated Lights-Out iLO firmware. The vulnerability allows unauthenticated access to the iLO REST API, whi...
CVE-2024-0012_CVE-2024-9474_PoC
π CVE-2024-0012 & CVE-2024-9474 Palo Alto PAN-OS Exploit π π‘οΈ Description This Proof-of-Concept PoC script targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474 by automating the exploitation process, including autentication bypass, payload creation, chunked...