CVE-2026-0073-Android-ADBD-bypass-POC

CVE-2026-0073 — Android ADBD TLS Auth Bypass EVPPKEYcmp type confusion → unauthorized ADB shell 🔥 Overview A critical authentication bypass in Android's ADB daemon adbd allows any attacker on the local network to obtain a full shell on a target device without user authorization. The vulnerability...

Research-CVE-2026-21858

CVE-2026-21858 Ni8mare: n8n Authentication Bypass & Remote Code Execution 1. OverviewVulnerability Name: Ni8mare CVE ID: CVE-2026-21858 CVSS Score: 10.0 Critical Vulnerability Type: Authentication Bypass, Local File Inclusion LFI, Remote Code Execution RCE Affected Versions: n8n versions 1.65.0 a...

CVE-2026-41940---cPanel-WHM-check

IOC Check Sessions Files Overview iocchecksessionsfiles.sh is a cPanel-provided detection script referenced in the official cPanel security advisory: Security: CVE-2026-41940 - cPanel & WHM / WP2 Security Update 04/28/2026 The script is used to scan cPanel/WHM session files for suspicious...

CVE-2026-29000

CVE-2026-29000 CVE-2026-29000: Critical Authentication Bypass in pac4j-jwt - Using Only a Public Key CVSS 10 pac4j-jwt Authentication Bypass Exploit CVE-2026-29000 Vulnerability Summary CVE-2026-29000 is a critical authentication bypass in the pac4j-jwt library versions 6.0.3 and below. When the...

CVE-2026-32662

CERT/CC VU653116 | CISA Advisory ICSA-26-055-03 | All CVEs | Case Repository CVE-2026-32662: Active Debug Code in Production Advisory Field| Value ---|--- CVE| CVE-2026-32662 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 5.3 Medium Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CWE| CWE-489 Activ...

CVE-2026-24061

GNU InetUtils telnetd Argument Injection Authentication Bypass CVE-2026-24061 In January 2026, the GNU telnetd service from GNU InetUtils was found to be vulnerable to authentication-bypass byKyu Neushwaistein aka Carlos Cortes Alvarez. Tracked as CVE-2026-24061, this flaw allows an attacker to...

cpanel-cve-2026-41940-fix

cpanel-cve-2026-41940-fix One-shot detection and remediation for cPanel/WHM servers compromised via CVE-2026-41940 and the nuclear.x86 botnet campaign. What this is On 28 April 2026 , cPanel disclosed a pre-authentication authentication-bypass vulnerability CVE-2026-41940, CVSS 9.8 affecting all...

tiandy-research

tiandy-research This repository contains the results of my August 2020 research of Tiandy's IPC/NVR firmware these devices are also sold as OMNY. This "research" was not exhaustive, but I did find multiple methods to recover the administrator password remotely, enable telnet and change the root...

CVE-2026-24061

CVE-2026-24061 Reproduction Steps Build the image root@kitploit: docker build -t telnetd-bypass . Start the container root@kitploit: docker run -it --rm \ --name telnetd-vuln \ --privileged \ -p 23:23 \ telnetd-bypass Send the payload root@kitploit: USER='-f root' telnet -a 127.0.0.1 23 Output...

CVE-2026-29000

CVE-2026-29000: pac4j-jwt Authentication Bypass POC This repository contains a proof-of-concept POC for an authentication bypass vulnerability in pac4j-jwt CVE-2026-29000. The vulnerability allows an attacker to bypass signature verification by nesting a PlainJWT using alg: none inside a JWE JSON...

CVE-2026-41940

CVE-2026-41940 — WHM/cPanel Authentication Bypass Research Tool This repository contains a Proof-of-Concept PoC script based on the authentication bypass chain for cPanel/WHM via the whostmgrsession cookie and HTTP headers. After a successful compromise, the script changes the root password and...

CVE-2026-24061

text feat3 1change feat2 1feat test CVE-2026-24061 GNU Inetutils telnetd Remote Authentication Bypass Seriously, telnet in 2026? Come on guys, it's time to move on. SSH exists since 1995. 🤦 Description A critical authentication bypass vulnerability in GNU Inetutils telnetd affecting versions 1.9....

CVE-2026-24061-GNU-Inetutils-telnetd-Remote-Authentication-Bypass-Root-Shell-

🧨 Overview This repository contains a Proof‑of‑Concept exploit for GNU Inetutils telnetd remote authentication bypass vulnerability. The issue arises because telnetd improperly sanitizes the USER environment variable received via Telnet NEW‑ENVIRON negotiation before invoking /bin/login. By...

CVE-2026-24858

CVE-2026-24858 Vulnerability Analysis Report Full Version with Sources Fortinet FortiCloud SSO Authentication Bypass Vulnerability Document Version : 2.0 Full Source Attribution Version Last Updated : January 29, 2026 Purpose : Security Audit, Technical Documentation, Incident Response 📋 Table of...

CVE-2026-29000---pac4j-jwt-Authentication-Bypass-PoC

CVE-2026-29000 - pac4j-jwt Authentication Bypass PoC Note: This is not my original work. I am keeping this here for a reference. Working methodology: root@kitploit: python3 exploit.py http://IP:PORT Fetching JWKS... + Got RSA public key kid: enc-key-1 Crafted PlainJWT with sub=admin, role=ROLEADM...

scan-cve-2026-24061

CVE-2026-24061 Scanner – GNU inetutils telnetd Auth Bypass ⚠️ VERY IMPORTANT LEGAL NOTICE ⚠️ This tool is exclusively for educational purposes, security research, vulnerability analysis, and authorized testing. Any unauthorized use against systems you do not own or do not have explicit written...

CVE-2026-41940_exploit

============================================================================= CVE-2026-41940 - cPanel & WHM Authentication Bypass Exploit Vulnerability: Session-file manipulation through CRLF injection in cpsrvd's HTTP Basic authentication handler CVE: CVE-2026-41940 CVSS: 9.8 Critical CWE: CWE-9...

CVE-2026-29000

CVE-2026-29000: pac4j-jwt JwtAuthenticator authentication bypass Full buildout: writeup, Java in-process PoC, Python token-forge CLI and library, tests. Summary CVE: CVE-2026-29000 CVSS 10, CWE-347 Affected: pac4j-jwt 4.5.9 / 5.7.9 / 6.3.3 when using JWE + signature config Issue: JWE-wrapped...

CVE-2026-29000

CVE-2026-29000 A proof of concept script for CVE-2026-29000, a critical authentication bypass vulnerability found in the pac4j-jwt library DISCLAIMER This Proof of Concept is for educational and ethical security testing purposes only. It was developed to demonstrate the technical root cause of...

CVE-2026-31816-rshell

CVE-2026-31816 Reverse Shell Exploit Overview This tool exploits CVE-2026-31816 to establish a reverse shell connection on a target Budibase server. Attack Chain : Authentication Bypass → Upload DATASOURCE Plugin → Server-side Code Execution → Reverse Shell Requirements Python 3.6+ requests libra...