CVE-2026-41940

CVE-2026-41940 — cPanel/WHM Auth Bypass Author: Dr.Anach | Contact: @dranach | License: MIT Overview CRLF injection in cpsrvd Basic auth handler → unauthenticated WHM API access → RCE as root. All cPanel since v11.40 affected. Attack Chain | Step| Request ---|---|--- 1| Mint session| GET...

Silverpeas-AuthBypass-CVE-2024-36042

Silverpeas-AuthBypass-CVE-2024-36042 A clean, professional-grade Python3 proof-of-concept for CVE-2024-36042 — an authentication bypass in Silverpeas 6.3.5 caused by missing password validation in AuthenticationServlet. Overview Silverpeas AuthenticationServlet accepts a login request even when t...

CVE-2026-82563 Softish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofing

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...

CVE-2026-82563

CVE-2026-82563 affects the Softish C6 Ear Camera and the EarVision Android Application . The vulnerability is an authentication bypass by spoofing : an attacker can impersonate the camera device, placing themselves in a man-in-the-middle or device-emulation position. This enables manipulation of ...

TelnetdBypass-

TelnetdBypass — CVE-2026-24061 Scanner A Python-based security scanner that detects and exploits CVE-2026-24061 , a critical CVSS 9.8 authentication bypass vulnerability in GNU InetUtils telnetd versions 1.9.3 through 2.7. How it Works The scanner injects a malicious USER=-f root value via the...

cve-2025-25257

CVE-2025-25257 - Experimentation Environment Experiment Architecture the environment simulates vulnerable FortiWeb components root@kitploit: Vulnerable endpoint: /api/system/fabric/config Injection vector: HTTP Header Authorization: Bearer Mechanism: Direct SQL concatenation Python f-string...

cve-2023-22515-lab

cve-2023-22515-lab Hands-on security lab demonstrating CVE-2023-22515 — Atlassian Confluence Authentication Bypass using a simulated vulnerable environment...

CVE-2026-24061-PoC-Exploit

🚀 CVE-2026-24061 - GNU inetutils-telnetd Authentication Bypass Exploit GNU inetutils-telnetd Edition - CRLF Injection to Authentication Bypass & Instant Root Shell 📌 Overview This exploit leverages CVE-2026-24061 , a critical remote authentication bypass vulnerability in GNU inetutils-telnetd. By...

CVE-2026-24061

Docker Telnet Auto-Login Lab A lightweight Docker lab for experimenting with Telnet protocol negotiation , explained in the CVE-2026-24061 exploit, which contains automatic username injection using the NEW-ENVIRON option. This project creates an isolated client–server environment to study how...

CVE-2025-66698

CVE-2025-66698 Target Software: Veda Semantic Machines v5.4.8 likely all prior versions. Vulnerability Type: Authentication Bypass. CVE ID: CVE-2025-66698. Summary: System improperly validates the ticket parameter, treating an empty string as a valid session. Project Link: Veda Semantic Machines...

CVE-2026-50751

CVE-2026-50751 Check Point IKEv1 Scanner A multi-threaded vulnerability scanner for CVE-2026-50751 , a critical IKEv1 authentication bypass vulnerability affecting Check Point Quantum Security Gateways. Overview Check Point Remote Access VPN systems with IKEv1 enabled are vulnerable to...

Tell-Me-Root

Tell Me Root Batch Detection Tool Based on cve-2026-24061 Telnet Remote Authentication Bypass Vulnerability This is a super super super lightweight tool written in Python! Hands-free, batch scanning, just sit back and wait for the shell to be fed to you! Even a paramecium can easily dig out...

cpanelscanner

CpanelScanner CpanelScanner is a Go CLI tool that reads hosts from stdin, probes HTTPS on a configured port default 2087, and checks whether the response contains a configured marker string for example WHM Login. Its intended use is to identify internet-exposed cPanel/WHM instances so they can be...

CVE-2024-27198

CVE-2024-27198: Authentication bypass in Jetbrain Teamcity leads to Remote code execution Overview TeamCity is a Continuous Integration and Deployment server that provides out-of-the-box continuous unit testing, code quality analysis, and early reporting on build problems The vulnerability appear...

PaperCut-Authentication_Bypass_and_RCE

CVE-2023-27350 — PaperCut NG/MF Authentication Bypass & RCE Standalone Python exploit for the critical authentication bypass and remote code execution vulnerability in PaperCut NG/MF. CVSS 9.8. Description CVE-2023-27350 affects PaperCut NG and MF in versions prior to 20.1.7, 21.2.11, and 22.0.9...

CVE-2025-53770

SharePoint ToolPane RCE Exploit Security research toolkit for testing SharePoint ToolPane vulnerabilities Overview • Features • Getting started • Usage • Project structure This repository contains proof-of-concept exploits and analysis tools for the SharePoint ToolPane vulnerability CVE-2025-5377...

CVE-2026-86770

Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication. Due to the default utf8mb4_unicode_ci database collation, an attacker who registers IdP accounts with accent or case variants of a victim's username can bypass username matching and achieve account takeo...

CVE-2026-86770 Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation

Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication, allowing attackers to authenticate as different users by registering IdP accounts with accent or case variants of victim usernames. Attackers can exploit the default utf8mb4unicodeci database collation t...

CVE-2026-86762 Snipe-IT before 8.7.0 Authentication Bypass via API Middleware

Snipe-IT before 8.7.0 does not apply the CheckUserIsActivated middleware to the api middleware group in app/Http/Kernel.php, and deactivating a user does not revoke that user's Passport personal access tokens. As a result, although a deactivated account is correctly refused at web login, its...

CVE-2026-86762

Snipe-IT before 8.7.0 is vulnerable to an authentication bypass via its API middleware. The CheckUserIsActivated middleware is not applied to the api middleware group in app/Http/Kernel.php, and deactivating a user does not revoke existing Passport personal access tokens . A deactivated account t...