fortios-auth-bypass-check-CVE-2024-55591

CVE-2024-55591 Fortinet FortiOS 认证绕过漏洞行为检测 检测演示 root@kitploit: python CVE-2024-55591-check.py --target 192.168.1.10 --port 443 / | | |\ \ \ / / \ \ / | | \| | / \ / / \ \ \ / / | | \ \| Y | | \ / | | \ // || \\ ||| | \ / \// || \ \ \ CVE-2024-55591.py Fortinet FortiOS...

palo-alto-panos-cve-2024-0012

CVE-2024-0012 与 CVE-2024-9474 管理 Web 界面中的身份验证绕过（PAN-SA-2024-0015）以及 Palo Alto PAN-OS 中的已认证命令注入 有关技术细节，请参阅我们的博客文章 受影响版本 root@kitploit: 待定 漏洞利用作者 此漏洞利用由 watchTowr @watchtowrcyber 的 Sonny 编写 关注 watchTowr Labs 如需获取最新安全研究，请关注 watchTowr Labs 团队 https://labs.watchtowr.com/ https://x.com/watchtowrcyber...

Mitel-MiCollab-Auth-Bypass_CVE-2024-41713

CVE-2024-41713 Mitel MiCollab 认证绕过导致任意文件读取 查看我们的博客文章了解技术细节 root@kitploit: / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / / watchtowr-vs-MiCollab2024-12-05.py Mitel MiCollab Authentication Bypass and Arbitrary File Read exploit by...

CVE-2021-40903

Título del Exploit: Antminer Monitor 0.5.0 - Bypass de Autenticación CVE: CVE-2021-40903 Fecha: 09/06/2021 Dork:https://www.zoomeye.org/searchResult?q=%22antminer%20monitor%22 Autor del Exploit: CQR.company / Vulnz. Página del Vendedor: https://github.com/anselal/antminer-monitor,...

CVE-2024-55591

CVE-2024-55591 PoC 此仓库包含针对 CVE-2024-55591 的 PoC（概念验证） ，该漏洞是 Fortinet 的 FortiOS 和 FortiProxy 产品中发现的一个严重认证绕过漏洞。 漏洞概述 CVE-2024-55591 是一个 认证绕过漏洞 ，由备用路径或通道（CWE-288）引起。该漏洞影响 FortiOS 版本 7.0.0 至 7.0.16 以及 FortiProxy 版本 7.0.0 至 7.0.19 和 7.2.0 至 7.2.12。远程攻击者可通过向 Node.js WebSocket 模块发送特制请求来利用此漏洞，从而获得 超级管理员权...

CVE-2019-19550

CVE-2019-19550 描述 Senior Rubiweb 6.2.34.28 和 6.2.34.37 中的远程认证绕过漏洞允许管理员访问受影响用户的敏感信息。攻击者只需提供正确的URL即可。 重要日期 通知供应商日期：2019-12-02 公开披露日期：2020-01-30 漏洞类型 不正确的访问控制 产品供应商 Senior 受影响产品代码库 Rubiweb - 6.2.34.37 Rubiweb - 6.2.34.28 其他版本可能受影响，尤其是同一系列（尚未测试） 受影响组件 Rubiweb 攻击类型 远程 影响信息披露 True 攻击向量...

f5-bigip-rce-cve-2020-5902

F5 BIG-IP RCE（CVE-2020-5902）漏洞检测工具 Summary 20200706，网上曝出F5 BIG-IP TMUI RCE漏洞。 F5 BIG-IP的TMUI组件（流量管理用户界面）存在认证绕过漏洞，该漏洞在于Tomcat解析的URL与request.getPathInfo存在差异，导致可绕过权限验证，未授权访问TMUI模块所有功能，进而可以读取/写入任意文件，命令执行等。 详情参考F5 BIG-IP TMUI RCE漏洞（CVE-2020-5902）重现及注意点...

cve-2026-82329-jfrog-artifactory

CVE-2026-82329 — Bypass de autenticación no autenticado en JFrog Artifactory → toma de control de administrador CVSS 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · CWE-287 · divulgado el 2026-08-28 · explotado activamente. Un atacante no autenticado y adyacente a la red genera un token de acceso de...

CVE-2024-45409

Ruby-SAML / GitLab 认证绕过 CVE-2024-45409 漏洞利用 该脚本利用了 CVE-2024-45409 漏洞，允许未经身份验证的攻击者访问 IDP 签发的任何 SAML 文档，从而伪造 SAML 响应/断言，并以任意用户身份登录 GitLab。 以下 GitLab（CE/EE）版本均受影响： 您正在被 重定向。 参考 https://about.gitlab.com/releases/2024/09/17/patch-release-gitlab-17-3-3-released/ https://github.com/advisories/GHSA-j...

CVE-2024-1709-ConnectWise-ScreenConnect-Authentication-Bypass

ConnectWise ScreenConnect: 身份验证绕过漏洞 简介 本项目旨在利用 ConnectWise ScreenConnect 中的身份验证绕过漏洞。它提供了一个脚本来演示该利用方法。在使用此脚本之前，请确保您拥有必要的权限。 使用方法 root@kitploit: python exploit.py 选项 选项： --username：要添加的用户名 必填。 --password：要添加的密码 必填。 --urls：包含 URL 列表的文件路径。 --url：仅在此 URL 上运行。 注意：--urls 或 --url 必须选择其一。 示例 root@kitploit...

CVE-2022-46169_unauth_remote_code_execution

CVE-2022-46169 - Unauthenticated Remote Code Execution Cacti 通过绕过认证和命令注入，在Cacti 1.2.23 和 1.3.0 中实现未经认证的远程代码执行 免责声明：此脚本用于审计系统安全性。请仅在你自己的系统或已获得书面许可的系统上使用此脚本。...

CVE-2026-71801

CVE-2026-71801 affects s-pms SPMS-Server through v1.0 . The root cause is a hardcoded default access token secret embedded in the core configuration file that is neither overridden nor removed in the production environment profile. This allows a remote, unauthenticated attacker to locally forge v...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to bypass security restrictions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to bypass security restriction...

PT-2026-89214

Summary On the Home Assistant add-on, the dashboard serves a trusted ingress site that skips authentication because the supervisor authenticates the request upstream. That site was binding 0.0.0.0. The add-on runs in host network mode for mDNS, so binding all interfaces also bound the host's LAN...

EUVD-2026-75162

An issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded default access token secret within its core configuration file, which is not overridden or removed in the production environment profile. A remote, unauthenticated attacker can locally forge valid...

Security Advisory 0160

Security Advisory 0160 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release Description All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with Intermediate System to Intermediate System IS-IS configured. ...

PT-2026-89096

A flaw was found in SSSD's IdP authentication provider. The eval access token buf function compares the OIDC subject identifier using strncmp with the authenticated user's identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict...

Security Advisory 0149

Security Advisory 0149 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73449 CVSSv3.1 Base Score: 5.9 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L CVSSv4.0 Base Score: 5.9...

The vulnerability of the compatibility package for Microsoft Azure Entra ID allows a perpetrator to circumvent the authentication process by using an alternative path or channel, thereby allowing them to increase their privileges.

The vulnerability of the compatibility package for Microsoft Azure Entra ID involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

openSUSE 16: curl / curl-fish-completion / curl-zsh-completion / libcurl-devel / etc (openSUSE-SU-2026:21774-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21774-1 advisory. - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8926:...