210247 matches found
CVE-2026-65625
The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...
EUVD-2026-111353
Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths. Displaying a specially crafted email could cause Thunderbird to connect to an SMB server chosen by the attacker, disclosing the user's Windows...
CVE-2026-118176
Thunderbird on Windows is vulnerable to a bypass of remote UNC path restrictions in mailbox: URLs . An attacker can use extended-length UNC paths to bypass security checks by displaying a specially crafted email. This causes Thunderbird to connect to an SMB server chosen by the attacker, potentia...
CVE-2025-41646---Critical-Authentication-Bypass-
CVE-2025-41646---Critical-Authentication-Bypass- CVE-2025-41646 - Critical Authentication bypass 🔓 CVE-2025-41646 - RevPi WebStatus Authentication Bypass PoC A critical authentication bypass vulnerability CVE-2025-41646 in RevPi WebStatus ≤ v2.4.5 allows an attacker to log in as admin without val...
auth
PlaceOS Authentication ENV VARS If a sentry Data Source Name is configured SENTRYDSN=https://@.ingest.sentry.io/ A shared secret for encrypting cookies SECRETKEYBASE=84b04ea4259542f365 JWT Private key JWTSECRET=Base64 Encoded RSA PRIVATE KEY Database name and host RETHINKDBDB=placedevelopment...
CVE-2024-6387-Mitigation
Document Title - Mitigation Guide for CVE-2024-6387 in OpenSSH Introduction This document outlines the steps for mitigating CVE-2024-6387, a security vulnerability affecting OpenSSH versions from 8.5p1 to 9.8p1. The vulnerability can be mitigated in two ways: 1. Adjusting the LoginGraceTime setti...
CVE-2026-63030
WP2Shell — CVE-2026-63030 + CVE-2026-60137 WordPress Core Pre-Authentication RCE mass exploit / detector 📋 Vulnerability Overview Attribute| Details ---|--- CVE ID| CVE-2026-63030 + CVE-2026-60137 Chain| wp2shell — pre-auth RCE Severity| 🔴 CRITICAL CVSS 9.8 Target| WordPress Core without plugins...
cip-security-poc
cip-security-poc — proving the fix principle behind CVE-2021-22681 not just its flaw Six runnable scripts — real EtherNet/IP protocol traffic Test 1, real TLS/PKI mechanics Tests 3–6 — zero Rockwell software or licensing anywhere in the chain. Built to test a claim before writing it up, not to...
CVE-2026-20896
CVE-2026-20896: Gitea Docker Image Authentication Bypass PoC !WARNING Use this PoC only in a local lab or against a system you are explicitly authorized to test. https://github.com/user-attachments/assets/b73af2fe-0e59-438b-80d6-be93fd75697b Overview CVE-2026-20896 is an authentication bypass in...
CVE-2026-85706
CVE-2026-85706: GitLab CE/EE unauthenticated arbitrary local file read CVE-2026-85706 is a critical path-traversal / missing-authentication issue in the GitLab CE/EE Repository Commits and Repository Files APIs: an unauthenticated attacker can make the server read arbitrary files and obtain their...
CVE-2026-0073
🤖 CVE-2026-0073 - Wireless ADB Authentication Bypass 📌 Overview CVE-2026-0073 is a critical authentication bypass vulnerability in Android’s Wireless ADB adbd daemon. An attacker on the same network can bypass the mutual TLS authentication and connect to the device without user approval or previo...
CVE-2025-32433-LAB
CVE-2025-32433 Vulnerability Research & Security Lab ✅ PRE-AUTH RCE CONFIRMED — Exploit successfully demonstrated. 📄 Technical Blog PDF : CVE-2025-32433-Technical-Blog.pdf 📸 Visual Evidence : screenshots/ 🔍 Proof of Concept Details : docs/PROOFOFCONCEPT.md CVE-2025-32433 is a CVSS 10.0 Critical...
EUVD-2026-111273
An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated attacker on the same local network to forge protocol packets and access privileged TDDP operations, including functionalit...
CVE-2026-102814
The TP-Link RE305 V3 is vulnerable to an authentication weakness in the TDDP v2 service . The service utilizes a fixed and derivable cryptographic key, which allows an unauthenticated attacker on the same local network to forge protocol packets. By accessing privileged TDDP operations, an attacke...
CVE-2026-102814 Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305
An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated attacker on the same local network to forge protocol packets and access privileged TDDP operations, including functionalit...
EUVD-2026-111272
An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interface allows an unauthenticated attacker on the same local network to trigger generation of an administrator password-reset verification code. Because the interface lacks an effecti...
CVE-2026-102813
An authentication flaw exists in the password-recovery functionality of the TP-Link RE305 V3 . The vulnerability resides in the verification-code interface , which allows an unauthenticated attacker on the same local network to trigger the generation of an administrator password-reset code. The f...
CVE-2026-102813 Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305
An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interface allows an unauthenticated attacker on the same local network to trigger generation of an administrator password-reset verification code. Because the interface lacks an effecti...
CVE-2026-29000-PoC
CVE-2026-29000 — pac4j-jwt JwtAuthenticator Authentication Bypass PoC A proof-of-concept for CVE-2026-29000 , an authentication bypass in the pac4j-jwt JwtAuthenticator component CVSS 10.0 , Critical. The script forges a token that impersonates any user with any role — without knowing a single...