CVE-2012-2122-Home-Lab

ENGLISH BELOW CVE-2012-2122 MySQL Authentication Bypass Home Lab Lab นี้เป็นตัวอย่างสาธิตช่องโหว่ CVE-2012-2122 - MySQL Authentication Bypass เกิดจากข้อผิดพลาดในการเปรียบเทียบค่ารหัสผ่านใน MySQL เวอร์ชัน 5.5.23 หรือต่ำกว่า เมื่อผู้โจมตีส่งรหัสผ่านผิดซ้ำ ๆ หลายครั้ง MySQL...

Next.JS-CVE-2025-29927

Next.js Vulnerability Scanner CVE-2025-29927 A security tool to detect and verify Next.js applications vulnerable to CVE-2025-29927 Authentication Bypass. Features 🎯 Accurate Next.js detection with multiple verification methods 🔍 Precise version comparison to identify vulnerable instances 🛡️...

CVE-2026-41940

⚠️ CVE-2026-41940 - cPanel & WHM Authentication Bypass Critical Pre-Authentication Bypass in cPanel & WHM 📌 Overview CVE-2026-41940 is a critical authentication bypass vulnerability affecting cPanel & WHM and WP Squared. An unauthenticated remote attacker can completely bypass login and gain full...

CVE-2025-63667

CVE-2025-63667 — Vatilon-based IP Cameras Vulnerability Evidence Sanitized Summary Several Vatilon-based IP cameras observed brands: SIMICAM, KEVIEW, ASECAM issue Session-Id tokens without verifying credential correctness. This flaw allows unauthenticated attackers to obtain valid sessions and...

CVE-2016-16113-POC

Get RCE - Bludit CMS Exploit | | / / \ / | | \ \ / / ' | | | | ' | | | | | \ V /| | | | || | | | | | | | ,|/ / || ||/|| || ||| An automated exploitation tool that combines CVE-2019-17240 Authentication Bypass and CVE-2019-16113 Arbitrary File Upload to achieve remote code execution on...

CVE-2021-33044

CVE-2021-33044 Dahua IPC/VTH/VTO devices auth bypass exploit About: The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. python3 dahuaexploit.py --ip IP...

CVE-2024-52475

CVE-2024-52475 WordPress Wawp Plugin = 3.0.17 is vulnerable to Broken Authentication Account takeover Disclaimer! The information provided in this document regarding for CVE-2024-52475 is for learning and educational purposes only. We do not encourage or authorize the use of this information for...

CVE-2020-2733

CVE-2020-2733 - JD Edwards EnterpriseOne Tools admin password not adequately protected Pic 1: Decrypt the string Pic 2: Decrypt by giving the URL CVE-2020-2733 Application: JD Edwards EnterpriseOne Tools Versions Affected: JD Edwards EnterpriseOne Tools 9.2 Vendor URL: https://oracle.com/ Bug:...

CVE-2026-8181

CVE-2026-8181 — Burst Statistics 3.4.0 – 3.4.1.1 — Authentication Bypass to Admin Account Takeover Vulnerability Summary The WordPress plugin Burst Statistics versions 3.4.0 to 3.4.1.1 is vulnerable to an unauthenticated authentication bypass vulnerability that leads to full administrator account...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

CVE-2023-27350

PaperCut NG/MG RCE CVE-2023-27350 A streamlined Bash exploit for CVE-2023-27350. This script automates authentication bypass, environment preparation, and command injection via the PaperCut printer scripting engine. Visual Proof Basic rce: Triggering a reverse shell: Quick Start Clone the...

CVE-2025-66698

CVE-2025-66698 Target Software: Veda Semantic Machines v5.4.8 likely all prior versions. Vulnerability Type: Authentication Bypass. CVE ID: CVE-2025-66698. Summary: System improperly validates the ticket parameter, treating an empty string as a valid session. Project Link: Veda Semantic Machines...

CVE-2024-21413-Microsoft-Outlook-Moniker-Link-Vulnerability

CVE-2024-21413 – Microsoft Outlook Moniker Link Vulnerability Overview This repository documents my hands-on analysis of CVE-2024-21413 Moniker Link , a critical Microsoft Outlook vulnerability that bypasses Protected View to leak Windows NetNTLMv2 credentials via SMB authentication. Severity:...

CVE-2021-3156-Mitigation-ShellScript-Build

CVE-2021-3156-Mitigation-ShellScript-Build Considering the Vulnerability focused in SUDO 2021 in CVE-2021-3156 this is an attempt to craete a script for process checker and if teh designated process exists then it invokes authenticationa and locks out system...

lazyweb

LazyWeb - Vulnerable Web Application LazyWeb is a demonstration web application designed to showcase common server-side application vulnerabilities. Each vulnerability is categorized with its respective difficulty rating to provide a comprehensive learning experience for developers and security...

CVE-2022-26138

CVE-2022-26138 1.Introduction Confluence Hardcoded Password POC 2.Usage poc -f host.txt // 批量扫描 poc -h 192.168.1.1 // 单个扫描 3.Disclaimer This tool is only for learning, research, and self-checking. It should not be used for illegal purposes. Please comply with relevant laws and regulations. Any...

evil-ssdp

Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...

CVE-2024-52316

🚨🚨CVE-2024-52316🚨🚨 🚨🚨CVE-2024-52316 - Apache Tomcat Authentication Bypass Vulnerability Overview CVE202452316 is an authentication bypass vulnerability identified in Apache Tomcat. This issue arises when Tomcat is configured with a custom Jakarta Authentication formerly JASPIC ServerAuthContext...

CVE-2026-24061

CVE-2026-24061 Telnet NEW-ENVIRON authentication bypass vulnerability PoC. Build Windows MinGW: gcc -o exploit.exe exploit.c -lws232 Linux: gcc -o exploit exploit.c -lpthread Usage ./exploit port Example ./exploit 192.168.1.1 23 Disclaimer For authorized security testing only...

CVE-2025-52970

CVE-2025-52970 FortiWeb Authentication Bypass to Remote Code Execution Exploit Features Weaponized by adding interactive shell to enable remote code execution Usage python CVE-2025-52970.py -t target.com Demo References https://github.com/Hex00-0x4/FortiWeb-CVE-2025-52970-Authentication-Bypass...