Hikvision-CVE-2017-7921-decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Description Hikvision IP Cameras Authentication Bypass...

CVE-2024-4040

CVE-2024-4040 A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform...

CVE-2025-32433

CVE-2025-32433 – Erlang/OTP SSH RCE Vulnerability 📌 Summary CVE-2025-32433 is a remote code execution RCE vulnerability affecting the Erlang/OTP SSH daemon. The root cause is improper handling of pre-authentication SSH channel requests which can be crafted by an attacker to cause arbitrary comman...

Roundcube-1.6.10-Post-Auth-RCE-CVE-2025-49113-

🚨 Vulnerability Report: CVE-2025-49113 in Roundcube Webmail ⚠️ IMPORTANT NOTICE — RESPONSIBLE USE This material is for educational and research purposes only. The use of the information and tools described here for any illegal or malicious activity is strictly prohibited. The author is not...

o5logon-fetch

o5logon-fetch A small Java program that attempts to exploit CVE-2012-3137 on vulnerable Oracle 11 servers. By exploiting this vulnerability, you can run offline brute force attacks until you discover a given user’s password, without any apparent audit trail. Vulnerability Details A good writeup o...

CVE-2025-54309

CVE-2025-54309 CrushFTP Authentication Bypass Overview CVE-2025-54309 is an authentication bypass vulnerability in CrushFTP that allows unauthorized administrative user creation through AS2 header manipulation. Technical Details Vulnerability Location File : crushftp/server/ServerSessionHTTP.java...

CVE-2024-33676

CVE-2024-33676 Weak authentication and authorization on Enel X JuiceBox Level 2 EV charger enables access to operating system functions and parameters. Description Users on the local EV charger WLAN network can extract PII, change settings, and manipulate the operating system file system. This is...

CVE-2024-50477

CVE-2024-50477 Stacks Mobile App Builder = 5.2.3 - Authentication Bypass via Account Takeover Description: The Stacks Mobile App Builder – The most powerful Mobile Applications Drag and Drop builder plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including,...

cve-2018-10933

CVE-2018-10933 libssh authentication bypass, vulnerable Docker container on port 2222 for exploitation...

Atlassian_CVE-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On May the 30th, 2022, an organisation named Volexity identified an un-authenticated RCE vulnerability scoring 9.8 on NIST within Atlassian's Confluence Server and Data Center editions...

CVE-2025-60375

CVE-2025-60375 — PerfexCRM Authentication Bypass Advisory ID: perfexcrm-auth-bypass-2025 CVE: CVE-2025-60375 Product: PerfexCRM Affected versions: versions prior to 3.3.1 3.3.1 Reported by: Ajansha Shankar, Ahamed Yaseen References: OWASP Authentication Cheat Sheet —...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-websocket(CVE-2026-76183, CVE-2026-77791,CVE-2026-79677,CVE-2026-87022)

Summary IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-websocketCVE-2026-76183, CVE-2026-77791,CVE-2026-79677,CVE-2026-87022 Vulnerability Details CVEID:CVE-2026-76183 DESCRIPTION: Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the securit...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core (CVE-2026-73581,CVE-2026-75973,CVE-2026-77756,CVE-2026-77762,CVE-2026-78383,CVE-2026-78437,CVE-2026-86350)

Summary IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core CVE-2026-73581,CVE-2026-75973,CVE-2026-77756,CVE-2026-77762,CVE-2026-78383,CVE-2026-78437,CVE-2026-86350 Vulnerability Details CVEID:CVE-2026-73581 DESCRIPTION: Improper Check for Certificate Revocation...

CVE-2025-31161

CVE-2025-31161 Authentication bypass vulnerability in versions of the CrushFTP server...

CVE-2026-109236

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via a Predictable Email-Verification Token in all versions up to, and including, 2.8.2. This is due to the authenticateuserbyemaillink function — hooked on the wp action and triggered by th...

CVE-2026-106003

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowing unauthenticated users to add or delete reservation types in the Court Reservation WordPress plugin before 1.12.4's configuration...

CVE-2021-40903

Exploit Title: Antminer Monitor 0.5.0 - Authentication Bypass CVE: CVE-2021-40903 Date: 09/06/2021 Dork:https://www.zoomeye.org/searchResult?q=%22antminer%20monitor%22 Exploit Author: CQR.company / Vulnz. Vendor Homepage: https://github.com/anselal/antminer-monitor,...

next-js-auth-bypass

Hello World - Next.js 12.2 A simple proof of concept Next.js 12.2 application. 🚀 Quick Start 1. Install Dependencies npm install 2. Run the Development Server npm run dev The application will be available at http://localhost:3000 🛠️ Available Scripts npm run dev - Start development server npm...

CVE-2025-29927

CVE-2025-29927 - Next.js Middleware 15.2.2 - Authorization Bypass ⚠️ Critical Authentication Bypass in NextJS Middleware 🛠️ PoC implementation by @zs1n 💡 Overview NextJS is a popular React-based web framework, has an authentication vulnerability that affects versions prior to 12.3.5, 13.5.9,...

CVE-2024-50478

CVE-2024-50478 1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass via Account Takeover Description: The 1-Click Login: Passwordless Authentication plugin for WordPress is vulnerable to authentication bypass in version 1.4.5. This is due to the plugin not properly verifying a...