CVE-2025-30156 Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message...

SecureConnect-Auth-Bypass

ConnectWise SecureConnect – Schwachstelle bei der Authentifizierungsumgehung Ein Exploit-Proof-of-Concept für die Schwachstelle bei der Authentifizierungsumgehung von ConnectWise SecureConnect. Blog-Beitrag Mehr Details hier:...

bigip-scanner

BIG-IP Scanner Определение версии программного обеспечения удалённого интерфейса управления F5 BIG-IP. Разработано с ❤️ командой Bishop Fox Cosmos. Описание CVE-2022-1388 — критическая уязвимость в интерфейсе управления F5 BIG-IP, которая позволяет злоумышленнику обойти аутентификацию и удалённо...

CVE-2025-20362-Cisco-Scanner

CVE-2025-20362 Scanner Ein sicherer, nicht-destruktiver Python-Scanner für Cisco ASA / FTD WebVPN Authentifizierungsumgehung CVE-2025-20362. CVE-2025-20362 ermöglicht nicht authentifizierten Angreifern, die Authentifizierung zu umgehen und auf eingeschränkte WebVPN-Ressourcen durch...

CVE-2022-26134

CVE-2022-26134 Iniezione Object-Graph Navigation Language OGNL pre-autenticazione in Confluence Confluence è un prodotto di collaborazione workspace basato sul web sviluppato da Atlassian. Può essere distribuito on-prem o come parte di Atlassian Cloud. È composto da 3 funzionalità chiave: pagina,...

cve-2024-56348

JetBrains TeamCity Authentifizierungs-Bypass + RCE CVE-2024-56348 PoC 📜 Beschreibung CVE-2024-56348 ist eine kritische Authentifizierungs-Bypass-Schwachstelle in JetBrains TeamCity on-premises , die alle Versionen vor 2024.12 betrifft. Die REST-API verarbeitet Anfragen an Pfade, die ;.jsp...

Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization

Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-68121 DESCRIPTION: During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial...

WSGoat

WebSocket GOAT एक जानबूझकर कमजोर, Dockerized WebSocket एप्लिकेशन जो नियंत्रित वातावरण में WebSocket सुरक्षा परीक्षण सीखने और अभ्यास करने के लिए डिज़ाइन किया गया है। यह लैब प्रमाणीकरण, निजी संदेश, उपयोगकर्ता प्रोफ़ाइल और कई WebSocket एंडपॉइंट्स के साथ एक यथार्थवादी वेब एप्लिकेशन लागू करता है।...

Security Bulletin: Security Vulnerability in Apache Shiro affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-23901, CVE-2026-23903)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Apache Shiro Vulnerability Details CVEID:CVE-2026-23903 DESCRIPTION: Authentication Bypass by Alternate Name vulnerability in Apache Shiro. This issue affects Apache Shiro: before 2.0.7. Users ar...

google_socks

Questo script viene utilizzato per consentire a due socket di comunicare trasmettendo dati tramite Google Drive. Consulta questo post del blog per maggiori dettagli. Processo di configurazione Installa i moduli Python necessari vedi sotto Esegui "python2 ./googlesocks.py --setup" e segui le...

Burp-SessionAuthTool

ARCHIVIERT Dieses Projekt wird von mir nicht mehr gewartet. Du kannst gerne forken! Siehe diesen Blog-Artikel für eine vollständige Beschreibung, worum es sich hier handelt...

WPTimeCapsulePOC

Backup e Staging di WP Time Capsule 1.21.16 - Proof of Concept del Bypass dell'Autenticazione Un bypass dell'autenticazione è stato recentemente scoperto https://www.webarxsecurity.com/vulnerability-infinitewp-client-wp-time-capsule/ su WP Time Capsule 1.21.16. Questa PoC dimostra come funziona i...

Wordfence Argus Finds Critical Authentication Bypass in WPMU DEV Dashboard Plugin

On August 19th, 2026, during internal research, I discovered an Authentication Bypass vulnerability in WPMU DEV Dashboard, a WordPress plugin with an estimated 350,000 active installations. This vulnerability makes it possible for unauthenticated attackers to gain administrator access when Hub...

CVE-2026-81826

Affected versions of Flowintel do not revoke existing authenticated sessions when a user’s password is changed. This means that if an attacker already possesses a valid session—for example, from prior access or a stolen session token—the victim changing their password does not terminate that...

CVE-2026-81735

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

CVE-2026-81699

opensslencrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing. Attackers can supply malicious files with excessive KDF parameters to exhaust syst...

CVE-2026-81703

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

CVE-2026-81680

opensslencrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silent...

CVE-2026-81664

The OpenFaaS gateway registers GET /system/telemetry in gateway/main.go and, when basicauth is enabled, wraps each administrative /system/ handler in auth.DecorateWithBasicAuth. TelemetryHandler was left out of that wrap block from 0.27.11, which introduced the route, until 0.27.14, which added i...

CVE-2026-81098

The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path with a listener bound to all interfaces and parsed the caller's authentication headers in a mode that did not fail when they wer...