CVE-2026-26418

CVE-2026-26418 Missing Authentication and Authorization in Web API Vulnerability Summary A missing authentication and authorization vulnerability was identified in the Web API layer of Tata Consultancy Services TCS – Cognix Recon Client v3.0. Certain exposed API endpoints did not enforce proper...

cyrus-sasl

Cyrus SASL This is the Cyrus SASL API implementation. It can be used on the client or server side to provide authentication and authorization services. See RFC 4422 for more information. The latest version is available at: https://github.com/cyrusimap/cyrus-sasl/releases There are mailing lists f...

CVE-2026-0073-Android-adbd-authentication-bypass

Research on CVE-2026-0073. An auth bypass allowing any attacker with local network access to connect to an Android device with dev tools and wireless debugging or ADB-over-TCP enabled. Device needs to have been paired before. This has been tested working on Android 14 in Android Studio. Should wo...

CVE-2026-34910-unifi-poc

UniFi OS CVE Proof of Concept Proof of concept for authorized testing of two vectors identified as: CVE-2026-34910: auth bypass that can lead to command injection and remote code execution via the package update handler. CVE-2026-34909: path traversal that can lead to arbitrary file read via the...

CVE-2024-10924

CVE-2024-10924 Really Simple Security Free, Pro, and Pro Multisite 9.0.0 – 9.1.1.1 – Authentication Bypass Description The Really Simple Security Free, Pro, and Pro Multisite plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user...

CVE-2026-53913

CVE-2026-53913 — camel-keycloak Fail-Open Authentication Bypass Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Camel Quarkus|...

CVE-2024-45337-POC

CVE-2024-45337-POC Proof of concept POC for CVE-2024-45337 Build go version go version go1.23.2 linux/amd64 go build Usage Usage of ./CVE-2024-45337-POC: -addr string Address of ssh server default "127.0.0.1:2222" -authorised-pubkey string The allowed pubkey that will pass verification Must be pu...

CVE-2022-37017

CVE-2022-37017 Authentication bypass for Symantec Endpoint Protection 14.3.5351 Client User Interface Password Symantec Endpoint Protection allows setting a password protection on its UI to prevent configuration changes. This password check in implemented by logic that is neither in a Protected...

PetitPotam

PetitPotam PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions : The tools use the LSARPC named pipe with inteface c681d488-d850-11d0-8c52-00c04fd90f7e because it's more prevalent. But it's possible to trigger with the EFSRPC named...

CVE-2024-44541

CVE-2024-44541: SQL Injection Vulnerability in Inventio Lite v4 Description Inventio Lite v4 is vulnerable to SQL Injection SQLi in the /action=processlogin endpoint. This vulnerability allows attackers to inject arbitrary SQL queries via the username parameter in POST requests, potentially leadi...

middleware-auth-bypass

middleware-auth-bypass CVE-2025-29927 a poc of the next.js middleware authentication bypass...

SCCMSecrets

SCCMSecrets SCCMSecrets.py is an SCCM policies exploitation tool. It goes beyond NAA credentials extraction, and aims to provide a comprehensive approach regarding SCCM policies exploitation. The tool can be executed from various levels of privileges, and will attempt to uncover potential...

WebLab_CVE-2025-29927

CVE-2025-29927 Authentication bypass lab exploiting CVE-2025-29927 in Next.js 15.2.2 Startup chmod +x ./run.sh ./run.sh Once startup is complete, access http://localhost:3000/...

CVE-2026-22557-PoC

CVE-2026-22557 -- UniFi Network Application Pre-Auth Path Traversal Pre-authenticated path traversal in the UniFi Network Application guest portal /guest/s/site/login. The pageerror query parameter is passed to a resource loader without validation, allowing an unauthenticated attacker to read fil...

o5logon-fetch

o5logon-fetch A small Java program that attempts to exploit CVE-2012-3137 on vulnerable Oracle 11 servers. By exploiting this vulnerability, you can run offline brute force attacks until you discover a given user’s password, without any apparent audit trail. Vulnerability Details A good writeup o...

CVE-2024-23897

Modifications by Anant File read for files like /etc/os-release was stripping content. this is fixed now Added support for Authenticated session : provide username and password as commandline arguments usage: jenkinsfileread.py -h -u URL -a USERAGENT -f FILE -t TIMEOUT -s -o -p PROXY -v --usernam...

wp2shell-lab

wp2shell lab & detector + pre-auth RCE PoC A self-contained lab, non-destructive detector , and full pre-auth RCE proof-of-concept for wp2shell — the pre-authentication vulnerability chain in WordPress core: CVE| Component| Class| CVSS ---|---|---|--- CVE-2026-60137| WPQuery::authornotin| SQL...

lgosp-poc

LG On Screen Phone authentication bypass PoC What is LG On Screen Phone? The LG On-Screen Phone application OSP makes it easy to access and control LG’s Android smartphones through a PC. The connection can be established either by using an USB cable or wirelessly through Wi-Fi or Bluetooth. When...

CVE-2022-36537

CVE-2022-36537 Summary R1Soft Server Backup Manager uses the ZK framework as the main framework. Its security requires all Web3 project parties to pay more attention to the security vulnerabilities of various Web3 infrastructures and patch them in time to avoid potential security risks and digita...

CVE-2026-12352

CVE-2026-12352 Summary An unauthenticated, load-induced authentication bypass was identified in the Digi PortServer TS 4 H MEI, allowing retrieval of a local device configuration file without valid credentials. Under increased concurrent request load, the web server begins serving file contents...