SUSE-SU-2026:4628-1 Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls fixes the...

CVE-2019-19033

CVE-2019-19033: Jalios JCMS 10 Backdoor Account / Authentication Bypass I. VULNERABILITY Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account using any username and a specific password. II. CVE REFERENCE...

nhi-zero-trust-bypass

Project: Exploiting Protocol Vulnerabilities to Manipulate NHI Secrets and Bypass Zero-Trust Policies Screenshots Below are real screenshots from the demonstration. For more, see screenshots/README.md. 1. DNS Exploit BIND Crash A. Exploit Packet Sent Scapy sends a malformed TSIG DNS packet to BIN...

dameflare

DameFlare Unauthenticated RCE via Smart Card Authentication Bypass in SolarWinds Dameware MRC CVE-2019-3980 | CVSS 9.8 Critical | TCP/6129 Original research and POC: Tenable, Inc. TRA-2019-43 Python 3 tool: David Boyd @Fir3d0g How It Works Dameware MRC exposes a remote control service DWRCS.exe o...

Zabbix-cve-2022-23131-SSO-bypass

Zabbix-cve-2022-23131-SSO-bypass To bypass the Zabbix SSO login portal,make sure to take the cookie from your browser.Replace it with the one, that is in the script. Make sure to also change the username you wnat to login as and run the exploitmost of the time its going to be "Admin" in Zabbix. N...

CVE-2022-33891

CVE-2022-33891 - Apache Spark Command Injection Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author AkbarTrilaksana Description The Apache Spark UI offers the possibility to enable ACLs via the...

CVE-2026-20127

CVE-2026-20127 — Authentication Bypass in Cisco SD-WAN CVSS 10.0 Table of Contents | Section| What's In It ---|---|--- 01| SD-WAN Crash Course| The basics I needed to learn before any of this made sense — architecture, NETCONF, and how peering auth works 02| The Bouncer Problem| Where the auth co...

CVE-2026-66916

Password-Protected Category Bypass via JSON Format in JoomGallery JoomGallery ≤ 4.3.0-stable — Unauthenticated Attacker Bypasses Password Gate to Download Protected Images SUMMARY An unauthenticated access control bypass exists in JoomGallery's category JSON view. When a gallery category is...

CVE-2013-3900-PowerShell-PoC

CVE-2013-3900-PowerShell-PoC This PoC is provided for educational and research purposes only. The author takes no responsibility for misuse or damage caused by this code. This PowerShell script is a testing tool for simulating the attack described in CVE-2013-3900. CVE-2013-3900 concerns the...

CVE-2017-16994

/ disablemapminadd.c / / / include include include include include include include / offsets might differ, kernel was custom compiled you can read vmlinux and caculate the offset when testing / / define OFFSETKERNELBASE 0x000000 / define MMAPMINADDR 0x1101de8 define DACMMAPMINADDR 0xe8e810 / get...

CVE-2020-14883

CVE-2020-14883 Weblogic Authentication Bypass Vulnerability Batch Detection Script Usage: Python CVE-2020-14883-Multiple.py ip.txt port Vulnerable addresses will be output to Vul.txt...

CVE-2022-24112_POC

POC Collected POCs CVE-2022-24112 To set up the Chunqiu Cloud Environment: CVE-2022-24112 target environment, two POCs were modified, slightly adapted from the POCs of M4xSec and twseptian for the Chunqiu Cloud Environment: Chunqiu Cloud Environment: CVE-2022-24112: Apache APISIX is a cloud-nativ...

grafana-CVE-2018-15727

Grafana CVE-2018-15727 exploit Installation $ go get github.com/u238/grafana-CVE-2018-15727 Usage $ source go env $ $GOPATH/bin/grafana-CVE-2018-15727 ldapadmin i delete the grafanasess cookie from your browser session i set following cookies in you browser: for Grafana 5.x: grafanauser : ldapadm...

CVE-2023-38836

CVE-2023-38836 Exploit File Upload vulnerability in BoidCMS v.2.0.0 allows an authenticated attacker to upload a file with dangerous type CWE-434. To exploit, an attacker could add a GIF header to bypass MIME type checks. GIF89a; Usage usage: CVE-2023-38836.py -h -u URL -U USER -P PASSWD -l LHOST...

CVE-2020-27199

CVE-2020-27199 Magic Home Pro - Authentication Bypass Multiple vulnerabilities found in the Magic Home Pro Mobile Application which is used to interface with the JadeHomic LED Strip RGB Kit. The most significant of these vulnerabilities is an Authentication Bypass CVE-2020-27199 vulnerability,...

wordpress-really-simple-security-authn-bypass-vulnerable-application

wordpress-really-simple-security-authn-bypass-vulnerable-application This is a vulnerable application to test the exploit for the Really Simple Security 9.1.2 authentication bypass CVE-2024-10924. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is...

FreePBX-Vulns-December-25

FreePBX Vulnerabilities - December 2025 This repository contains Nuclei templates for detecting three critical vulnerabilities in FreePBX: CVE-2025-61675 : Authenticated SQL Injection CVSS 8.6 - Affects endpoint module CVE-2025-61678 : Authenticated Arbitrary File Upload CVSS 8.6 - Affects endpoi...

Groovy-scripting-engine-CVE-2015-1427

ElasticSearch Groovy Sandbox Bypass && Code Execution Vulnerability CVE-2015-1427 Test Environment jre version: openjdk:8-jre elasticsearch version: v1.4.2 Principle Reference articles: http://cb.drops.wiki/drops/papers-5107.html...

CVE-2023-49052

CVE-2023-49052 - Microweber CMS v2.0.4 - Uploading Malicious Files Description In version 2.0.4 of Microweber CMS where the file upload option is active in created forms, it is possible to send malicious HTML files, even when certain types of validations are applied in this field. This...

batchOverflow

batchOverflow A fix for the batchOverflow bug found by the PeckShield team. a fix The original contract only did a check to ensure the sender has enough whatever to pay the total amount input value x number of addresses. If an overflow ocurred this amount can be zero, which would allow the test o...