EUVD-2026-102474

BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrar...

EUVD-2026-102469

NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protection because the expected code is printed as plain text in the HTML. Attackers can fetch protected forms, extract the captchaimage value with a pattern match, and submit it to...

react2shell-CVE-2025-55182-poc

CVE-2025-55182 React2Shell PoC with WAF Bypass A clean, reliable Python proof-of-concept exploit for CVE-2025-55182 aka React2Shell, a critical remote code execution vulnerability in React Server Components used by Next.js App Router and similar frameworks. This PoC includes dynamic WAF bypass...

DAHUA_AUTH-BYPASS-CVE-2021-33044

Dahua Authentication Bypass Exploit Simulation PoC CVE-2021-33044 Overview Dahua IP cameras are IoT devices commonly used in security surveillance systems. Due to frequent deployment in internal networks or Internet access, security vulnerabilities in IP cameras can severely impact privacy and...

CVE-2026-92777

A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code...

CVE-2026-89057

A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access...

APOLOGEE

🌀 APOLOGEE - Siemens Field Panel Scanner: APOLOGEE is a Python script and Metasploit module that enumerates a hidden directory on Siemens APOGEE PXC BACnet Automation Controllers all versions prior to V3.5 and TALON TC BACnet Automation Controllers all versions prior to V3.5. With a 7.5 CVSS, thi...

PT-2026-116089

Name of the Vulnerable Software and Affected Versions Simple Admin Core versions prior to 1.8.8 Description An authentication bypass exists due to a hard-coded Auth.AccessSecret located in the api/etc/core.yaml file. This allows unauthenticated remote attackers to forge JSON Web Tokens JWT by...

Amazon Linux 2023 : gnutls, gnutls-c++, gnutls-dane (ALAS2023-2026-3238)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3238 advisory. A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate. CVE-2026-88647 Tenable has...

AlmaLinux 9 : ghostscript (ALSA-2026:83553)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:83553 advisory. ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use- after-free CVE-2026-101258 ghostscript:...

Apache CXF < 3.6.13 / 4.x < 4.1.9 / 4.2.x < 4.2.4 Multiple Vulnerabilities

The version of Apache CXF installed on the remote host is prior to 3.6.13, or 4.x prior to 4.1.9, or 4.2.x prior to 4.2.4. It is, therefore, affected by multiple vulnerabilities, including: - The maxage authentication-freshness check in OidcClientCodeRequestFilter was inoperative due to a...

RockyLinux 10 : ghostscript (RLSA-2026:83551)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83551 advisory. ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use- after-free CVE-2026-101258 ghostscript:...

RockyLinux 8 : ghostscript (RLSA-2026:83552)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83552 advisory. ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use- after-free CVE-2026-101258 ghostscript:...

MiracleLinux 8 : ghostscript-9.27-19.el8_10 (AXSA:2026-2079:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2079:03 advisory. ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use- after-free CVE-2026-101258 ghostscript:...

PT-2026-116065

Steedos Platform through 3.0.15-beta.51 contains an authorization bypass vulnerability that allows authenticated users to read other tenants' report definitions by querying the reports object. Because objectql's callAdapter skips space filtering for enable space global objects on find/findOne,...

CVE-2026-104198

ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken returns false when a token is malformed or has an invalid signature, but the calle...

BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability

BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance...

PT-2026-116040

FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing unprotected auto-login endpoints. Attackers can list users via /api/v1/auth/auto-login/users, mint a superuser auto-login token, and exchange i...

PT-2026-116057

SiteServer SSCMS through 7.4.0 contains an authorization bypass vulnerability in ChannelsController that allows site-scoped administrators to access other sites' channels by supplying foreign channel IDs. Attackers with Channels permission on one site can read and overwrite another site's channel...

PT-2026-116067

AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency.py that allows authenticated low-privileged users to bypass efficiency:read and efficiency:write permission checks. Attackers can query routes like /cost/detail, /top-users and /budget to read...