CVE-2026-101296

A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the correct password. This issue affects Apache Tomcat: from 11.0.0-M1 through...

cve-2026-41940-tool

🚀 CVE-2026-41940 – cPanel & WHM / WP Squared Auth Bypass Exploitation Tool A comprehensive Python utility to detect , scan in bulk , and exploit the critical authentication bypass vulnerability CVE-2026-41940 in cPanel & WHM and WP Squared. The tool combines multi‑port smart scanning,...

EXPLOIT-CVE-2026-8832-

EXPLOIT-CVE-2026-8832 An exploitation tool to test for Remote Code Execution RCE vulnerabilities in the WordPress plugin WPCode Lite Insert Headers and Footers v2.3.5. This vulnerability stems from registering the Custom Post Type CPT wpcode without defining a custom capabilitytype. This oversigh...

net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing

A flaw was found in the mime/multipart and net/textproto packages in Go. A remote attacker could exploit this vulnerability by submitting a crafted multipart form request that bypasses configured memory limits when the remaining boundary limit is small. This issue allows the application to read a...

Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257

Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257...

CTT-MICROSOFT-OFFICE-OLE-MANIFOLD-BYPASS-CVE-2026-21509

🏛️CTT -Microsoft Office OLE Manifold BYPASS CVE-2026-21509 Standardized CTT Implementation for 1096x Temporal Execution ! 📜 Vulnerability Overview CVE-2026-21509 is a critical bypass in the Microsoft Office OLE Object Linking and Embedding validation engine. While standard "laminar" exploits...

EXPLOIT-CVE-2026-40901

DataEase — Unauthenticated RCE via a 4-vulnerability chain CVE-2026-40901 & friends Auth bypass → JDBC blocklist bypass arbitrary file read → SQL injection → Java deserialization in Quartz → remote code execution asroot. Self-contained local lab Docker + working PoC. Fixed in DataEase v2.10.21...

CVE-2025-22870

PoC – CVE-2025-22870 – HTTP Proxy Bypass via IPv6 Zone ID in Go Summary This Proof of Concept demonstrates the exploitation of CVE-2025-22870, a vulnerability in the golang.org/x/net/http/httpproxy package prior to v0.36.0, which can be used to bypass HTTP proxy restrictions by abusing the way IP...

Dissecting-CVE-2026-0628-Chromium-Extension-Privilege-Escalation

= doi.org/10.5281/zenodo.18413764 = orcid.org/0009-0007-7728-256X README.md CVE-2026-0628: Chromium WebView Privilege Escalation Origin Spoofing – Technical Research & Proof-of-Concept Author: Sastra Adi Wiguna Purple Elite Teaming Research Date: January 2026 CVE ID: CVE-2026-0628 CVSS v3.1: 8.8...

cve-2024-4577

CVE-2024-4577 Vulnerability Test Script This Python script is a simple Proof of Concept PoC tool for diagnosing the latest PHP vulnerability CVE-2024-4577. ⚠️ This tool is provided for security assessment purposes and should only be used on systems you own or targets with prior authorization. 📌...

EUVD-2026-105010

A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the correct password. This issue affects Apache Tomcat: from 11.0.0-M1 through...

CVE-2026-101296

A missing verification step in Apache Tomcat allows an unauthenticated remote attacker to bypass authentication when the JNDI realm is configured with a non-GSSAPI SASL mechanism. This flaw enables unauthorized access to protected resources by allowing authentication without a correct password. A...

CVE-2026-101296 Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms

A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the correct password. This issue affects Apache Tomcat: from 11.0.0-M1 through...

CVE-2026-101296 Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms

A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the correct password. This issue affects Apache Tomcat: from 11.0.0-M1 through...

PHP-CGI-INTERNAL-RCE

PHP-CGI-INTERNAL-RCE This PoC demonstrates how an attacker can chain Orange Tsai's CVE-2024-4577 with DNS rebinding to achieve remote code execution on internal network infrastructure directly through the victim’s web browser. By bypassing Same-Origin Policy SOP and exploiting vulnerable PHP-CGI...

cve-2026-41940-cpanel_authbypass_reproduction

CVE-2026-41940 — cPanel & WHM Authentication Bypass CVSS v3.1: 9.8 Critical Overview CVE-2026-41940 is a critical authentication bypass vulnerability in cPanel & WHM that allows unauthenticated attackers to gain full administrative access to the control panel. The vulnerability was exploited in t...

CVE-2022-40635

CVE-2022-40635: Groovy Sandbox Bypass in CrafterCMS Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. Vendor Disclosure: The vendor's disclosure and fix for this...

CVE-2026-36214

CVE-2026-36214 - Stored Cross-Site Scripting XSS in osTicket via Vulnerable Bootstrap Tooltip Component Description Enhancesoft osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 ship with the known-vulnerable Bootstrap Tooltip 3.3.4 component CVE-2019-8331, which introduces a...

CVE-2025-29927

Next.js Middleware Authorization Bypass Vulnerability Test Environment CVE-2025-29927 📌 Project Overview This repository provides a local environment for testing the Next.js middleware authorization bypass vulnerability CVE-2025-29927. This vulnerability allows attackers to bypass middleware...

opnsense-captive-lastseen-roam

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · opnsense-captive-lastseen-roam opnsense-captive-lastseen-roam Class: Network-access bypass Reach: Remote OPNsense core 26.7.6 a842fe48 - opnsense.org Captive-portal roaming still inherits a session for the newest...