Mikrotrick_POC

Validador de Confusión de Módulo SSH para RouterOS CVE-2026-67276 Un validador conductual automatizado diseñado para detectar la vulnerabilidad de omisión de autenticación de clave pública SSH en MikroTik RouterOS CVE-2026-67276. El script comprueba si una falla de validación incompleta en el...

ScreenConnect-AuthBypass-RCE

Cómo usar Estoy usando Python3.9 pip install requests python check.py python batchAdduser.py python ScreenConnect-AuthBypass-RCE.py -h usage: ScreenConnect-AuthBypass-RCE.py -h -u USERNAME -p PASSWORD -t TARGET -d DOMAIN --proxy PROXY CVE-2024-1708 && CVE-2024-1709 -- RCE!!! optional arguments: -...

UAC_bypass_windows_store

UACbypasswindowsstore Windows 10 LPE UAC Bypass en Windows Store WSReset.exe uacbypassmod.c exe está totalmente automatizado. no necesitas ejecutar UAC.bat . método de registro : https://github.com/sailay1996/FilelessUACbypassWSReset...

CVE-2026-62201-OpenClaw-SSRF

CVE-2026-62201 — Omisión de la política de red del Exec-Server del sandbox de OpenClaw SSRF Gravedad: Alta · CVSS: 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N · CWE-918 Server-Side Request Forgery Resumen de la vulnerabilidad Campo| Valor ---|--- Aviso| GHSA-mgvr-6gvw-3rgr NVD| CVE-2026-6220...

CVE_2023_44487-Rapid_Reset

Herramienta de Prueba de Rapid Reset HTTP/2 CVE-2023-44487 - Edición Mejorada Una herramienta integral de pruebas en Python para CVE-2023-44487 , la vulnerabilidad de Rapid Reset en HTTP/2. Esta versión mejorada proporciona control granular sobre los parámetros de prueba, múltiples patrones de...

CVE-2025-8110

CVE-2025-8110 - Bypass de symlink en Gogs - escritura arbitraria de archivos como el usuario del proceso Gogs Gogs //contents/. Gogs sigue el symlink y escribe bytes controlados por el atacante en el destino del enlace con los privilegios del proceso Gogs. Cuando Gogs se ejecuta como root, esto e...

PraisonAI: Call API localhost-only authentication bypass via spoofed Host header

Call API localhost-only authentication bypass via spoofed Host header Summary PraisonAI's patched PRAISONAICALLAUTH=disabled safeguard for the n8n/call agent invocation API can be bypassed with a spoofed Host: 127.0.0.1 header, allowing an unauthenticated network caller to list and invoke...

EUVD-2026-44641

PraisonAI: Call API localhost-only authentication bypass via spoofed Host header...

CVE-2026-73309

CVE-2026-73309: Empty OAuth2 credentials bypass XenForo before 2.3.13 can skip OAuth2 client-secret and PKCE verification when an empty string reaches the token endpoint. What happens The endpoint checks whether clientsecret and codeverifier keys exist, then performs the comparisons only when the...

CVE-2026-73320

CVE-2026-73320: Unauthenticated unfurl result disclosure XenForo before 2.3.13 exposes pending rich-link previews through an unauthenticated endpoint keyed by predictable integer IDs. What happens unfurl.php accepts a POST containing global UnfurlResult IDs, loads those rows, and returns rendered...

CVE-2026-73318

CVE-2026-73318: Missing authorization on force-agreement actions XenForo before 2.3.13 lets any ACP administrator trigger site-wide privacy-policy and terms re-agreement. What happens The ACP navigation entries are limited to administrators with the option permission, but ForceAgreementController...

CVE-2026-73317

CVE-2026-73317: Approval job authorization bypass XenForo before 2.3.13 lets an administrator with only the cache-rebuild permission dispatch an approval job as another user. What happens The ACP rebuild endpoint accepts a caller-supplied job class and options. Its authorization check asks only...

thymeleaf-check

thymeleaf-check ThymeleafCVE-2026-40477 / CVE-2026-41901 offline triage tool — zero dependencies, single jar, no network. Two CVSS 9.0 SSTI bypasses, with two fixed releases shipped within nine days. It first answers "which of these am I affected by," then answers the harder question: On my versi...

CVE-2026-82329-JFrog-Artifactory-Auth-Bypass

artifactory.py ╔══════════════════════════════════════════════════════════╗ ║ artifactory · CVE-2026-82329 unauth admin takeover ║ ║ mitsec · https://x.com/ynsmroztas ║ ╚══════════════════════════════════════════════════════════╝ CVE-2026-82329 — JFrog Artifactory self-hosted unauthenticated...

CVE-2026-73313

CVE-2026-73313: Passkey credential not bound to login account XenForo before 2.3.13 can complete one user's two-step login with a passkey owned by a different user. What happens The passkey manager performs a global lookup using the credential ID supplied in the assertion and correctly verifies...

vault-cve-2026-5006-audit

Kit de herramientas CVE-2026-5006 HCSEC-2026-32 Dos herramientas para trabajar con la vulnerabilidad de inyección de barras en políticas plantilladas de Vault: un recorrido interactivo para explicar y delimitar el problema, y un script de auditoría que comprueba un clúster en vivo y escribe los...

CVE-2026-PSA-2026-00043-1

PSA-2026-00043-1 CVE-2026-PSA-2026-00043-1 Proxmox VE 7.0–8.0.3: omisión de autenticación de root sin autenticar y de una sola solicitud Donar Ayude a mantener este proyecto Si encuentra útil este proyecto, considere apoyar su mantenimiento continuo a través de PayPal o ABA Mobile. ❤️ ១០%...

CVE-2026-65330

CVE-2026-65330 — tmpfs setxattr PAC Bypass Component: XNU VFS — defaultsetxattrdoubleagent tmpfs VNOP Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Fixed PAC diversifier in xattr handler pointer signing Impact: PC control from kernel context; full privile...

Common-Registry-Jmp-RCX

Common-Registry-Jmp-RCX https://www.unknowncheats.me/forum/anti-cheat-bypass/501925-undetected-kernel-communication-method.html https://github.com/EBalloon/Common-Registry NTSTATUS stdcall DriverEntryPDRIVEROBJECT DriverObject, PUNICODESTRING RegistryPath char nvraidbase; // rax char...

CVE-2026-19490

CVE-2026-19490 — Bypass de autenticación SAML en NetScaler ADC/Gateway Falsificación de sesión no autenticada en Citrix NetScaler ADC / NetScaler Gateway a través del manejador de enlace HTTP-Redirect SAML en GET /cgi/samlauth. CVSS 4.0 9.3, CWE-288. Boletín CTX696939 2026-08-19, sin workarounds...