180033 matches found
Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)
Microsoft Exchange Server contains a remote code execution caused by improper input validation in the server component, letting remote attackers execute arbitrary code, exploit requires network access to the server. id: CVE-2021-28481 info: name: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass...
ETQ Reliance - Authentication Bypass via Trailing Space
An authentication bypass vulnerability exists in ETQ Reliance on the CG legacy platform. The application allowed login as the privileged internal SYSTEM user by manipulating the username field. The SYSTEM account does not require a password, enabling attackers with network access to the login pag...
SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery
SAP BusinessObjects Business Intelligence Platform Web Services 410, 420, and 430 is susceptible to blind server-side request forgery. An attacker can inject arbitrary values as CMS parameters to perform lookups on the internal network, which is otherwise not accessible externally. On successful...
Oracle Identity Manager REST WebServices - Authentication Bypass
Vulnerability in the Identity Manager product of Oracle Fusion Middleware component: REST WebServices. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager...
D-Link DIR-600M - Authentication Bypass
D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices can be accessed directly without authentication and lead to disclosure of information about the WAN, which can then be leveraged by an attacker to modify the data fields of the page. id: CVE-2019-13101 info: name: D-Link DIR-600M - Authentication...
PaperCut NG - Authentication Bypass
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper...
Flowise <= 1.8.2 Authentication Bypass
An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker to access API endpoints as an administrator and allow them to access restricted functionality. id: CVE-2024-8181 info: name: Flowise = 1.8.2 Authentication Bypass author:...
Control iD iDSecure - Authentication Bypass
An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative use...
Ruckus vRioT IoT Controller - Authentication Bypass
Ruckus vRioT through 1.5.1.0.21 contains an API backdoor caused by a hardcoded token in validatetoken.py,letting unauthenticated attackers interact with the API without authentication. id: CVE-2020-26879 info: name: Ruckus vRioT IoT Controller - Authentication Bypass author: DhiyaneshDk severity:...
FortiClient EMS - Authentication Bypass
Detects whether Fortinet hotfix FG-IR-26-099 for CVE-2026-35616 is missing by comparing behavioral responses from a certificate-authenticated endpoint. The template sends X-SSL-CLIENT-VERIFY: SUCCESS without certificate material and checks whether this spoofed header changes server behavior. id:...
DEBIAN-CVE-2026-89169
live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing...
CVE-2026-89169
live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing...
EXPLOIT-CVE-2026-8832
ЭКСПЛУАТАЦИЯ CVE-2026-8832 Инструмент эксплуатации для тестирования уязвимости удалённого выполнения кода RCE в плагине WordPress WPCode Lite Insert Headers and Footers v2.3.5. Эта уязвимость возникает из-за регистрации пользовательского типа записи CPT wpcode без определения собственного...
cve-2024-0012-poc
cve-2024-0012-poc CVE-2024-0012は、Palo Alto Networks PAN-OSソフトウェアにおける認証バイパスの脆弱性です。この脆弱性により、認証されていない攻撃者がネットワーク経由で管理Webインターフェースにアクセスし、PAN-OS管理者権限を取得して、管理操作の実行、設定の改ざん、または認証を必要とする他の特権昇格脆弱性（CVE-2024-9474など）を悪用することが可能になります。 これは実際の概念実証 PoC であり、この記事に触発されたものです。 使用方法は以下の通りです。 root@kitploit: python3...
CVE-2026-35616-check
CVE-2026-35616 취약점 평가 도구 FortiClient EMS 서버가 CVE-2026-35616에 취약한지 중단 없이 안전하게 탐지합니다. Bishop Fox 블로그의 전체 분석 문서를 참조하세요. 설명 CVE-2026-35616은 FortiClient EMS 7.4.5 및 7.4.6의 사전 인증pre-authentication API 우회 취약점으로, 원격의 인증되지 않은 공격자가 HTTP 헤더 스푸핑을 통해 인증서 기반 인증을 우회할 수 있게 합니다. Django 애플리케이션은 사용자가 제어할 수 있는 HTTP...
cve-2024-56348
Обход аутентификации JetBrains TeamCity + Удаленное выполнение кода CVE-2024-56348 PoC 📜 Описание CVE-2024-56348 — это критическая уязвимость обхода аутентификации в JetBrains TeamCity on-premises , затрагивающая все версии до 2024.12. REST API некорректно обрабатывает запросы к путям, содержащим...
Hack-Captive-Portal
Hack-Captive-Portal Этот скрипт помогает обойти порталы авторизации captive portals в общественных сетях Wi-Fi. Он перехватывает IP и MAC-адрес у кого-то, кто уже подключен и авторизован на портале. Установка и использование Для работы этого скрипта необходимы sipcalc и nmap. Затем скачайте .sh...
Privilege_Escalation
PrivilegeEscalation 간단하게 만든 Windows UAC 우회 도구 😋 기능 Windows 7/8/10 자동 우회 수동 우회 안전장치 권한 상승으로 생성된 모든 레지스트리 키 삭제 빌드 root@kitploit: git clone https://github.com/Mrakovic-ORG/PrivilegeEscalation cd PrivilegeEscalation\PrivilegeEscalation dotnet build 실행 중 라이선스 MIT...
CVE-2026-89169
live-boot at commit ff8867c contains a vulnerability in its dm-verity-enforce-roothash-signature protection mechanism. When the .verity file is missing, an attacker can bypass this integrity verification, as shown in the code at lines 112–114 of 9990-overlay.sh. The Debian bug tracker records thi...
