CVE-2020-26061

CVE-2020-26061 ClickStudios Passwordstate 密码重置门户认证绕过 信息 供应商： ClickStudios 产品： Passwordstate 受影响版本： 8.5 build 8501 之前 研究人员： Jason Juntunen 又名 @missing0x00 https://github.com/missing0x00 描述 ClickStudios Passwordstate 密码重置门户 8.5 build 8501 之前版本受认证绕过漏洞影响。ResetPassword...

ActiveMQ_CVE-2023-46604

ActiveMQCVE-2023-46604 PY实现快速构造数据流量并发包；两个gadgets类的实现都有，org.springframework.context.support.FileSystemXmlApplicationContext和org.springframework.context.support.ClassPathXmlApplicationContext ，FIleSystemXml可以绕过一些ids 检测类设备...

CVE-2026-89022

BookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation that allows unauthenticated attackers to sign in as arbitrary users by authenticating through a different social provider sharing the same driverid namespace. Attackers can authenticate at...

CVE-2026-54503

plone.app.textfield provides a zope.schema-style field type called RichText for storing a value with a related MIME type. Prior to 2.0.2, 3.0.2, and 4.0.1, depending on the release line, RichTextValue.output returns an unsanitized stored RichText value when mimeType equals outputMimeType, includi...

CVE-2026-54547 Meta Ads MCP: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token

Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.115, AuthInjectionMiddleware in metaadsmcp/core/httpauthintegration.py rejects HTTP MCP requests only when both authtoken and pipeboardtoken are absent, while extracttokenfromheaders doe...

CVE-2026-54547

meta-ads-mcp is a Model Context Protocol server for Meta Ads by Pipeboard. Prior to version 1.0.115, an authentication bypass in AuthInjectionMiddleware (http_auth_integration.py:259) lets an unauthenticated network caller send any X-Pipeboard-Token header value to pass the request guard. Because...

CVE-2018-0296

CVE-2018-0296 Prueba CVE-2018-0296 y extrae nombres de usuario de Cisco ASA. Consulta https://sekurak.pl/opis-bledu-cve-2018-0296-ominiecie-uwierzytelnienia-w-webinterfejsie-cisco-asa/ para más detalles técnicos. Menú de Ayuda root@kitploit: $ ./CVE-2018-0296 -h Options: -h, --help display help...

CVE-2013-6117

CVE-2013-6117 root@kitploit: $ ./CVE-2013-6117 -h Options: -h, --help display help information -f, --filename File containing list of IP addresses -t, --target Target IP -n, --threads No of concurrent threads default: 100 root@kitploit: $ ./CVE-2013-6117 -f hostfile.txt...

CVE-2026-55701

A flaw was found in the OpenTelemetry Collector Contrib's githubreceiver component. An unauthenticated attacker can bypass authentication mechanisms, including required headers and HMAC validation, when the 'Secret' field is empty. This allows the attacker to submit arbitrary webhook payloads,...

CVE-2025-29927

CVE-2025-29927 - Bypass de Autorización del Middleware de Next.js PoC Este es un PoC estilo Capture The Flag CTF para la vulnerabilidad de Bypass de Autorización del Middleware de Next.js CVE-2025-29927. El objetivo es evadir el middleware de autenticación y recuperar la bandera de la ruta...

CVE-2026-12742

IBM Business Automation Workflow (both containers and traditional deployments) is affected by a missing authorization control that allows an authenticated attacker to trigger restricted import actions. The root cause is insufficient authorization checks on import-related functions. Per CVSS 3.1, ...

loxs-optimized

loxs-optimized Proyecto de https://github.com/coffinxp/loxs CSP-Bypass-xss.txt Nota: Principalmente elude el payload de CSP 2024-11-06 Añade CSP-Bypass-xss.txt a xss.txt 2024-11-07 Eliminando información que interfiere Solo se muestra la información vulnerable 2024-11-11 Resuelve el problema de q...

CVE-2025-20029

CVE-2025-20029: Inyección de Comandos en la CLI TMSH de F5 BIG-IP Existe una vulnerabilidad de inyección de comandos en la CLI restringida “tmsh” de F5 que permite a un atacante autenticado aprovechar los comandos accesibles por un usuario de bajo privilegio para eludir restricciones, inyectar...

CVE-2026-53710 MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the pythonsandboxserver in mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py exposes raw getattr through safebuiltins, omits a required getattr guard, and relie...

CVE-2026-46488

motionEye (mEye) , the web interface for the motion video surveillance system, is vulnerable to authentication bypass prior to version 0.44.0 . The server accepts the client-controlled meye_username and meye_password_hash cookies as sufficient authentication material without server-side session v...

CVE-2026-46488 motionEye: Authentication possible via password hash

motionEye mEye is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, motionEye accepts the client-controlled meyeusername and meyepasswordhash cookies as authentication material without server-side session...

CVE-2026-54503

plone.app.textfield (used by Plone CMS) has a stored XSS in RichTextValue.output: when the stored mimeType equals the outputMimeType, the safe_html transform is bypassed entirely and the raw value is emitted via tal:content="structure" without escaping. An attacker with write access to a RichText...

CVE-2026-54503 plone.app.textfield: Stored XSS by spoofing mime type

plone.app.textfield provides a zope.schema-style field type called RichText for storing a value with a related MIME type. Prior to 2.0.2, 3.0.2, and 4.0.1, depending on the release line, RichTextValue.output returns an unsanitized stored RichText value when mimeType equals outputMimeType, includi...

EUVD-2026-78836

plone.app.textfield provides a zope.schema-style field type called RichText for storing a value with a related MIME type. Prior to 2.0.2, 3.0.2, and 4.0.1, depending on the release line, RichTextValue.output returns an unsanitized stored RichText value when mimeType equals outputMimeType, includi...

CVE-2026-0265-check

CVE-2026-0265 Vulnerability Assessment Tool Safely determine whether a Palo Alto Networks PAN-OS GlobalProtect portal is vulnerable to CVE-2026-0265 without authenticating any session or modifying any state. Description CVE-2026-0265 is a remote authentication bypass affecting PAN-OS and Panorama...