CVE-2019-17240

CVE-2019-17240 漏洞利用工具 Bludit CMS 3.9.2及之前版本存在一个安全漏洞，可绕过其针对登录失败10次以上用户所设置的抗暴力破解机制。 该漏洞由 Rastating 发现。 提交一个带有 X-Forwarded-For 头值（伪造字符串）的登录请求时，该请求会被成功处理，而失败的登录尝试则会记录在该伪造字符串上。 上述脚本正是利用此漏洞绕过抗暴力破解机制。 登录页面的请求体中包含 csrf 令牌，因此在每次携带凭证发送 POST 请求之前，都需要从上一次响应的源码中获取 csrf 令牌。 一种实现方法是：先发送 GET 请求获取 csrf...

CVE-2026-68953

CVE-2026-68953 is a missing authentication for critical function vulnerability affecting the Digital Watchdog VMAX DVR and NVR product lineups. Unauthenticated attackers on an adjacent network can send crafted HTTP(S) requests to bypass authentication and disclose sensitive device information, in...

EUVD-2026-79944

The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, including administrator credentials in plaintext, by sending crafted HTTPS requests...

CVE-2026-68953 Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups

The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, including administrator credentials in plaintext, by sending crafted HTTPS requests...

CVE-2026-83077

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud...

CVE-2026-76684

Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading ...

CVE-2026-76688

Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative...

CVE-2026-76673

Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete...

CVE-2026-69206

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, DigestAuth replay protection records lastNc plus one instead of the highest nonce-count value it has accepted. When a legitimate client sends noncontiguous nc values because of parallel or retried requests, the stored...

CVE-2026-18422

Concrete CMS before 9.5.3 did not enforce a destination-side authorization check and did not validate a CSRF token in the multilingual page assignment backend action Backend\Page\Multilingual::assign. As a result, an authenticated user who held the Edit Page Multilingual Settings permission on a...

EUVD-2026-79942

Concrete CMS 9.0.0 through 9.5.2 did not enforce a block-level edit-permission check on the Express Form block's control-management actions, which relied solely on CSRF token validation. Because the token is bound to the user and action rather than to a specific block, page, or form, an...

CVE-2026-73317

CVE-2026-73317 XenForo anterior a 2.3.13 permite que un administrador con solo el permiso de reconstrucción de caché envíe un trabajo de aprobación como otro usuario. Qué sucede El endpoint de reconstrucción del ACP acepta una clase de trabajo y opciones proporcionadas por el llamante. Su...

thm-Moniker-Link-cve-2024-21413-writeup

TryHackMe: Moniker Link CVE-2024-21413 路径： Cyber Security 101 → Exploitation Basics → Moniker Link CVE-2024-21413 难度： 高级房间 重点： Outlook 受保护视图绕过、NTLM 哈希泄露，以及使用 Responder 捕获凭据 CVE-2024-21413 是一个严重的 Microsoft Outlook 漏洞，影响应用程序处理特制超链接的方式。通过滥用 file:// Moniker Link 格式并附加一个特殊字符，攻击者可以完全绕过 Outlook 的受保护视图——...

traefik-stripprefix-auth-bypass-cve-2026-48020-path-normalization

CVE-2026-48020 — Traefik StripPrefix 路由级认证绕过（PoC） 一个独立的对于 CVE-2026-48020 的概念验证，该漏洞是 Traefik 的 StripPrefix 中间件中的路由级认证/授权绕过，由于路由决策做出 之后 才进行路径规范化。 形如 GET /api../admin 的请求在路由时通过一个 公开的 PathPrefix/api路由器（因此受保护路由器的basicAuth中间件从未附加），但在StripPrefix剥离/api且 Go 的req.URL.JoinPath规范化剩余的/../admin后，后端收到的路径是/admin...

DsArk64

DsArk64 DsArk64.sys 随 360 Total Security 一同发布。由 Microsoft 进行 WHQL 签名。LOLDrivers: magicsword-io/LOLDrivers308。CVE: 已申请（MITRE）。 原语 进程终止（ring 0） IOCTL 0x80863008，输入：4 字节原始 PID 驱动从内核调用 ZwOpenProcessALLACCESS + ZwTerminateProcess 此 IOCTL 无加密 绕过 PPL、EDR 自我保护、防篡改 内核读取 IOCTL 0x80863028，AES-128-CBC 加密输入...

EAC

العربية يوجدت نسختين من EAC: الأولى مدفوعة وتسمى EAC، والأخرى مجانية وتسمى EOC وهي الأكثر شيوعًا في معظم الألعاب. لقد قمت برفع SDK لمساعدتك في فهم كيفية عمل EAC. على كل حال، يعتبر EOC أضعف من النسخة المدفوعة بحكم أنه مجاني، ولكن هذا لا يمنع المطورين من شراء ميزات إضافية. ما أريد تسليط الضوء عليه...

EAC-Kernel-Packet-Fucker

EAC-Kernel-Packet-Fucker 不是我的代码。仅用于保存 https://www.unknowncheats.me/forum/anti-cheat-bypass/503052-easy-anti-cheat-kernel-packet-fucker.html 这是 Easy Anti-Cheat 内核数据包干扰器（简称 EACKPFucker）。 这是什么？基本上，通过它们的内核模式驱动发送的数据包将不会被发送给它们，这意味着你的 pasta pasta 2023 kdmapper FUD 绕过可以毫无阻碍地使用。 好吧，你让我大吃一惊。这他妈是怎么工作的？...

palo-alto-cve-2026-0265-checker

CVE-2026-0265 Palo Alto PAN-OS 风险检查器 一个 Python 脚本，通过 SSH 连接到一组 Palo Alto Networks 防火墙和 Panorama 设备，并报告每台设备对 CVE-2026-0265 的暴露情况——这是 PAN-OS 中的一个身份验证绕过漏洞，影响启用了 Cloud Authentication Service（CAS）的设备。 该脚本并非仅依赖版本匹配（这种方式会过度报告），而是同时检查每台设备是否实际配置了 CAS，并区分存在漏洞、受影响但不可利用和安全三种状态。 为什么会有这个脚本 官方公告将低于修复热修复版本的所有...

EUVD-2026-79504

Concrete CMS 9 before 9.5.3 authorized the dashboard sitemap reorder action Concrete\Controller\Backend\Dashboard\SitemapUpdate using only the global accesssitemap task permission and did not check per-page edit permission before updating each page's display order. As a result, an authenticated...

CVE-2026-18424 Concrete CMS 9.0.0 to 9.5.2 is vulnerable to SSRF protection bypass in remote file import when multiple URLs share a host but use different ports

Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Server-Side Request Forgery iremote file import via cross-port reuse of a host's validated DNS pin. When multiple remote URLs share the same host, only the first ValidatedRemoteUrl is retained and reused for every later URL with that host. A...