N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 id: CVE-2026-86206 info: name: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing author:...

CVE-2025-2825-CrushFTP-AuthBypass

🚨 CVE-2025-2825 – Contournement d'authentification CrushFTP 🔎 Aperçu CVE-2025-2825 est une vulnérabilité critique de contournement d'authentification affectant CrushFTP , un serveur de transfert de fichiers sécurisé largement utilisé. La faille permet à des attaquants distants de contourner...

CVE-2018-13257

Contournement de l'en-tête Host du ticket CAS dans Blackboard Learn Un module d'authentification dans Blackboard Learn est vulnérable à un contournement de l'en-tête Host HTTP lors de la validation du ticket de service du Central Authentication Service CAS. Un ticket de service CAS n'est destiné...

CVE-2026-35616-check

Outil d'évaluation de la vulnérabilité CVE-2026-35616 Détectez en toute sécurité si un serveur FortiClient EMS est vulnérable à CVE-2026-35616 sans provoquer de perturbation. Consultez l'article complet sur le blog de Bishop Fox. Description CVE-2026-35616 est un contournement d'authentification...

CVE-2026-35616

CVE-2026-35616 Author: wa6n3r | GitHub | Web Описание Эксплуатация уязвимости обхода проверки цепочки сертификатов в API Fortinet. Скрипт автоматически обнаруживает допустимые Common Name CN из различных источников, генерирует поддельный клиентский сертификат и выполняет запросы к защищённым...

CVE-2025-29927

CVE-2025-29927 — Next.js contournement de l'autorisation du middleware Résumé : vulnérabilité dans le middleware de Next.js permettant de contourner les vérifications d'autorisation en falsifiant l'en-tête x-middleware-subrequest. Table des matières CVE-2025-29927 — Next.js contournement de...

CVE-2019-17240

CVE-2019-17240 Exploit Les versions antérieures et y compris la 3.9.2 du CMS Bludit sont vulnérables à un contournement du mécanisme anti-force brute qui est en place pour bloquer les utilisateurs qui ont tenté de se connecter incorrectement 10 fois ou plus. La vulnérabilité a été découverte par...

CVE-2026-103592

simple-php-router through 5.4.1.7 contains an IP restriction bypass vulnerability in the IpRestrictAccess middleware that allows remote unauthenticated attackers to bypass IP whitelist and blacklist protections. Attackers can spoof X-Forwarded-For, CF-Connecting-IP, or Client-IP headers to...

CVE-2026-55584

CVE-2026-55584 - phpSysInfo IP 허용 목록 우회 CWE-290, CVSS 7.5 높음, phpSysInfo = 3.4.5 참조: GHSA-786w-p5pm-cvgh, CVE.org PSIALLOWED는 REMOTEADDR로 폴백하기 전에 공격자가 제어하는 X-Forwarded-For그다음 Client-IP 헤더에서 클라이언트 IP를 결정합니다. 신뢰할 수 있는 프록시 개념이 없으므로, 허용된 IP를 스푸핑하면 허용 목록을 무력화하고 xml.php를 통해 전체 시스템 정보가 노출됩니다. PoC:...

0xMiddleware

CVE-2025-29927: эксплойт middleware Next.js Этот инструмент демонстрирует и автоматизирует эксплуатацию CVE-2025-29927 — уязвимости в Next.js , которая позволяет атакующему обходить проверки middleware например, аутентификацию путём злоупотребления внутренним заголовком x-middleware-subrequest. 🔧...

CVE-2026-20896-Gitea-Authentication-Bypass

CVE-2026-20896 - Обход аутентификации Gitea ≤1.26.2 1. Что такое Gitea? Gitea — это лёгкая платформа с открытым исходным кодом для размещения Git-репозиториев , которая позволяет организациям и разработчикам управлять репозиториями исходного кода, отслеживать задачи, просматривать изменения и...

CVE-2022-31813

Démarrer le terrain d'entraînement docker compose up --build Accès normal GET / HTTP/1.1 Host: 127.0.0.1:8080 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/145.0.0.0 Safari/537.36 Accept:...

CVE-2022-46169

CVE-2022-46169 Exploit pour CVE-2022-46169 versions de Cacti antérieures à 1.2.3 Ici, remoteclientauthorized vérifie le nom d'hôte du client dans la table poller pour une entrée function remoteclientauthorized // ... $clientaddr = getclientaddr; // ... $clientname = gethostbyaddr$clientaddr; //...

CVE-2025-29927

CVE-2025-29927 - Next.js Middleware 15.2.2 - 인가 우회 ⚠️ NextJS 미들웨어의 심각한 인증 우회 🛠️ @zs1n의 PoC 구현 💡 개요 NextJS는 널리 사용되는 React 기반 웹 프레임워크이며, 12.3.5, 13.5.9, 14.2.25, 15.2.3 이전 버전에 영향을 미치는 인증 취약점이 있습니다. 이 취약점은 x-middleware-subrequest 헤더를 부적절하게 신뢰하는 데서 발생합니다. 이 헤더를 스푸핑하면 공격자는 미들웨어 로직을 우회할 수 있으며, 그 결과 일반적으로...

CVE-2026-80514

The wpForo Forum WordPress plugin (versions 3.0.0 through 3.1.5 ) is vulnerable to unauthenticated AI credit exhaustion . The root cause is a failure to verify the source of client-supplied IP address headers, which are used to key the per-visitor rate limit on paid AI requests. An attacker can b...

CVE-2026-80514 wpForo Forum 3.0.0 - 3.1.5 - Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass

The wpForo Forum WordPress plugin from 3.0.0 before 3.1.6 does not verify the source of client-supplied IP address headers before using them to key its per-visitor rate limit on paid AI requests, allowing unauthenticated attackers to bypass the limit by spoofing the header and exhaust the site...

CVE-2026-80514 wpForo Forum 3.0.0 - 3.1.5 - Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass

The wpForo Forum WordPress plugin from 3.0.0 before 3.1.6 does not verify the source of client-supplied IP address headers before using them to key its per-visitor rate limit on paid AI requests, allowing unauthenticated attackers to bypass the limit by spoofing the header and exhaust the site...

Linux Distros Unpatched Vulnerability : CVE-2026-62987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fabio is an HTTPS and TCP router for deploying applications managed by consul. From 1.6.6 until 1.7.2, the CVE-2025-48865 fix in proxy/httpheaders.go uses...

Steeltoe: Header-forwarded client cert lacks proof of private-key possession

Summary When Steeltoe's certificate-based authorization UseCertificateAuthorization is configured, the default configuration of the middleware relies on the X-Client-Cert HTTP header to identify the client certificate, without verifying private-key possession. This header is not stripped by commo...

CVE-2026-86863: Authentication Bypass by Spoofing

pgAdmin 4's Webserver authentication source is intended to accept an identity asserted by the web server or reverse proxy in front of pgAdmin, delivered through the WSGI/CGI environment. WebserverAuthentication.getuser read config.WEBSERVERREMOTEUSER from request.environ and, when that returned...