BIT-KEYCLOAK-2026-3047 Org.keycloak.broker.saml: keycloak saml broker: authentication bypass due to disabled saml client completing idp-initiated login

A flaw was found in org.keycloak.broker.saml. When a disabled Security Assertion Markup Language SAML client is configured as an Identity Provider IdP-initiated broker landing target, it can still complete the login process and establish a Single Sign-On SSO session. This allows a remote attacker...

BIT-KEYCLOAK-2026-2603 Keycloak: keycloak: unauthorized authentication via disabled saml identity provider

A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider IdP to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity...

BIT-KEYCLOAK-2024-7341 Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters

A session fixation issue was discovered in the SAML adapters provided by Keycloak. The session ID and JSESSIONID cookie are not changed at login time, even when the turnOffChangeSessionIdOnLogin option is configured. This flaw allows an attacker who hijacks the current session before authenticati...

cve-2026-34472-auth-bypass-zte-h188a-router

CVE-2026-34472 Technische Analyse von CVE-2026-34472, einem Auth-Bypass durch durchgesickerte Anmeldedaten, die die Firmware ZTE ZXHN H188A V6 betreffen. Zusammenfassung In den getesteten H188A V6-Builds können nicht authentifizierte Anfragen an den Stammpfad auf Pre-Login-Wizard-Handler zugreife...

SmartAsset-UE-CVE-2020-26526

SmartAsset-UE-CVE-2020-26526 Es ist möglich, auf der Anmeldeseite gültige Benutzernamen zu enumerieren. CVE-2020-26526 Ein Problem wurde in Damstra Smart Asset 2020.7 entdeckt. Es ist möglich, auf der Anmeldeseite gültige Benutzernamen zu enumerieren. Die Anwendung sendet eine andere Serverantwor...

mysql_dos

Questo strumento causa il crash di server MySQL vulnerabili utilizzando CVE-2017-3599, un overflow di intero remoto durante l'analisi delle credenziali di accesso. Può essere scaricato qui dovrai eseguirlo dalla riga di comando Utilizzo: mysqldos target port...

bludit-CVE-2019-17240

bludit-CVE-2019-17240 Bypass del login di mitigazione di Bludit e caricamento di file malevoli per richiamare una reverse shell...

CVE-2019-17525

CVE-2019-17525 D-LINK ROUTER "MODEL NO: DIR-615" con "FIRMWARE VERSION:20.10" & "HARDWARE VERSION:T1" Una vulnerabilità trovata nella pagina di login del D-LINK ROUTER "DIR-615" con "FIRMWARE VERSION:20.10" & "HARDWARE VERSION:T1" che consente agli attaccanti di bypassare facilmente il CAPTCHA...

CVE-2024-26521

CVE-2024-26521 CE-Phoenix-v1.0.8.20 Vulnerabilità di HTML Injection Pagina di Login Come possiamo vedere, c'è una pagina di login. È facile capire che in questa applicazione è presente una vulnerabilità di HTML Injection. Fondamentalmente, in questa applicazione tutti i file PHP sono salvati in...

CVE-2023-41425

CVE-2023-41425 Ne scrivo uno perché quello che ho trovato non funziona Utilizzo root@kitploit: python3 exploit.py http://example.com/loginURL 10.10.xx.xx 9001...

CVE-2022-31007-Python-POC

Python-Automatisierung des folgenden Write-up über eine Umgehung der Kontosperrung und Brute-Force-Login bei elabFTW, die Versionen vor 4.1.0 betrifft. Beide Skripte können gegen die Proving Grounds Practice Umgebung namens Source verwendet werden, die eine verwundbare Version von elabFTW ausführ...

Red-Planet-Laundry-Management-System-1.0-is-vulnerable-to-SQL

Red-Planet-Laundry-Management-System-1.0-is-vulnerable-to-SQL https://vulners.com/cve/CVE-2022-28452 https://nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-28452 https://laundry.redplanetcomputers.com/ 1-الوصف: نظام Red Planet Laundry Management System 1.0 معرض لثغرة SQL Injection عبر المعامل...

QNAP HBS 3 - Broken Access Control

An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to...

Wing FTP Server <= 7.4.3 - Remote Code Execution

Wing FTP Server versions prior to 7.4.4 are vulnerable to an unauthenticated remote code execution RCE flaw CVE-2025-47812. The vulnerability arises from improper NULL byte handling in the 'username' parameter during login, which allows Lua code injection into session files. These injected sessio...

Apache Axis2 Default Login

Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service. id: CVE-2010-02...

WordPress Ultimate Member 2.1.3 - 2.8.2 – SQL Injection

The Ultimate Member - User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the ‘sorting’ parameter in versions 2.1.3 to 2.8.2 due to insufficient escaping on the user supplied parameter and lack of...

Atlassian Questions For Confluence - Hardcoded Credentials

Atlassian Questions For Confluence contains a hardcoded credentials vulnerability. When installing versions 2.7.34, 2.7.35, and 3.0.2, a Confluence user account is created in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attack...

CVE-2019-25137-RCE

CVE-2019-25137-RCE CVE-2019-25137 è una vulnerabilità RCE di Umbraco, lo script in questo repository è leggermente modificato Questo script di exploit è basato sullo script di Alexandre ZANNI EDB-ID 49488. È leggermente modificato, il flusso è stato cambiato per saltare l'estrazione del token pri...

ScreenConnect-UserEnum

ScreenConnect-UserEnum ConnectWise, noto anche come ScreenConnect, presenta una vulnerabilità di enumerazione utenti. Questo è uno strumento di enumerazione utenti per tale vulnerabilità. CVE-2019-16516 vulnerabile = 19.2.24707 ??? non ho ben capito se è stato corretto nelle versioni successive...

CVE-2025-63820

CVE-2025-63820 Einreicher: Nicola Giuffrida Informationen Hersteller: TOTOLINK Website des Herstellers: TOTOLINK Modell: A720R Firmware-Version: V4.1.5cu.630B20250509 Firmware-Downloadadresse: TOTOLINK Details zur Schwachstelle Beim Anmelden am Kontrollpanel werden Benutzername und Passwort im...