EUVD-2026-124779

A vulnerability has been found in Linksys EA8100 1.0.3.216940. This affects the function GetWANStatus/GetWANStatus3/IsAdminPasswordDefault of the component JNAP API. The manipulation leads to missing authentication. The attack is possible to be carried out remotely. The exploit has been disclosed...

CVE-2026-127275

A vulnerability was determined in Linksys EA8100 1.0.3.216940. This issue affects the function SetRemoteSetting/SetUnsecuredWiFiWarning of the file uiserver.lua of the component JNAP API. This manipulation of the argument isEnabled/enabled causes missing authentication. It is possible to initiate...

CVE-2026-127273

A vulnerability exists in the Linksys EA8100 (version 1.0.3.216940) within the JNAP API component. Specifically, the functions GetWANStatus, GetWANStatus3, and IsAdminPasswordDefault are affected by missing authentication . This flaw allows for remote exploitation, where an attacker can manipulat...

KOMTEK Cassa Kurier Module Authentication Bypass

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management is associated with the absence of authentication for a critical function. Exploitation of this vulnerability may allow an attacker to compromise the integrity and accessibility of...

Ascon.Pilot.WinService Authentication Bypass

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality, integrity, and accessibility o...

Ascon.Pilot.WinService Auth Bypass Code Execution

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-35078

CVE-2023-35078 Exploit Tool ██████╗ ███╗ ██╗███████╗███████╗ ██████╗ ██╔═████╗████╗ ██║██╔════╝██╔════╝██╔════╝ ██║██╔██║██╔██╗ ██║███████╗█████╗ ██║ ████╔╝██║██║╚██╗██║╚════██║██╔══╝ ██║ ╚██████╔╝██║ ╚████║███████║███████╗╚██████╗ ╚═════╝ ╚═╝ ╚═══╝╚══════╝╚══════╝ ╚═════╝ + CVE-2023-35078 - Ivan...

360WFP_Exploit

360WFPExploit A proof-of-concept PoC demonstrating potential abuse of the 360 Security WFP driver 360netmonx64wfp.sys interface, aimed at verifying the risk that IOCTL interfaces without caller authentication may be misused by third-party programs. This project is intended for security research a...

xerteonlinetoolkits-rce

Xerte Online Toolkits = 3.15 Remote Code Execution Xerte Online Toolkits versions 3.15 and earlier suffer from 3 vulnerabilities in the /editor/elfinder/php/connector.php component, which may be chained together by an unauthenticated attacker to achieve Remote Code Execution RCE. Affected Version...

CVE-2019-9653

CVE-2019-9653 Date Disclosure: 03/11/2019 Last updated: 03/15/2019 Summary NUUO Inc. is a company providing a video-centric surveillance solution. They have many NVR Network Video Recorder products for different customers with various requirements. These NVRs are Linux embedded video recording...

CVE-2020-13937

CVE-2020-13937 1. Vulnerability Description： Apache Kylin has a RESTful API that exposes configuration information without any authentication. 2. Reproduction Vulnerable comparison Non-vulnerable comparison Writing PoC Verify correct single URL: pocsuite -r CVE-2022-26134.py -u url Verify...

SAP_EEM_CVE-2020-6207

PoC for CVE-2020-6207 Missing Authentication Check in SAP Solution Manager This script allows to check and exploit missing authentication checks in SAP EEM servlet tcsmdagentapplicationeem that lead to RCE on SAP SMDAgents connected to SAP Solution Manager Original finding: Pablo Artuso Yvan 'igg...

CVE-2026-15198

A missing authentication for critical functionality vulnerability in the Webdav API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to read specific files and conduct limited denial-of-service attacks...

EUVD-2026-124189

A missing authentication for critical functionality vulnerability in the Webdav API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to read specific files and conduct limited denial-of-service attacks...

CVE-2026-15198

A missing authentication for critical functionality vulnerability in the Webdav API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to read specific files and conduct limited denial-of-service attacks...

CVE-2026-15198

Synology DiskStation Manager (DSM) is affected by a missing authentication for critical functionality vulnerability in the Webdav API . This flaw exists in versions prior to 7.3.2-86009-5 and 7.4.1-90080-1 . A remote attacker can exploit this vulnerability to read specific files and perform limit...

CVE-2026-126795

A vulnerability was determined in ToolJet up to 3.20.256-lts/3.21.93-beta. The impacted element is the function activateUserWithPassword of the file server/src/modules/onboarding/util.service.ts of the component Onboarding Signup Endpoint. Executing a manipulation of the argument email can lead t...

CVE-2026-126795

ToolJet versions up to 3.20.256-lts and 3.21.93-beta are vulnerable to a missing authentication flaw in the Onboarding Signup Endpoint . The root cause is located in the activateUserWithPassword function within server/src/modules/onboarding/util.service.ts, where manipulating the email argument a...

CVE-2026-126795 ToolJet Onboarding Signup Endpoint util.service.ts activateUserWithPassword missing authentication

A vulnerability was determined in ToolJet up to 3.20.256-lts/3.21.93-beta. The impacted element is the function activateUserWithPassword of the file server/src/modules/onboarding/util.service.ts of the component Onboarding Signup Endpoint. Executing a manipulation of the argument email can lead t...

EUVD-2026-124153

A vulnerability was determined in ToolJet up to 3.20.256-lts/3.21.93-beta. The impacted element is the function activateUserWithPassword of the file server/src/modules/onboarding/util.service.ts of the component Onboarding Signup Endpoint. Executing a manipulation of the argument email can lead t...