CVE-2015-7808

CVE-2015-7808 PoC code for vBulletin PreAuth vulnerability Usage: perl vbulletin.pl www.vbulletin.com/forum id...

watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.py

cve-2026-41940 Обход аутентификации cPanel/WHM - генератор артефактов обнаружения Инструмент для генерации артефактов обнаружения обхода аутентификации cPanel/WHM Описание Этот генератор артефактов обнаружения проверяет, уязвим ли cPanel/WHM к недавнему обходу аутентификации. Детектирование в...

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-Day CVE-2026-20127, эксплуатируемая с 2023 года для получения административного доступа. Этот репозиторий содержит рабочий proof-of-concept эксплойт для CVE-2026-20127 — критической уязвимости предварительной аутентификации в Cisco...

TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal

TRUfusion Enterprise versions 7.10.4.0 and earlier contained a vulnerability that allowed unauthenticated access to the Internal Admin Contact Page, resulting in the disclosure of PII including partner and contact names. id: CVE-2025-27225 info: name: TRUfusion Enterprise = 7.10.4.0 - Admin Conta...

CVE-2021-22205

CVE-2021-22205 GitLab CE/EE Preauth RCE using ExifTool This project is for learning only, if someone's rights have been violated, please contact me to remove the project, and the lastDO NOT USE IT ILLEGALLY If you have any illegal behavior in the process of using this tool, you will bear all the...

watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127

watchTowr-vs-f5-bigip-PreAuth-RCE Генератор артефактов обнаружения для F5 BIG-IP Технические подробности см. в нашем посте в блоге. Обнаружение в действии ./watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127.py --host 192.168.5.36 --port 80 --command 'touch /tmp/hello' все смещения/адреса жёстко...

xss2shell-poc

XSS2Shell: WordPress Preauth XSS to RCE Chain CVE-2026-64638 CVE-2026-64638: XSS2Shell Proof-of-Concept — Whitebox Pentesting...

CVE-2021-22205

CVE-2021-22205 RCE pré-auth via exiftool sur Gitlab CE/EE Résumé de la CVE GitLab utilise ExifTool pour analyser chaque fichier tiff/jpeg/jpg afin de supprimer toutes les balises qui ne sont pas sur liste blanche. Mais comme ExifTool ne détermine pas le type de fichier en fonction de l'extension...

Exploit for CVE-2026-64638

XSS2Shell: WordPress Pr...

Sophos UTM Preauth - Remote Code Execution

Sophos SG UTMA WebAdmin is susceptible to a remote code execution vulnerability in versions before v9.705 MR5, v9.607 MR7, and v9.511 MR11. id: CVE-2020-25223 info: name: Sophos UTM Preauth - Remote Code Execution author: gy741 severity: critical description: Sophos SG UTMA WebAdmin is susceptibl...

CVE-2026-90169

In the Linux kernel, the following vulnerability has been resolved: ksmbd: free preauth sessions on connection teardown SMB3.1.1 multichannel binding preserves the preauthentication hash in a preauthsession between the NTLM negotiate and authenticate requests. The binding NTLM negotiate allocates...

DEBIAN-CVE-2026-90169

In the Linux kernel, the following vulnerability has been resolved: ksmbd: free preauth sessions on connection teardown SMB3.1.1 multichannel binding preserves the preauthentication hash in a preauthsession between the NTLM negotiate and authenticate requests. The binding NTLM negotiate allocates...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: The issue related to “slab-use-after-free” in smb3preauthhashrsp has been fixed. The function ksmbdusersessionput should be called under smb3preauthhashrsp. This will prevent freeing a session before calling...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: The “binding mark” of a reused connection was unset. Steve French reported a null pointer dereference error from the sha256 lib. The cifs.ko module can send session setup requests using a reused connection. If a reused...

Astra Linux – Vulnerability in krb5

In kdc/kdcpreauthec.c of the Key Distribution Center KDC in MIT Kerberos 5 also known as krb5, before versions 1.18.4 and 1.19.x, and before version 1.19.2, remote attackers could exploit a vulnerability that led to a NULL pointer dereferencing and a crash of the daemon. This occurs because the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Avoid out-of-bounds access in decodepreauthctxt. It must be confirmed that the address of pnegctxt-HashAlgorithms lies within the SMB request boundary. deassemblenegcontexts only checks that the eight-byte smb2negcontex...

CVE-2026-38820

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/ endpoint because of libopennds.sh...

CVE-2026-38820

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/ endpoint because of libopennds.sh...

UBUNTU-CVE-2026-38820

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/ endpoint because of libopennds.sh...

CVE-2026-38820

openNDS versions before 11.0.0 are susceptible to unauthenticated OS command execution due to a shell command injection vulnerability in libopennds.sh . The flaw is triggered through the fas query parameter on the /opennds_preauth/ endpoint, allowing an attacker on an adjacent network to execute ...