2858 matches found
EUVD-2026-94012
Backstage: Improper preservation of access restrictions during service credential delegation...
Check-WP-CVE-2020-35489
Check-WP-CVE-2020-35489 CVE-2020-35489 CVE-2020-35489 存在于 WordPress 插件 Contact Form 7 5.3.1 及更早版本中。通过利用此漏洞，攻击者可以绕过网站上关于允许上传文件类型的所有限制，直接上传任意类型的文件。 估计有 500万 个网站受到影响。 PoC 将于 2020 年 12 月 31 日公开，以便用户有时间进行更新。 参考 https://wpscan.com/vulnerability/10508...
CVE-2020-29607
CVE-2020-29607-漏洞利用 漏洞利用标题：Pluck CMS 4.7.13 - 文件上传远程代码执行（需认证） CVE 描述： Pluck CMS 4.7.13 之前版本中的文件上传限制绕过漏洞允许具有管理员权限的用户通过“管理文件”功能获得对主机的访问权限，这可能导致远程代码执行。 https://nvd.nist.gov/vuln/detail/CVE-2020-29607 ExploitDB： https://www.exploit-db.com/exploits/49909 漏洞利用描述： 已认证的攻击者可以使用...
CVE-2022-24112-POC
CVE-2022-24112-POC Apache APISIX 2.12.1 远程代码执行，通过绕过IP限制并使用默认管理API令牌 完整指南 https://kavigihan.medium.com/apache-apisix-2-12-1-remote-code-execution-5f920b22ccff...
ipsourcebypass
此Python脚本可用于通过HTTP头绕过IP源限制。 功能 17个HTTP头。 多线程。 使用--json outputfile.json导出JSON。 自动检测最成功的绕过。 用法 $ ./ipsourcebypass.py -h IP source bypass using HTTP headers, v1.2 usage: ipsourcebypass.py -h -v -i IP -t THREADS -x PROXY -k -L -j JSONFILE -C -H HEADERS -S url This Python script can be used to test fo...
Chankro
Chankro 你最喜欢的工具，用于在渗透测试中绕过 disablefunctions 和 openbasedir 。 工作原理 在 Linux 中，PHP 在调用 mail 函数时会执行一个二进制程序（sendmail）。如果我们允许使用 putenv，就可以设置环境变量 "LDPRELOAD"，从而预加载一个任意的共享对象。该共享对象会在不受 PHP 限制的情况下执行我们的自定义载荷（二进制或 bash 脚本），例如实现一个反向 shell。 示例： 语法非常简单： $ python2 chankro.py --arch 64 --input rev.sh --output...
CVE-2026-106301
A flaw was found in the Contextual Tasks component of chromium-browser. This flaw allows a remote attacker who has already compromised the renderer process to bypass access restrictions into privileged browser pages. By convincing a user to open a crafted HTML page, the attacker exploits a confus...
CVE-2026-106492
Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaults package is affected by improper preservation of access restrictions during service credential delegation. An external service credential configured with access restrictions...
CVE-2026-106492 Backstage: Improper preservation of access restrictions during service credential delegation
Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaults package is affected by improper preservation of access restrictions during service credential delegation. An external service credential configured with access restrictions...
CVE-2026-106492
The Backstage framework is vulnerable in the @backstage/backend-defaults package prior to versions 0.16.1 and 0.17.8 . The root cause is the improper preservation of access restrictions during service credential delegation. Specifically, an external service credential with restrictions (such as r...
HPESBNW05158 rev.1 - Multiple Vulnerabilities in HPE Networking ClearPass Policy Manager (CPPM)
Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Enterprise Software - Please refer to Vulnerability Summary for information on impacted software verisions. - Any hardware running the affected software is...
PT-2026-106788
Name of the Vulnerable Software and Affected Versions Payload versions prior to 3.90.0 Payload versions prior to 4.0.0-canary.34 Description The server fails to correctly enforce a field-level access.update restriction on the password field within an authentication collection. This allows the...
Apache-APISIX-CVE-2022-24112
Apache APISIX 远程代码执行 CVE-2022-24112 漏洞利用 摘要 攻击者可以利用 batch-requests 插件发送请求以 绕过 Admin API 的 IP 限制。 Apache APISIX 的默认配置（使用默认 API 密钥） 容易受到远程代码执行攻击。 当管理员密钥被更改或 Admin API 的端口被更改 为与数据面板不同的端口时，影响会更低。但仍 然存在绕过 Apache APISIX 数据 面板 IP 限制的风险。 batch-requests 插件中有一个检查，它会覆盖 客户端 IP 为其真实的远程 IP。但由于代码中的一个 bug，此...
CVE-2026-103512
Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address when validating certain authentication requests. An attacker holding a stolen P4 Server ticket can bypass host-based ticket restrictions and trusted-address controls, gaining access to P4 Search as the ticket's owner...
EUVD-2026-92307
Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address when validating certain authentication requests. An attacker holding a stolen P4 Server ticket can bypass host-based ticket restrictions and trusted-address controls, gaining access to P4 Search as the ticket's owner...
CVE-2026-103512
Perforce P4 Search versions prior to 2026.4.2 are vulnerable to an authentication bypass because the system trusts a client-supplied address during the validation of specific authentication requests. An attacker possessing a stolen P4 Server ticket can exploit this flaw to bypass host-based ticke...
CVE-2023-44061
File-upload-Restriction-bypass...
CVE-2022-31813
启动靶场 docker compose up --build 正常访问 GET / HTTP/1.1 Host: 127.0.0.1:8080 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/145.0.0.0 Safari/537.36 Accept:...
CVE-2025-29927_Scanner
CVE-2025-29927 检测器 📌 简介 此脚本通过测试 x-middleware-subrequest 请求头中的多种 payload，检查 Next.js 服务器是否存在 CVE-2025-29927 漏洞，以检测未授权访问。 ❓ 什么是 CVE-2025-29927？ CVE-2025-29927 是一个允许绕过 Next.js 安全限制的漏洞，可在无需身份验证的情况下访问敏感路由。 ⚙️ 脚本工作原理 🔹 1. 导入库 该脚本使用： 🛠️ argparse - 用于处理命令行参数。 🌐 requests - 用于发送 HTTP 请求。 ⏳ time - 用于在测试之间暂停。 🎨...