CVE-2022-40684-metasploit-scanner

CVE-2022-40684-metasploit-scanner Una omisión de autenticación mediante una ruta o canal alternativo en productos Fortinet preparación del POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2022-40684-metasploit-scanner cd CVE-2022-40684-metasploit-scanner mkdir -p...

CVE-2024-27198

CVE-2024-27198: La omisión de autenticación en Jetbrain Teamcity conduce a ejecución remota de código Overview TeamCity es un servidor de integración continua y despliegue que proporciona, de serie, pruebas unitarias continuas, análisis de calidad de código e informes tempranos sobre problemas de...

CVE-2023-5359

CVE-2023-5359 - W3 Total Cache 明文存储漏洞 描述 CVE-2023-5359 是一个影响 WordPress 插件 W3 Total Cache （版本 ≤ 2.7.5）的明文存储漏洞。该漏洞允许远程攻击者访问存储在未加密且可公开访问的 PHP 文件中的敏感凭据。 严重性 CVSS 评分 : 7.5 高危 向量 : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 类型 : 敏感信息泄露 技术漏洞 根本原因 W3 Total Cache 将配置设置和 API 凭据存储在...

CVE-2025-505050

CVE-2025- 描述： 未经验证可访问上传的文件 POC： 导航至任何上传的文件，无需登录即可访问 发现者：Aljohara Abdulmohsen Alsubaie...

CVE-2023-0297

CVE-2023-0297 Ejecución remota de código no autenticada en PyLoad 0.5.0b3.dev31 DESCARGO: Este script está hecho para auditar la seguridad de los sistemas. Úselo únicamente en sus propios sistemas o en sistemas donde tenga permiso por escrito para explotar...

CVE-2024-44313

Exploit 🛠️ Estudio de Caso: CVE-2024-44313 y el EPSS en la Priorización de Vulnerabilidades Este estudio de caso fue desarrollado para una charla sobre EPSS Exploit Prediction Scoring System, demostrando cómo la puntuación puede influir en la priorización de vulnerabilidades en la práctica. La...

CVE-2024-42919

Consola de gestión eScan Título del Exploit : Consola de gestión eScan - Control de Acceso Incorrecto Autor : Jeyabalaji Versiones afectadas : 14.0.1400.2281 Probado en : Windows 11 CVE : CVE-2024-42919 Descripción: La consola de gestión Escan implementa mecanismos de autenticación; sin embargo, ...

CVE-2026-77254

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, requests to the HTTP MCP endpoint without a per-user identity are allowed to reach tool handlers, which then use globally configured Jira or Confluence credentials. A network caller c...

EUVD-2026-84743

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, requests to the HTTP MCP endpoint without a per-user identity are allowed to reach tool handlers, which then use globally configured Jira or Confluence credentials. A network caller c...

CVE-2026-77254

The mcp-atlassian Model Context Protocol server (versions prior to 0.22.0 ) contains a vulnerability where unauthenticated HTTP MCP requests can bypass per-user identity checks. The flaw allows a network caller to reach tool handlers that utilize globally configured Jira and Confluence credential...

CVE-2020-14883

CVE-2020-14883 Oracle WebLogic Server 认证远程代码执行 RCE Oracle Fusion Middleware 的 Oracle WebLogic Server 产品（组件：控制台）存在漏洞。受影响的支持版本包括 10.3.6.0.0、12.1.3.0.0、12.2.1.3.0、12.2.1.4.0 和 14.1.1.0.0。该漏洞易于利用，未经身份验证的攻击者可通过 HTTP 网络访问破坏 Oracle WebLogic Server。成功利用此漏洞可导致 Oracle WebLogic Server 被接管。 概念验证 PoC 1： 使用...

CVE-2024-9106

CVE-2024-9106 微信社交登录 = 1.3.0 - 认证绕过 描述： WordPress 的微信社交登录插件在版本 1.3.0 及以下存在认证绕过漏洞。这是由于在社交登录过程中对提供的用户验证不足所致。攻击者如果拥有用户ID，就可以在未认证的情况下以任何现有用户（如管理员）的身份登录。只有在应用密钥未设置（默认值为空）时才能利用此漏洞。只需添加 uid=1 或将 ID 号更改为要登录的账户即可。仅适用于微信。 root@kitploit: CVE: CVE-2024-9106 CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

CVE-2026-77244

The MCP Atlassian server (Model Context Protocol for Atlassian products) is vulnerable prior to version 0.22.0 due to a flaw in the HTTP transport . The system accepts requests without verifying user identity, causing the downstream fetcher to fall back to the operator's globally configured Jira ...

CVE-2021-43798-Grafana-File-Read

Grafana-File-Read Grafana未授权文件读取 影响版本：8.0.0-lastest reference: - https://github.com/tangxiaofeng7/Grafana-File-Read 利用Grafana /public/plugins 接口对url路由校验不严格的漏洞读取服务器本地任意文件。 poc: /public/plugins/icon/../../../../../../../../../../../../../../../../../..path 其中 path为本地文件绝对路径，如读取/etc/passwd即为：...

PoC-CVE-2025-29927

PoC-CVE-2025-29927 漏洞是什么？ 该 CVE 报告了标头 x-middleware-subrequest 中的一个缺陷，该标头负责处理 Next.js 中的内部请求，允许攻击者绕过 Next.js 15.0.0 中的授权中间件，从而访问受保护的路由，例如 实际示例 在一个 Web 应用中，存在 /dashboard 路由，只有登录用户才能访问，但是，如果我们使用标头 x-middleware-subrequest: middleware:middleware:middleware:middleware:middleware 发起请求，则可以在无需身份验证的情况下访问该路...

CVE-2026-94455 Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API key

An HTTP endpoint intended for provisioning enterprise and reseller organisations is reachable without any session. The authentication middleware is bound only to an explicit list of controllers, and the enterprise controller is not on that list, so no authentication runs for these routes. The...

CVE-2026-85709 LightRAG: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the LightRAG API server returns raw Python exception text from error handlers in documentroutes.py, graphroutes.py, queryroutes.py, ollamaapi.py, and lightragserver.py. The detail=stre, detail=strexc, and equivalent...

CVE-2026-85709

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the LightRAG API server returns raw Python exception text from error handlers in documentroutes.py, graphroutes.py, queryroutes.py, ollamaapi.py, and lightragserver.py. The detail=stre, detail=strexc, and equivalent...

ipmi

I wrote some software to explore IPMI; here are some of results. I thought I'd do the usual detect, get data, and audit sort of cycle. Each of these turned out to be fairly interesting problem on its own, at least to me. BTW/FYI - I released a new tool to explore IPMI -...

CVE-2026-25197

CVE-2026-25197: Omisión de Autorización mediante Clave Controlada por el Usuario IDOR Aviso Campo| Valor ---|--- CVE| CVE-2026-25197 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 9.1 Crítico Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-639 Omisión de Autorización mediante Clave...