The vulnerability of the QAFA Firmware for telecommunications equipment lies in its ability to bypass authentication using a user-controlled key. This allows attackers to gain access to the administrative web console.

The vulnerability of the QAFA Firmware for telecommunications equipment relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the administrative web console...

peer-tweet

PeerTweet Decentralized feeds using BitTorrent's DHT. Idea from Arvid and The8472 "DHT RSS feeds" http://libtorrent.org/dhtrss.html Screenshot Quick links Download the latest binaries from the releases page. Find and share PeerTweet addresses from the addresses issues page. What is PeerTweet?...

writeup_split

Resumen CVE-2024-0684 Una vulnerabilidad en el programa split de GNU coreutils permite un desbordamiento del búfer del heap con datos controlados por el usuario. Fue introducida en 40bf1591bb4362fa91e501bcec7c2029c5f65a43 el 2023-03-04. Se ha publicado una corrección con...

CVE-2021-21551

CVE-2021-21551 Prueba de concepto del exploit para CVE-2021-21551. La vulnerabilidad se debe a que las direcciones proporcionadas por el usuario se pasan como argumentos a una llamada a memmove, lo que permite una lectura/escritura arbitraria ioctls 0x9B0C1EC4 y 0x9B0C1EC8, así como el parámetro ...

CVE-2026-102382

Authorization Bypass Through User-Controlled Key vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.0...

CVE-2026-62061

The WordPress ProfileGrid plugin (versions

CVE-2026-102382

The Majestic Support WordPress plugin (versions

CVE-2026-102382 WordPress Majestic Support plugin <= 1.2.0 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.0...

CVE-2026-103446

Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass. This issue affects MediaWiki WikiLambda extension: 1.46...

EUVD-2026-90199

Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass. This issue affects MediaWiki WikiLambda extension: 1.46...

CVE-2026-103446 WikiLambda exposes anonymous execution of unsaved Abstract Wikipedia fragments

Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass. This issue affects MediaWiki WikiLambda extension: 1.46...

CVE-2026-103446

The MediaWiki WikiLambda extension (version 1.46 ) is vulnerable to an Authentication Bypass caused by an Authorization bypass through User-Controlled key vulnerability. This flaw allows for the anonymous execution of unsaved Abstract Wikipedia fragments . No specific remediation or exploit links...

EUVD-2026-89960

Authorization Bypass Through User-Controlled Key vulnerability in WP Hosting AS Pay with Vipps for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.4...

CVE-2026-97259 WordPress Pay with Vipps for WooCommerce plugin <= 6.2.4 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in WP Hosting AS Pay with Vipps for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.4...

CVE-2026-97259

The Pay with Vipps for WooCommerce plugin (versions up to and including 6.2.4 ) is vulnerable to an Insecure Direct Object References (IDOR) flaw. This Authorization Bypass occurs because of incorrectly configured access control security levels, allowing attackers to exploit a User-Controlled Key...

CVE-2020-8163

CVE-2020-8163 CVE-2020-8163 - Ejecución remota de código de nombres locales proporcionados por el usuario en Rails Ejecución remota de código de nombres locales proporcionados por el usuario en Rails 5.0.1 Había una vulnerabilidad en versiones de Rails anteriores a la 5.0.1 que permitiría a un...

CVE-2023-43364-Searchor-RCE-Exploit

CVE-2023-43364 – Exploit RCE de Searchor PoC Ejecución Remota de Código RCE mediante uso inseguro de eval en Searchor --test Ejecutar comando personalizado Ejecutar cualquier comando en el servidor objetivo: python3 CVE-2023-43364.py -a "whoami" Ejemplos: python3 CVE-2023-43364.py -a "TF=$mktemp...

pbck-exploit

Framework de explotación masiva y validación para Joomla Page Builder CK Subida arbitraria de archivos sin autenticación → Ejecución remota de código 📑 Tabla de contenidos Resumen de la vulnerabilidad Versiones afectadas Características Instalación Uso Prueba de concepto Análisis técnico en...

CVE-2026-82323

Authorization bypass through User-Controlled key vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows Exploitation of Trusted Identifiers. This issue affects Enocta Platform: through 2026-09-28...

CVE-2026-82323 Improper Authorization in Enocta Educational's Enocta Platform

Authorization bypass through User-Controlled key vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows Exploitation of Trusted Identifiers. This issue affects Enocta Platform: through 2026-09-28...