The vulnerability of the control console of the MaxPatrol EDR detection and response system allows a perpetrator to trigger a service failure.

The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests, allowing a malicious actor to perform unauthorized modifications to the server’s data.

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests. Exploiting this vulnerability allows a malicious actor to perform unauthorized modifications to the server’s data remotely...

The vulnerability affects the embedded energy-independent single-write eFUSE memory module in Realtek RTL8762C, a highly integrated wireless system on chip (SoC). This module allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

AuthMatrix

AuthMatrix v0.8.2 AuthMatrix 是 Burp Suite 的一个扩展，提供了一种简单的方法来测试 Web 应用程序和 Web 服务中的授权。使用 AuthMatrix，测试人员可以预先专注于为特定目标应用彻底定义用户、角色和请求的表。这些表的结构类似于各种威胁建模方法中常见的访问控制矩阵。 一旦表组装完成，测试人员可以使用简单的点击运行界面启动所有角色和请求的组合。结果可以通过易于阅读、颜色编码的界面确认，指示系统中检测到的任何授权漏洞。此外，该扩展还提供了保存和加载目标配置的能力，以进行简单的回归测试。 安装 AuthMatrix 可以通过 Burp Suit...

casbin

Apache Casbin Noticias : ¿aún te preocupa cómo escribir la política correcta de Apache Casbin? ¡Apache Casbin online editor viene a ayudarte! Pruébalo en: https://casbin.apache.org/editor/ Apache Casbin es una biblioteca de control de acceso de código abierto, potente y eficiente, para proyectos...

CVE-2026-87891

The Rox Appointment Booking WordPress plugin, versions before 1.2.0 , lacks a capability or authorization check when saving its holiday schedule via the REST API. This allows unauthenticated attackers to overwrite the dates the booking system treats as unavailable, potentially blocking legitimate...

EUVD-2026-76792

The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data by a user-supplied identifier, allowing users who are restricted to their own products to read other owners' product information, including protected downloadable file URLs and...

EUVD-2026-76789

The Masteriyo LMS WordPress plugin before 3.4.1 does not verify ownership of, or restrict the type of, the records a user requests for download, allowing users with the instructor role to retrieve the full content and metadata of arbitrary posts, including other instructors' private and draft...

EUVD-2026-76810

The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowing the recipient of a temporary login to retain working access to the site ov...

EUVD-2026-76812

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a customer or employee record is entitled to modify the WordPress account linked to it, allowing users holding Amelia's customer or employee management permissions to set the...

kur

kur Un código que simplemente ofrece la capacidad de leer/escribir memoria en modo kernel desde el modo usuario utilizando un driver firmado vulnerable. Simplemente utiliza MmCopyVirtualMemory, una API no documentada aunque una de las más comunes, en modo kernel para que puedas leer/escribir...

CVE-2022-1388

CVE-2022-1388 - Omisión de autenticación y RCE en iControl REST de F5 BIG-IP Este script de Python explota CVE-2022-1388, una vulnerabilidad crítica en F5 BIG-IP iControl REST que permite la ejecución remota de comandos sin autenticación mediante un control de acceso inadecuado y un manejo...

CVE-2023-23752

CVE-2023-23752 Joomla 未授权访问漏洞 CVE-2023–23752 本自述文件提供了关于 Joomla 未授权访问漏洞 CVE-2023–23752 的信息以及检测方法。该漏洞允许攻击者绕过 Joomla 的访问控制系统，从而获得对 Joomla 网站后端的未授权访问。攻击利用该漏洞来实现这一目标。 先决条件 root@kitploit: - Joomla 网站（版本 4.0.0 至 4.2.7） 漏洞详情 Joomla 未授权访问漏洞（CVE-2023–23752）是一个安全漏洞，允许攻击者绕过 Joomla 的访问控制系统，从而获得对 Joomla...

nextjs-middleware-bypass-demo

Demostración de CVE-2025-29927 Artículo original: https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware Configuración Primero, ejecuta el servidor de desarrollo: root@kitploit: npm i npm run dev Abre http://localhost:3000 con tu navegador para ver el resultado...

CVE-2026-24055-OAuth-Langfuse

CVE-2026-24055 — Unauthenticated Slack OAuth Install in Langfuse Đồ án môn Bảo mật Web và Ứng dụng — Nhóm 06, lớp NT213.Q21.ANTT 📌 Tóm tắt Dự án tái hiện lại reproduce một lỗ hổng bảo mật thực tế đã được công bố CVE-2026-24055 trên nền tảng Langfuse — một endpoint OAuth cho phép kẻ tấn công chiếm...

smart-contract-attack-vectors

Vectores de ataque en contratos inteligentes El objetivo de este repositorio es recopilar todas las posibles vulnerabilidades de contratos inteligentes y recursos para aprender sobre ellas. No dudes en enviar un pull request con cualquier cosa, desde pequeños arreglos hasta documentación o...

CVE-2021-40346

CVE-2021-40346 CVE-2021-40346 PoC（HAProxy HTTP 走私） 仅供教育目的 设置 root@kitploit: $ docker build -t cve-2021-40346 . $ docker run --name poc -p 8000:80 -d --rm -it cve-2021-40346 4941e9f23508b497e4cbe334a75e7cdb84c83478522ed85f48db3477f97a6fb4 测试 确认 /admin 被拒绝。 root@kitploit: $ curl http://localhost:80...

CVE-2025-22828

CVE-2025-22828 📜 Descripción Apache CloudStack 4.16.0 y versiones posteriores presentan un problema de control de acceso roto que permite a los usuarios con conocimiento de los UUID de recursos leer o añadir comentarios anotaciones en recursos a los que no están autorizados a acceder. Los UUID...