CVE-2020-11890

Сделано HK CVE-2020-11890: Неправильные проверки ввода в классе таблицы usergroup могут привести к нарушению конфигурации ACL и RCE Ссылка https://developer.joomla.org/security-centre/810-20200402-core-missing-checks-for-the-root-usergroup-in-usergroup-table.html PoC Уязвимая версия: Joomla core ...

CVE-2022-33891

「💥」CVE-2022-33891 설명 Apache Spark UI는 구성 옵션 spark.acls.enable을 통해 ACL을 활성화할 수 있는 기능을 제공합니다. 인증 필터를 사용하면 사용자가 애플리케이션을 보거나 수정할 수 있는 액세스 권한이 있는지 확인합니다. ACL이 활성화된 경우 HttpSecurityFilter의 코드 경로를 통해 임의의 사용자 이름을 제공하여 가장impersonation을 수행할 수 있습니다. 악의적인 사용자는 입력을 기반으로 Unix 셸 명령을 구성한 후 실행하는 권한 확인 함수에 도달할 수...

CVE-2024-54679

CVE-2024-54679 CVE-2024-54679 - CyberPanel aka Cyber Panel Denial of Service Description A denial of service DoS vulnerability was discovered in Cyber Panel that allows any authenticated user to restart the database by sending requests to the /dataBases/restartMySQL endpoint. This vulnerability...

CVE-2024-38473-Nuclei-Template

CVE-2024-38473 Nuclei Template Description Nuclei template designed to detect Apache servers vulnerable to CVE-2024-38473. It first identifies servers running Apache 2.4.60 with default PHP-FPM settings. Then, it fuzzes for potential PHP files protected by ACLs that might be bypassed due to this...

Apache HTTP Server - ACL Bypass

Encoding problem in modproxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. id: CVE-2024-38473 info: name: Apache HTTP Server - ACL Bypass author: pdteam severity: high...

BypassFuzzer

Bypass Fuzzer The original 403fuzzer.py : ==Note: This has been deprecated for my new, shiny burp extension that is 1000000% better. Thank you for using my tools!== You can find the extension here: https://github.com/intrudir/BypassFuzzer-Burp Fuzz 401/403ing endpoints for bypasses Perform variou...

Cisco-SNMP-Slap

개요 cisco-snmp-slap는 Cisco IOS 장치에서 SNMP 서비스를 보호하는 ACL을 우회하기 위해 IP 주소 스푸핑을 활용합니다. 일반적으로 IP 스푸핑은 DoS를 제외한 실제 공격에서 사용이 제한적입니다. TCP 서비스는 초기 핸드셰이크를 완료할 수 없습니다. UDP 패킷은 스푸핑하기 더 쉽지만 반환 패킷이 종종 잘못된 주소로 전송되어 반환된 정보를 수집하기 어렵습니다. 하지만 공격자가 SNMP rw 커뮤니티 문자열과 유효한 출발지 주소를 추측할 수 있다면 SNMP MIB를 설정할 수 있습니다. 이를 가장 확실...

CVE-2026-87106 Consul vulnerable to a denial of service in the native RPC listener

Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...

CVE-2026-72815-poc

CVE-2026-72815: go-chi/chi middleware.RealIP IP 스푸핑 PoC English version 개요 이 리포지토리는 go-chi/chi의 middleware.RealIP에 존재하는 IP spoofing 취약점 CVE-2026-72815GHSA-3fxj-6jh8-hvhx의 로컬 Proof of Concept PoC입니다. 취약한 RealIP middleware는 X-Forwarded-For의 첫 번째가장 왼쪽 값을 무조건 신뢰하고, 그 값으로 http.Request.RemoteAddr를 덮어씁니...

CVE-2025-12748

CVE-2025-12748 Eng Rus Credit: Svyatoslav Tereshin @TERESH1, Artem Mukhin @saladosss Issues: 687, 825 English Description An issue was discovered in the XML file processing procedure. The processing of the file's content is performed before the ACL check. This allows a user with limited permissio...

CVE-2026-19584

Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOKEDITOR permission to plant a VQL que...

CVE-2026-19584 Velociraptor VQL injection during notebook restore from backup

Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOKEDITOR permission to plant a VQL que...

CVE-2026-19584 Velociraptor VQL injection during notebook restore from backup

Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOKEDITOR permission to plant a VQL que...

ESPOCRM-RCE-POC-CVE-2026-33656

EspoCRM command 예시: ./poc.sh http://192.168.5.16:8090 admin admin id...

CVE-2026-24306

Azure Front Door 権限昇格 – CVE-2026-24306 PoC 許可されたレッドチーム/研究目的のみに使用すること。作者は誤用について責任を負いません。 この脆弱性により可能になること: 任意のルーティングルールの注入 バックエンドプール/オリジングループの変更 WAFポリシーの適用/上書き 設定ミスのあるAFDインスタンスにおけるカスタムドメインの乗っ取り 影響を受けるバージョン: Azure Front Door Standard & Premium ティア（2026-01-22より前のパッチ適用前ビルド）...

Linux Distros Unpatched Vulnerability : CVE-2026-61909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href ACL. An authenticated DAV user with some shared access to anoth...

CVE-2026-61909

An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href ACL. An authenticated DAV user with some shared access to another user's calendar or address book could read even unshared events or contacts by including the target hrefs in a calendar-multiget or...

CVE-2026-61907

An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox ACL. An authenticated user with insert permissions on another user's snoozed mailbox could cause insertion of mail to that user's inbox, or any other of their mailboxes whose id was known to the user...

UBUNTU-CVE-2026-61907

JMAP snooze bypasses destination-mailbox ACL: An authenticated user with insert permissions on another user's snoozed mailbox could cause insertion of mail to that user's inbox, or any other of their mailboxes whose id was known to the user, despite having no insert permissions to the target...

CVE-2026-61907

JMAP snooze bypasses destination-mailbox ACL: An authenticated user with insert permissions on another user's snoozed mailbox could cause insertion of mail to that user's inbox, or any other of their mailboxes whose id was known to the user, despite having no insert permissions to the target...