96653 matches found
CVE-2018-12633-TPLink-Auth-Bypass
CVE-2018-12633-TPLink-Auth-Bypass Un estudio de caso técnico y análisis de explotación de la vulnerabilidad de omisión de autenticación en el firmware TP-Link TL-WR840N CVE-2018-12633. Análisis de Vulnerabilidad: TP-Link TL-WR840N Authentication Bypass CVE-2018-12633 ⚠️ Descargo de responsabilidad...
CVE-2025-45619
Detalles del problema El modelo de cámara PTC310UV2 ejecuta la versión de firmware 0.1.0000.59. La vulnerabilidad se encuentra en la interfaz web que se utiliza para acceder a la cámara. La vulnerabilidad se encontró durante una prueba de penetración; por lo tanto, cierta información de las...
CVE-2023-22515-Exploit-Script
Explotación automatizada de CVE-2023-22515 - Escalada de privilegios en Confluence Este repositorio contiene un script de explotación automatizado para CVE-2023-22515, una vulnerabilidad crítica en Atlassian Confluence que permite a atacantes no autorizados crear cuentas administrativas y obtener...
CVE-2019-19550
CVE-2019-19550 Descripción Omisión de autenticación remota en Senior Rubiweb 6.2.34.28 y 6.2.34.37 permite el acceso de administrador a información sensible de los usuarios afectados utilizando versiones vulnerables. El atacante solo necesita proporcionar la URL correcta. Fechas importantes Anunc...
cve-2022-24112
Apache APISIX 2.12.1 Ejecución Remota de Código y Laboratorio Docker Vamos a clonar este repositorio usando gitclone, luego podemos navegar a apisix-docker/examples. En este archivo docker-compose.yml, ya cambiamos a image: apache/apisix:2.12.0-alpine, porque la vulnerabilidad está en esta versió...
ABO.CMS-Login-SQLi-CVE-2024-25227
ABO.CMS-Login-SQLi-CVE-2024-25227 SQLi sin autenticación y Bypass de inicio de sesión CVE-2024-25227 Fecha: 23/02/2024 Probado en ABO.CMS 5.8 Vendedor: ABO.CMS URL del vendedor:https://abocms.ru ABO.CMS 5.8 es vulnerable a inyección SQL a través del parámetro tblogin, página de inicio de sesión d...
CVE-2020-29607-POC
Pluck CMS 4.7.13 File Upload RCE Exploit 🚨 Educational Remote Code Execution Exploit 🚨 Author: Ron Jost Hacker5preme Reference: Exploit-DB CVE: CVE-2020-29607 ⚠️ Disclaimer: This script is for educational and authorized testing purposes only. Do not use it on systems you do not own or have explici...
CVE-2026-97311
A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The endpoints used to retrieve groups associated with a specific role do not properly check for individual group visibility permissions. This allows a delegated administrator with basic search privileg...
CVE-2023-42791_CVE-2024-23666
Scripts de explotación de comprobaciones de autorización insuficientes en Fortimanager CVE-2024-23666 y carga de archivos sin restricciones CVE-2023-42791 Se proporcionan dos scripts de explotación que aprovechan estas vulnerabilidades: rce.py: Proporciona una reverse shell o añade un administrad...
TendaSpill
TendaSpill An exploitation tool to extract passwords using CVE-2015-5995. CVE-2015-5995 Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via a certain admin substring in an HTTP Cookie header...
CrushFTP-AS2-Bypass-Research-CVE-2025-54309
CrushFTP AS2 Authentication Bypass Research ⚠️ IMPORTANT: This vulnerability has been patched by CrushFTP as of November 2025. This research is published for educational and defensive purposes only. 📝 NOTE: This research is based on vulnerability patterns similar to CVE-2025-54309. The exact CVE...
cve-2026-23744
CVE-2026-23744 – MCPJam Inspector Unauthenticated Remote Code Execution RCE Description Product : MCPJam Inspector Affected versions : ≤ 1.4.2 Fixed version : 1.4.3 Type : Unauthenticated Remote Code Execution RCE Attack vector : Network Authentication required : No User interaction required : No...
CVE-2025-11001
Usage: root@kitploit: python3 exploit.py -t "C:\Users\pac\Desktop" -o demo.zip --data-file calc.exe Exploiting 7-zip The vulnerability is only exploitable on windows and has one major caveat.The bug can only be exploited when 7-Zip is ran with Admin privileges for this vulnerability to be...
CVE-2022-23648-POC
PoC for CVE-2022-23648 This is a proof of concept for @fel1x's CVE-2022-23648. Disclosure info here, CVE info here and a blog with some more information and mitigation ideas here. The Containerfile has the info. needed, and you can change the target of the VOLUME to try out different paths. Easie...
CVE-2025-41646
CVE-2025-41646 - RevPi Webstatus = 2.4.5 Authentication Bypass Exploit Overview This is a Python3 exploit script for CVE-2025-41646 , an Authentication Bypass vulnerability affecting RevPi Webstatus = 2.4.5. Vulnerability Details: CVE ID : CVE-2025-41646 Affected Product : RevPi Webstatus = 2.4.5...
CVE-2025-14736
CVE-2025-14736 Frontend Admin by DynamiApps - Unauthenticated Privilege Escalation Author: Hyun Chiya Vulnerability Information Field| Value ---|--- CVE ID| CVE-2025-14736 Plugin| Frontend Admin by DynamiApps Affected Versions| B"Extract Nonce acfnonce & Form ID acfform" B -- C"Construct POST...
EUVD-2026-85853
A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The endpoints used to retrieve groups associated with a specific role do not properly check for individual group visibility permissions. This allows a delegated administrator with basic search privileg...
CVE-2026-97311
A flaw in the Admin REST API of Keycloak , an identity and access management solution, allows for unauthorized information disclosure. Specifically, endpoints used to retrieve groups associated with a specific role fail to properly verify individual group visibility permissions . This vulnerabili...
CVE-2026-97311
A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The endpoints used to retrieve groups associated with a specific role do not properly check for individual group visibility permissions. This allows a delegated administrator with basic search privileg...