CVE-2022-29464

CVE-2022-29464 CVE-2022-29464 es una vulnerabilidad crítica en WSO2 Identity Server, una plataforma de gestión de identidad y acceso de código abierto. La vulnerabilidad permite a atacantes remotos cargar archivos JSP maliciosos que pueden ejecutar comandos arbitrarios en el sistema objetivo con...

CVE-2021-40859

CVE-2021-40859 Exploit de puertas traseras de Auerswald COMpact 8.0B Acerca de Se descubrieron puertas traseras en dispositivos Auerswald COMpact 5500R 7.8A y 8.0B, que permiten a atacantes con acceso a la aplicación web de gestión obtener acceso administrativo completo al dispositivo. Detalles d...

ZTE Cable Modem Web Shell

ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests to webshellcmd.gch, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials. id: CVE-2014-2321 info: name: ZTE Cable Modem Web Shell author:...

Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting

PAN-OS management web interface is vulnerable to reflected cross-site scripting. A remote attacker able to convince an administrator with an active authenticated session on the firewall management interface to click on a crafted link to that management web interface could potentially execute...

Cacti 1.2.24 - SQL Injection

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graphview.php. Since guest users can access graphview.php without authentication by default, if guest users are being utilized in an enabled state, there...

Hardcoded Admin Credentials For Cisco Smart Licensing Utility API

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to log in to an affected system by using a static administrative credential.This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit...

Zyxel - Authentication Bypass

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware...

SureTriggers – All-in-One Automation Platform ≤ 1.0.78 - Authentication Bypass

The SureTriggers- All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secretkey' value in the 'autheticateuser' function in all versions up to, and including, 1.0.78. Th...

CVE-2026-29519-Lucee-Reflected-XSS

CVE-2026-29519-Lucee-Reflected-XSS Prueba de Concepto para XSS Reflejado en Lucee CFML CVE-2026-29519 Framework 0-Day: XSS Reflejado en el Análisis de URL de Lucee CFML Afecta Despliegues Empresariales Versiones 5.3.1.95 a 7.x Descubridor: Fouad Milat lavado Fecha de Descubrimiento: 6 de diciembr...

JFrog Artifactory 7.111.4 < 7.111.21 / 7.117.x < 7.117.28 / 7.125.x < 7.125.20 / 7.133.x < 7.133.29 / 7.146.x < 7.146.38 / 7.161.x < 7.161.20 Authentication Bypass

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is 7.111.4 prior to 7.111.21, 7.117.x prior to 7.117.28, 7.125.x prior to 7.125.20, 7.133.x prior to 7.133.29, 7.146.x prior to 7.146.38, or 7.161.x prior to 7.161.20. It is, therefore,...

CVE-2026-38526-KrayinCRM-RCE

CVE-2026-38526 - Krayin CRM RCE xpl0ited by infrar3d This is a Remote Code Execution RCE proof-of-concept specifically designed for Krayin CRM v2.2.x, an open-source customer relationship management system. The script automates the exploitation of a file upload vulnerability in the CRM's...

EUVD-2026-57454

SiYuan: The session-cookie signing key Conf.CookieKey is returned to anonymous readers by /api/system/getConf...

CVE-2026-12878

A flaw was found in the Codefresh platform. An authenticated user can exploit an API endpoint to elevate their privileges to administrative permissions, potentially gaining full control over the platform...

CVE-2025-8730

CVE-2025-8730 – Bypass de autenticación en Belkin F9K1009/F9K1010 Autor : Byte Reaper Descripción : Este repositorio contiene un exploit para CVE‑2025‑8730, una vulnerabilidad crítica de bypass de autenticación que afecta la interfaz web de los routers Belkin F9K1009 y F9K1010. La falla reside en...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...

CVE-2023-37596

CVE-2023-37596 — issabel-pbx 4.0.0-6: Cross-Site Request Forgery CSRF — Eliminar Cualquier Usuario Severidad: Alta | CVSS v3.1: 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | CWE: CWE-352 Tabla de Contenidos Resumen Detalles de la Vulnerabilidad Impacto Versión Afectada Escenario de Ataque Prueba de...

CVE-2026-83961

ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain limited read and write access. The vulnerable component is restricted to an administrative network zone by default. Exploitation of...

CVE-2026-83961

Adobe ColdFusion is affected by an Improper Authentication vulnerability (CWE-287) that could allow an unauthenticated attacker to escalate privileges and gain limited read and write access . By default, the vulnerable component is restricted to an administrative network zone , and exploitation r...

CVE-2025-12737

The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a malicious actor with administrative privileges to inject and execute arbitrary code remotely. Successful exploitation enables a threat actor with administrative...

CVE-2026-85174

SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file when full-text search requests exceed timing thresholds. Authenticated attackers can read the log file via the getFile endpoint to recover admin API tokens and gain permanent administrative access...