Really Simple Security < 9.1.2 - Authentication Bypass

The Really Simple Security Free, Pro, and Pro Multisite plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'checkloginandgetuser' function. This makes it possible...

DotNetNuke 07.04.00 - Administration Authentication Bypass

The installation wizard in DotNetNuke DNN before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx. id: CVE-2015-2794 info: name: DotNetNuke 07.04.00 - Administration Authentication Bypass author: 0xr2r severity...

Atlassian Jira Seraph - Authentication Bypass

Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also...

Cisco Small Business RV Series - OS Command Injection

Cisco Small Business RV Series routers RV16X/RV26X versions 1.0.01.02 and before and RV34X versions 1.0.03.20 and before contain multiple OS command injection vulnerabilities in the web-based management interface. A remote attacker can execute arbitrary OS commands via the sessionid cookie or...

Xiaomi Mi WiFi R3G Routers - Local file Inclusion

Xiaomi Mi WiFi R3G devices before 2.28.23-stable are susceptible to local file inclusion vulnerabilities via a misconfigured NGINX alias, as demonstrated by api-third-party/download/extdisks../etc/config/account. With this vulnerability, the attacker can bypass authentication. id: CVE-2019-18371...

Cyber Cafe Management System 1.0 - SQL Injection

Cyber Cafe Management System 1.0 contains multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of th...

Next.js Middleware Bypass

Next.js contains a critical middleware bypass vulnerability affecting versions 11.1.4 through 15.2.2. The vulnerability allows attackers to bypass middleware security controls by sending a specially crafted 'x-middleware-subrequest' header, which can lead to authorization bypass and other securit...

Jira Server Pre-Auth - Arbitrary File Retrieval (WEB-INF, META-INF)

The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check. id: CVE-2020-29453 info: name: Jira Server Pre-Auth - Arbitrary File...

WordPress AI Engine Plugin - Token Exposure

Unauthenticated sensitive information exposure in AI Engine WordPress plugin = 3.1.3 exposes bearer tokens via REST API endpoints when No-Auth URL is enabled. id: CVE-2025-11749 info: name: WordPress AI Engine Plugin - Token Exposure author: 4m3rr0r severity: critical description: | Unauthenticat...

WooCommerce Payments - Unauthorized Admin Access

An issue in WooCommerce Payments plugin for WordPress versions 5.6.1 and lower allows an unauthenticated attacker to send requests on behalf of an elevated user, like administrator. This allows a remote, unauthenticated attacker to gain admin access on a site that has the affected version of the...

Flowise <= 1.8.2 Authentication Bypass

An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker to access API endpoints as an administrator and allow them to access restricted functionality. id: CVE-2024-8181 info: name: Flowise = 1.8.2 Authentication Bypass author:...

Adobe Commerce/Magento - Customer Session Identity Switch

Adobe Commerce contains an incorrect authorization vulnerability caused by improper access control, letting attackers escalate privileges to access sensitive resources, exploit requires no user interaction. id: CVE-2026-71362 info: name: Adobe Commerce/Magento - Customer Session Identity Switch...

CVE-2023-49070

ofbiz-xmlrpc-rce CVE-2023-49070 PoC для pre-auth десериализационного RCE в Apache OFBiz XML-RPC, отслеживаемого как CVE-2023-49070: путь обхода аутентификации открывает доступ к устаревшей конечной точке /webtools/control/xmlrpc, которая десериализует контролируемый злоумышленником Java-объект,...

Exploit-AsIO-Exploit

AsIO-Exploit Обход аутентификации AsIO3.sys и proof-of-concept локального повышения привилегий...

CVE-2020-0796-POC

CVE-2020-0796 POC de pré-authentification c 2020 ZecOps, Inc. - https://www.zecops.com - Trouver les erreurs des attaquants POC pour vérifier la CVE-2020-0796 / "SMBGhost" Résultat attendu : Blue Screen Destiné uniquement à des fins éducatives et de tests dans des environnements professionnels...

flight-risk

flight-risk flight risk /flaɪt rɪsk/ — React's Flight protocol — это уровень сериализации, лежащий в основе React Server Components. CVE-2025-55182 использует ошибку десериализации в Flight для достижения RCE без аутентификации. Если ваше приложение использует RSC, это flight risk. Набор...

PT-2026-104152

Name of the Vulnerable Software and Affected Versions JSON API Auth plugin for WordPress versions prior to 3.1.3 Description An authentication bypass exists due to cached session cookie disclosure. The PI-Media/json-api parent plugin caches controller dispatch results in transients based only on...

0-click-RCE-Exploit-for-CVE-2024-50526

CVE-2024-50526 / 0-Click RCE Exploit Автор: Joshua Provoste https://x.com/JoshuaProvoste/status/1859403137435459727 Этот репозиторий содержит proof-of-concept эксплойт для CVE-2024-50526 — неавторизованной уязвимости произвольной загрузки файлов в плагине WordPress Multi Purpose Mail Form,...

0-click-RCE-Exploit-for-CVE-2024-50498

CVE-2024-50498 / 0-클릭 RCE 익스플로잇 저자: Joshua Provoste https://x.com/JoshuaProvoste/status/1858512517774868845 이 저장소는 LUBUS WP Query Console WordPress 플러그인의 인증되지 않은 코드 인젝션 취약점인 CVE-2024-50498에 대한 개념 증명 익스플로잇을 포함하며, 원격 명령 실행RCE으로 이어집니다. 스크립트 기능 이 스크립트는 취약한 REST 엔드포인트에 조작된 POST 요청을 보내 임의의 PHP 코드를 주입하고...

CVE-2025-55182

CVE-2025-55182: React2Shell - Инструментарий удаленного выполнения кода для Next.js !WARNING Этот инструмент предоставлен только для авторизованного тестирования и образовательных целей. Несанкционированный доступ к сети и кража данных незаконны. Пользователи несут ответственность за получение...