CVE-2022-1388

CVE-2022-1388 Vulnerabilidad de omisión de autenticación REST de F5 BIG-IP iControl Argumentos opcionales: -h, --help muestra este mensaje de ayuda y sale -u url, --url url URL objetivo ej:"http://127.0.0.1" -f file, --file file Objetivos en archivo ej:"ip.txt" Uso python3 CVE-2022-1388.py -u...

CVE-2026-24031

CVE-2026-24031: Dovecot SQL authentication bypass authentication + user enumeration This repository contains a proof-of-concept authentication-bypass exploit for CVE-2026-24031 , a SQL injection in Dovecot's SQL-based authentication introduced as a regression in Dovecot 2.4.0 / 3.1.0. In the test...

CVE-2026-82329

CVE-2026-82329 — JFrog Artifactory Unauthenticated Authentication Bypass Mass Exploit -red.svg Critical Authentication Bypass CVSS 9.8 — Actively Exploited in the Wild This tool is a mass exploit for CVE-2026-82329, a vulnerability that allows an unauthenticated attacker with network access to...

CVE-2024-6043

CVE-2024-6043 root@kitploit: CVE-2024-6043 CVE-2024-6043 Resumen Esta herramienta de Python explota la vulnerabilidad CVE-2024-6043, que afecta a SourceCodester Best House Rental Management System 1.0. La vulnerabilidad permite a atacantes remotos realizar Inyección SQL a través del archivo...

CVE-2025-55234

CVE-2025-55234 Esta vulnerabilidad permite a los atacantes realizar ataques de retransmisión contra el protocolo SMB Server Message Block. Si tiene éxito, puede conducir a una elevación de privilegios EoP, permitiendo esencialmente que usuarios no autorizados obtengan acceso de mayor nivel en un...

cve-2026-19900-PoC

CVE-2026-19900 LB-LINK X-PRO Authentication Bypass and RCE via null user CVE-2026-19900 Hardcored Credential and Authentication Bypass RCE via null user. Bypass via Header: Cookie:user=null Usage Build and run the script with a target host: root@kitploit: go build cve-2026-19900-PoC.go...

CVE-2025-3102

🔐 CVE-2025-3102 – Bypass de Autenticación en el Plugin SureTriggers de WordPress 🚨 CVE-2025-3102 es una vulnerabilidad crítica de bypass de autenticación que afecta al plugin de WordPress SureTriggers: All-in-One Automation Platform , que está activamente instalado en más de 100,000 sitios web...

cve-2026-43515-poc

CVE-2026-43515 — Apache Tomcat Security Constraint Bypass Exploitability verdict: confirmed exploitable. A POST request to a resource protected by a split configuration bypasses authentication entirely. The required web.xml shape is uncommon in standard deployments — see Analysis for details. Tab...

CVE-2026-5415

CVE-2026-5415 CVE-2026-5415 WP Captcha PRO Exploit de Omisión de Autenticación Autenticada...

watchTowr-vs-progress-moveit_CVE-2024-5806

CVE-2024-5806 Exploit para Progress MOVEit Transfer CVE-2024-5806. Consulta nuestra publicación en el blog en TBD. PoC en acción Consulta --help para, bueno, ayuda. Una ejecución típica debería verse así: root@kitploit: python CVE-2024-5806.py --target-ip 192.168.1.1 --target-user user2 --ppk...

CVE-2026-82967

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface...

CVE-2026-75878

IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper authentication via an unvalidated SSO header...

CVE-2026-11539

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector...

CVE-2023-2437

CVE-2023-2437 Hola, TODOS , soy RxR He codificado una herramienta para explotar la vulnerabilidad UserPro = 5.1.1 – Bypass de autenticación a Administrador El exploit obtiene el usuario del administrador , luego inicia sesión con su acceso , para crear un nuevo administrador La mejor forma de...

CVE-2016-2555

CVE-2016-2555 Exploit Este exploit se dirige a una vulnerabilidad de inyección SQL y a una vulnerabilidad de debilidad en la autenticación en ATutor 2.2.1. Al explotar estas vulnerabilidades, el atacante puede subir código malicioso para lograr ejecución remota de código RCE en el servidor...

EUVD-2026-83426

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...

CVE-2026-84075 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...

EUVD-2026-83412

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface...

CVE-2026-82967

IBM Guardium Data Protection 12.2 is affected by an authentication bypass vulnerability that allows an unauthenticated remote attacker to bypass IP-based access controls and gain access to the Guardium management interface. The flaw effectively nullifies the IP-restriction layer that would otherw...

CVE-2026-75878 IBM Sterling File Gateway is Vulnerable to Authentication Bypass

IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper authentication via an unvalidated SSO header...