EUVD-2026-82585

Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network...

DAHUA_AUTH-BYPASS-CVE-2021-33044

Simulación de explotación de Dahua Authentication Bypass PoC CVE-2021-33044 Resumen Las cámaras IP Dahua son dispositivos IoT ampliamente utilizados en sistemas de vigilancia de seguridad. Debido a que se implementan con frecuencia en redes internas o se accede desde Internet, las vulnerabilidade...

CVE-2026-69843

Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network...

APOLOGEE

🌀 APOLOGEE - Escáner de Paneles de Campo Siemens: APOLOGEE es un script de Python y un módulo de Metasploit que enumera un directorio oculto en los Controladores de Automatización BACnet Siemens APOGEE PXC todas las versiones anteriores a V3.5 y los Controladores de Automatización BACnet TALON TC...

The vulnerability of the Rsync file transfer and synchronization utility, related to bypassing authentication through spoofing, allows a perpetrator to circumvent existing security mechanisms.

The vulnerability of the Rsync file transfer and synchronization utility relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms remotely...

RHEL 10 : tomcat9 (RHSA-2026:68651)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68651 advisory. Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages...

The vulnerability of the Microsoft Authentication Library (MSAL), related to the possibility of bypassing the authentication process, allows attackers to perform spear-phishing attacks.

The vulnerability of the Microsoft Authentication Library MSAL relates to the possibility of bypassing the authentication process. Exploiting this vulnerability could allow a malicious actor to perform spear-phishing attacks remotely...

Oracle Linux 8 : tomcat (ELSA-2026-68677)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68677 advisory. - Resolves: RHEL-192806 HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-219561 Security constraint bypass via improper URL encodi...

Oracle Linux 10 : tomcat9 (ELSA-2026-68651)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68651 advisory. - Resolves: RHEL-192649 Tomcat9: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 - Resolves: RHEL-192818 Tomcat9: HTTP/2...

AlmaLinux 8 : tomcat (ALSA-2026:68677)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:68677 advisory. tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication CVE-2026-43512 tomcat-coyote: Apache Tomcat: HTTP/2 request headers not...

tomcat9 security update

1:9.0.120-1 - Resolves: RHEL-192649 Tomcat9: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 - Resolves: RHEL-192818 Tomcat9: HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-219582 Tomcat9: Insufficient documentation for EncryptInterceptor may lea...

Exch-CVE-2021-26855

Exch-CVE-2021-26855 ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability...

hikvision_CVE-2017-7921_auth_bypass_config_decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor Este archivo python descifrará el archivo de configuración utilizado por las cámaras hikvision vulnerables a CVE-2017-7921. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Descripción Omisión de Autenticación en Cámara...

CVE-2025-8730

CVE-2025-8730 – Bypass de autenticación en Belkin F9K1009/F9K1010 Autor : Byte Reaper Descripción : Este repositorio contiene un exploit para CVE‑2025‑8730, una vulnerabilidad crítica de bypass de autenticación que afecta la interfaz web de los routers Belkin F9K1009 y F9K1010. La falla reside en...

hunt-for-cve-2018-10933

Buscar y Explotar la Omisión de Autenticación de libSSH CVE-2018-10933 Guía práctica que explica cómo encontrar hosts vulnerables a la Omisión de Autenticación de libSSH CVE-2018-10933 y cómo explotarlos para obtener acceso a la terminal. Consulte la siguiente publicación de blog para obtener...

CVE-2022-46169

CVE-2022-46169 Este repositorio contiene una Prueba de Concepto PoC para CVE-2022-46169 - RCE no autenticado en Cacti = 1.2.22 encadenando una Bypass de Autenticación y una Inyección de Comandos, descrito por Sonar en esta entrada de blog. Las mismas vulnerabilidades también fueron descubiertas...

CVE-2019-6340-Drupal-8.6.9-REST-Auth-Bypass

CVE-2019-6340 / SA-CORE-2019-003 Se incluyen tres scripts para demostrar cómo Drupal 8.6.9 es vulnerable a CVE-2019-6340: createnodeviarest.py - Ejemplo de creación normal de nodo autenticado con la API REST doesnotcorrespond.py - Demostración de que la solicitud se procesa incluso sin...

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend TL;DR Oye, en este laboratorio de LetsDefend me sumergí en un zero‑day de SharePoint llamado ToolShell CVE‑2025‑53770. Básicamente, simulé un ataque real donde una petición POST maliciosa eludió la autenticación, ejecutó PowerShell para...

CVE-2026-77903

Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69843

Microsoft Fabric is affected by an authentication bypass by spoofing vulnerability that allows an unauthorized, unauthenticated attacker to elevate privileges over a network. The flaw carries a CVSS 3.1 score of 10.0 (Critical) with a changed scope and high impact to confidentiality, integrity, a...