CVE-2026-54617

GravitLauncher LaunchServer (open-source Minecraft launcher) is vulnerable to an unauthenticated path traversal in its HTTP file server (FileServerHandler.channelRead0) on port 9274 , which is enabled by default and bound to 0.0.0.0. The root cause is a substring(1) that strips the first characte...

CVE-2026-54617 GravitLauncher: Unauthenticated path traversal in LaunchServer FileServerHandler

GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an unauthenticated remote actor can send a raw HTTP request target without a leading slash to the default LaunchServer file server on port 9274. FileServerHandler.channelRead0 in...

CVE-2025-9485

Exploit: Bypass de Autenticación mediante JWT sin Firma alg: none 1 Forjar un JWT sin firma reclamando el correo del administrador root@kitploit: TOKEN=$node -e ' function b64us return Buffer.froms.toString"base64" .replace/+/g,"-" .replace///g,"" .replace/=+$/,"" const header =...

CVE-2026-54239

FaustWP (a WordPress plugin within the Faust.js headless WordPress toolkit) contains an authentication bypass prior to version 1.8.11 . The root cause is in WPE\FaustWP\Auth\encrypt() and decrypt() (in plugins/faustwp/includes/auth/functions.php): the 16-byte initialization vector is excluded fro...

CVE-2026-54239 FaustWP — Authentication Bypass via Initialization Vector Modification in Token Envelope

Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin authenticates only the ciphertext in its token envelope and excludes the 16-byte initialization vector from the HMAC in WPE\FaustWP\Auth\encrypt and WPE\FaustWP\Auth\decrypt in...

CVE-2026-1729-PoC-AdForest-WordPress-Authentication-Bypass

CVE-2026-1729 - AdForest WordPress 认证绕过 PoC 描述 针对 CVE-2026-1729（PoC）的简易概念验证 - AdForest WordPress 主题中的认证绕过漏洞。 由 f3ds cr3w est 2oo2 编写 博客 功能特性 ✅ 无需凭证即可直接获取管理员访问权限 ✅ 适用于生产环境中的 WordPress 实例 ✅ 无需配置 Docker 环境 ✅ 简单的命令行界面 ✅ 会话持久化 要求 Python 3.6+ requests 库 安装 root@kitploit: pip install requests 用法 基本用法...

CVE-2025-31161

CVE-2025-31161 Advertencia: Esta herramienta es solo para pruebas de seguridad autorizadas y fines educativos. El uso no autorizado contra sistemas para los que no tenga permiso explícito de prueba es ilegal. Resumen Esta herramienta es una prueba de concepto PoC para CVE-2025-31161 , una...

GHSA-FJ9W-C36G-H5X8 AsyncHttpClient doesn't verify SCRAM and Digest mutual-authentication responses

Impact For SCRAM, and for Digest with mutual authentication, the client computes the server's verification value the SCRAM ServerSignature, or the Digest rspauth but does not act on the result. If the value is present and does not verify, the client only logs it and still delivers the response to...

CVE-2026-85716

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, processScramAuthenticationInfo and processAuthenticationInfo compute the SCRAM ServerSignature or Digest rspauth verification result but log...

CVE-2025-13390

CVE-2025-13390 WP Directory Kit WordPress 的 WP Directory Kit 插件在所有版本（包括 1.4.4）中均存在认证绕过漏洞，原因是wdkgenerateautologinlink 函数中的认证算法实现不正确。 该漏洞源于使用了密码学上弱的令牌生成机制。这使 未认证攻击者 能够通过可预测的令牌，利用自动登录端点获得管理员访问权限，并 完全接管网站 。 CNA： Wordfence 基础评分： 10.0 严重 向量： CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H ⚡ 漏洞利用特点 Cookie...

EUVD-2026-82336

NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.6, network-reachable HTTP transport requests to /mcp that omit x-netlicensing-api-key, Authorization: Bearer, and the apikey...

CVE-2026-85716 AsyncHttpClient: SCRAM and Digest mutual-authentication responses are not verified

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, processScramAuthenticationInfo and processAuthenticationInfo compute the SCRAM ServerSignature or Digest rspauth verification result but log...

CVE-2026-85716

CVE-2026-85716 affects the AsyncHttpClient (AHC) Java library in versions 3.0.8 through 3.0.12 . The functions processScramAuthenticationInfo and processAuthenticationInfo compute the SCRAM ServerSignature or Digest rspauth verification result but, upon a mismatch, only log the discrepancy and st...

CVE-2026-85716 AsyncHttpClient: SCRAM and Digest mutual-authentication responses are not verified

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, processScramAuthenticationInfo and processAuthenticationInfo compute the SCRAM ServerSignature or Digest rspauth verification result but log...

CVE-2026-85716

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, processScramAuthenticationInfo and processAuthenticationInfo compute the SCRAM ServerSignature or Digest rspauth verification result but log...

CVE-2026-91039

Authentication Bypass by Spoofing vulnerability in team-alembic ashauthentication allows an attacker who operates one identity-provider connection of a dynamicoidc strategy to be signed in as a local user established through a different connection. The strategy is meant to keep each connection in...

CVE-2026-86863

pgAdmin 4's Webserver authentication source is intended to accept an identity asserted by the web server or reverse proxy in front of pgAdmin, delivered through the WSGI/CGI environment. WebserverAuthentication.getuser read config.WEBSERVERREMOTEUSER from request.environ and, when that returned...

tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

A flaw was found in Apache Tomcat. When DIGEST authentication was configured, any user not known to the configured Realm would be authenticated if they presented the password "null". This allows a remote attacker to bypass security controls...

tomcat: Apache Tomcat: Authentication bypass via missing critical step in JNDIRealm GSSAPI configuration

A flaw was found in Apache Tomcat. When the JNDIRealm was configured to authenticate binds using GSSAPI, an attacker could exploit a missing critical step in the authentication process. This allowed the attacker to bypass password verification and authenticate without providing the correct...

Important: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...