tomcat: Apache Tomcat: Authentication bypass via missing critical step in JNDIRealm GSSAPI configuration

A flaw was found in Apache Tomcat. When the JNDIRealm was configured to authenticate binds using GSSAPI, an attacker could exploit a missing critical step in the authentication process. This allowed the attacker to bypass password verification and authenticate without providing the correct...

tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

A flaw was found in Apache Tomcat. When DIGEST authentication was configured, any user not known to the configured Realm would be authenticated if they presented the password "null". This allows a remote attacker to bypass security controls...

Important: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

tomcat: Apache Tomcat: Authentication bypass via missing critical step in JNDIRealm GSSAPI configuration

A flaw was found in Apache Tomcat. When the JNDIRealm was configured to authenticate binds using GSSAPI, an attacker could exploit a missing critical step in the authentication process. This allowed the attacker to bypass password verification and authenticate without providing the correct...

tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

A flaw was found in Apache Tomcat. When DIGEST authentication was configured, any user not known to the configured Realm would be authenticated if they presented the password "null". This allows a remote attacker to bypass security controls...

tomcat: Apache Tomcat: Authentication bypass via missing critical step in JNDIRealm GSSAPI configuration

A flaw was found in Apache Tomcat. When the JNDIRealm was configured to authenticate binds using GSSAPI, an attacker could exploit a missing critical step in the authentication process. This allowed the attacker to bypass password verification and authenticate without providing the correct...

Important: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

CVE-2026-21962

🚨 CVE-2026-21962 - 严重身份验证绕过漏洞 🧾 摘要 🔥 一个最高严重级别（10.0）的漏洞，可实现对 Oracle 中间件系统的 未认证远程访问。 root@kitploit: CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category : Authentication Bypass CWE : CWE-284 Improper Access Control 🧠 技术分析 root@kitploit: - Authentication boundary is improperly...

CVE-2026-85500

Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an unconfirmed user to obtain a session, defeating a mandatory email confirmation requirement. AshAuthentication.Strategy.Password.Actions.checkuser/2 decides whether the attribute named by...

Microsoft Fabric Elevation of Privilege Vulnerability

Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network...

Microsoft Dataverse Elevation of Privilege Vulnerability

Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-85500 `require_confirmed_with` is not enforced on the action and fails open on an unreadable attribute in AshAuthentication

Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an unconfirmed user to obtain a session, defeating a mandatory email confirmation requirement. AshAuthentication.Strategy.Password.Actions.checkuser/2 decides whether the attribute named by...

EUVD-2026-81487

Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an unconfirmed user to obtain a session, defeating a mandatory email confirmation requirement. AshAuthentication.Strategy.Password.Actions.checkuser/2 decides whether the attribute named by...

CVE-2025-13390

WP Directory Kit = 1.4.4 - Omisión de Autenticación para Escalada de Privilegios mediante Toma de Cuenta Resumen El plugin WP Directory Kit para WordPress versión 1.4.4 y anteriores contiene una omisión de autenticación en su funcionalidad de inicio de sesión automático. La vulnerabilidad permite...

cve-2025-29927-nextjs

ヒマラヤテック管理パネル — CVE-2025-29927 デモ 警告: このアプリケーションは意図的に脆弱にしています。教育目的および許可されたセキュリティ研究目的にのみ使用してください。公開サーバーにデプロイしないでください。 このデモについて このアプリは、Next.js のミドルウェアにおける重大な認証バイパス脆弱性 CVE-2025-29927 CVSS 9.1 を実演します。架空の企業「Himalaya Tech Pvt. Ltd.」の現実的な企業管理パネルを模擬しており、バイパスの影響を視覚的にわかりやすく示しています。 表示されるすべての従業員記録、API...

CVE-2026-92914

AVideo LoginControl contains an authentication bypass vulnerability in the PGP second factor verification that compares challenge responses using loose equality against an uninitialized session variable. Attackers with a victim's password can bypass the second factor by sending a parameter-less G...

CrushFTP-AS2-Bypass-Research-CVE-2025-54309

CrushFTP AS2 身份验证绕过研究 ⚠️ 重要提示： 该漏洞已于 2025 年 11 月被 CrushFTP 修复。此研究仅出于教育和防御目的 发布。 📝 注意： 本研究基于与 CVE-2025-54309 相似的漏洞模式。确切的 CVE 编号可能不同。这是一项在受控家庭实验室环境中进行的独立安全研究。 关于本研究 本仓库记录了 CrushFTP 服务器中一个严重身份验证绕过漏洞 ，该漏洞通过 AS2（适用性声明 2）头部操作实现完全管理权限。该漏洞无需身份验证 ，且可通过单个 HTTP 请求利用。 关键点： 研究在授权家庭实验室 中进行（2025 年 3 月至 7 月）...

Patch-the-Path-CVE-2025-55234-Detection-Defense

Patch-the-Path-CVE-2025-55234 检测与防御 本手册概述了针对 CVE-2025-55234（一个严重的 Windows SMB 权限提升漏洞）的检测、遏制和修复策略。 作者：Mark Mallia 引言 在当今不断变化的网络风险格局中，从低权限立足点向内部网络上的 SYSTEM 级别访问的跃迁已不再是单纯的理论威胁——这是成熟攻击者的标志性动作。新披露的 Windows NTLM 身份验证漏洞 CVE‑2025‑54918 正是这种危险的例证：远程攻击者可以利用 NTLM 协商过程中的缺陷绕过 Kerberos 验证并获取完全管理权限，且无需触发用户交互。...

CVE-2020-14882

WebLogic CVE-2020-14882 / CVE-2020-14883 测试脚本 该项目提供了一个简单的Bash脚本，用于测试Oracle WebLogic服务器是否存在认证绕过漏洞 （CVE-2020-14882）及相关远程代码执行向量 （CVE-2020-14883）。 脚本向WebLogic控制台的路径遍历端点发送POST请求：/console/images/%252E%252E%252Fconsole.portal 输入包含协议和端口的完整URL。 脚本会附加遍历路径并发送POST请求。 运行前请修改脚本中的IP或主机名，并设置监听器以接收curl请求，可使用Burp...

CVE-2025-9209

🍔 RestroPress – 在线订餐系统 3.0.0 - 3.1.9.2 🛡️ CVE-2025-9209.py — 批量自动利用与提取工具 ⚠️ 漏洞概述 RestroPress – 在线订餐系统 版本 3.0.0 至 3.1.9.2 存在 未认证信息泄露 ，导致 通过伪造 JWT 绕过认证 。 该插件暴露了用户的私有令牌和 API 密钥数据，允许未认证攻击者伪造 JWT 令牌，从而完全访问其他用户（包括管理员）。 CVE 编号： CVE-2025-9209 CVSS 评分： 9.8（严重） 影响： 无需事先认证即可完全接管账户。 🚀 脚本功能...