208013 matches found
SecureConnect-Auth-Bypass
ConnectWise SecureConnect Authentication Bypass Vulnerability An exploit proof of concept for ConnectWise SecureConnect authentication bypass vulnerability. Blog Post More details here: https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/ Usage Running...
NotCVE-2026-0010
Summary Vulnerability: Unauthenticated IPC Local Privilege Escalation to SYSTEM via Barrier Daemon TCP Port 24801 Vendor: debauchee Barrier project Product: Barrier 2.4.0 final release, 2021-11-01 CWE: CWE-306: Missing Authentication for Critical Function Description Barrier's Windows service...
CVE-2020-1472
CVE-2020-1472 CVE-2020-1472 - Zero Logon vulnerability Python implementation Description A Python script which uses the Impacket library to test for CVE-2020-1472 - Zerologon vulnerability credits to Secura research. The flaw stems from the Netlogon Remote Protocol, available on Windows domain...
ImpossibleTravelLogAnalysis
Impossible Travel Log Analysis by NCC Group About Basic log analysis tool to detect impossible travel via IP address geographic information Expected Data Format A CSV file with the following headers When,User,Event,IP With the following format 2019-04-09...
CVE-2024-28000
CVE-2024-28000 - LiteSpeed Cache Privilege Escalation PoC !WARNING This repository is intended for educational and research purposes only. Use the provided PoC exclusively on systems you own or have explicit permission to test. Unauthorized access , exploitation, or misuse of any material in this...
CVE-2024-54085
CVE-2024-54085: Critical Authentication Bypass Vulnerability in AMI MegaRAC BMC Affected Systems The vulnerability affects a wide range of server hardware from major manufacturers: AMI MegaRAC SPx : versions 12.x up to 12.7 and 13.x up to 13.5 HPE Cray XD670 : versions 1.09, 1.13, 1.17 Asus...
Exch-CVE-2021-26855_Priv
Exch-CVE-2021-26855 ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability...
cve-2025-32433-erlang_ssh_rce_reproduction
CVE-2025-32433: Erlang/OTP SSH Daemon Pre-Auth Remote Code Execution CVSS Score: 10.0 CRITICAL Status: Actively Exploited in the Wild Disclosure: June 2025 Overview CVE-2025-32433 is a critical unauthenticated remote code execution vulnerability in the SSH server implementation ssh application...
CVE-2022-1388
CVE-2022-1388 F5 BIG-IP Unauthenticated RCE Vulnerability F5 BIG-IP iControl RESTθΊ«δ»½ιͺθ―η»θΏRCEζΌζ΄ fofa keywords: title="BIG-IP- Redirect" usage attack $ python3 cve-2022-1388.py -t https://203.xxx.xxx.xxx + https://203.xxx.xxx.xxx is vulnerable input your command:...
CVE-2026-39987_POC
PoC β CVE-2026-39987 Β· Marimo Pre-Auth RCE CVSS 4.0: 9.3 Critical Β· AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H Affects: marimo 2 calls to validateauth. terminal.py - 0 @requires, 0 validateauth. -- the flaw. The AuthBackend middleware protects HTTP and the /ws websocket, but /terminal/ws accepts the...
CVE-2026-10795
CVE-2026-10795 CVE-2026-10795 β UpdraftPlus Authentication Bypass CVE-2026-10795 β UpdraftPlus Authentication Bypass PoC β οΈ Disclaimer: This repository is for educational purposes only. Only use this on systems you own or have explicit permission to test. The author is not responsible for any...
ProxyLogon
ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...
CVE-2025-13390
CVE-2025-13390 WP Directory Kit The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.4 due to incorrect implementation of the authentication algorithm in thewdkgenerateautologinlink function. This is due to the feature using a...
NextJS-CVE-2025-29927
Here's a clean and informative README.md for your GitHub repo that explains it's a vulnerable Next.js application for CVE-2025-29927 and includes a link to your setup YouTube video: π NextJS-CVE-2025-29927 - Vulnerable Demo Application This is a vulnerable Next.js application that demonstrates...
cve-2026-41940-PoC-Linux
CVE-2026-41940 PoC - Linux/Termux Compatible Linux and Termux compatible version of the CVE-2026-41940 cPanel/WHM authentication bypass exploit. Installation For Termux Android: pkg update && pkg upgrade pkg install python3 python3-pip git git clone...
CVE-2025-58443
CVE-2025-58443 exploit POC for https://github.com/FOGProject/fogproject which is authentication bypass leads to dump DB that include full DB dump, that include clear text password and users and admin password hash. vulnerable version : 1.5.10.1673 below a script that will exploit the vulnerabilit...
gpgsm-cve-2026-57062-cms-gcm-short-tag
gpgsm CVE-2026-57062: CMS AES-GCM short tag USN-8720-1 GnuPG's gpgsm the S/MIME and CMS tool derives the authentication tag length it verifies from the mac OCTET STRING in a CMS AuthEnvelopedData RFC 5083 AES-256-GCM message, and libgcrypt accepts tags as short as 4 bytes. RFC 5084 requires at...
CVE-2026-23918-Double-free-Apache-httpd-mod_http2
CVE-2026-23918 - Apache httpd modhttp2 PoC This repository contains a proof-of-concept implementation written in Go for a pre-authentication memory corruption scenario affecting Apache httpd with modhttp2. The code in this repository demonstrates a spray-and-trigger approach against a vulnerable...
CVE-2026-36851
CVE-2026-36851 Path traversal / arbitrary file read in UnPoller v2.33.0 via the file:// password prefix. File contents are read from disk and transmitted to the configured UniFi controller URL during authentication. | ---|--- CVE| CVE-2026-36851 Product| UnPoller v2.33.0 earlier versions likely...
CVE-2019-8978
CVE-2019-8978 Improper Authentication CWE-287 in Ellucian Banner Web Tailor and Banner Enterprise Identity Services Author: Katie Mulliken [email protected] Thanks to: Carnegie Mellon University CERT Coordination Center Information Date Found: Dec. 17, 2018 Vendor: Ellucian Company L.P. Vend...