CVE-2021-26088

PoC for CVE-2021-26088 written in PowerShell Description An improper authentication vulnerability in FSSO Collector may allow an unauthenticated user to bypass any firewall authentication rule and access the protected network via sending specifically crafted UDP login notification packets...

munge

MUNGE Uid 'N' Gid Emporium MUNGE MUNGE Uid 'N' Gid Emporium is an authentication service for creating and validating user credentials. It is designed to be highly scalable for use in an HPC cluster environment. It provides a portable API for encoding the user's identity into a tamper-proof...

CVE-2025-69985

CVE-2025-69985: Exploit for Authentication Bypass to RCE in FUXA ≤1.2.8 📌 General Description This repository contains a Proof of Concept PoC and detailed technical documentation about the vulnerability CVE-2025-69985 , which affects FUXA versions ≤1.2.8. The vulnerability allows an unauthenticat...

AzureRedOps

AzureRedOps A Swiss Army tool for Azure / Entra ID red teaming. Author: Mr.Un1k0d3r TrueCyber Inc Version: 0.1 Language: Python 3.12+ Overview AzureRedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID and Azure tenants. It wraps the most common red-team...

Apache-OFBiz-Authentication-Bypass

Apache OFBiz Authentication Bypass Vulnerability CVE-2023-51467 and CVE-2023-49070 This exploit script and PoC are written for an in-depth CVE analysis on vsociety. The Apache OFBiz Enterprise Resource Planning ERP system, a versatile Java-based web framework widely utilized across industries, is...

cpsniper

cPanelSniper CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection 4-stage exploit chain · Interactive WHM Shell · TRUE STABLE for 10M+ targets · Zero memory usage · stdlib only Overview cPanelSniper is a focused exploitation framework for CVE-2026-41940 , a critical...

LocalPotato_CVE-2023-21746

A local privilege escalation LPE vulnerability in Windows was reported to Microsoft on September 9, 2022, by Andrea Pierini @decoderit and Antonio Cocomazzi @splintercode. The vulnerability would allow an attacker with a low-privilege account on a host to read/write arbitrary files with SYSTEM...

CVE-2022-40684

CVE-2022-40684 CVSS score: 9.6 POC for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Vulnerable Products FortiOS versions between 7.0.0 – 7.0.6 and 7.2.0 – 7.2.1 FortiProxy versions between 7.0.0 – 7.0.6 and version 7.2.0 FortiSwitchManager versions 7.0...

cve-2022-25640-exploit

Exploiting CVE-2022-25640 using scapy See CVE-2022-25640.ipynb. CVE-2022-25640 is a vulnerability in wolfSSL before 5.2. It allows a client to circumvent mututation authentication in TLS 1.3 connections...

CVE-2023-34051

CVE-2023-34051 CVE-2023-34051 is an authentication bypass that bypasses the patch for VMSA-2023-0001. VMSA-2023-0001 for vRealize Log Insight includes the following CVEs: VMware vRealize Log Insight Directory Traversal Vulnerability CVE-2022-31706 VMware vRealize Log Insight broken access control...

poc_cve-2026-42208

CVE-2026-42208 — LiteLLM Pre-Authentication SQL Injection A lab environment for reproducing and detecting CVE-2026-42208 , a critical pre-authentication SQL injection vulnerability in LiteLLM where unsanitized Bearer tokens reach a raw PostgreSQL query. Vulnerability Overview Field| Details ---|-...

CVE-2026-16232

CVE-2026-16232 Overview A proof-of-concept script to exploit CVE-2026-16232, an authentication bypass via the SmartConsole login process using an application token. This affects Check Point Security Management Server and Multi-Domain Security Management Server MDS. For a full technical analysis,...

CVE-2022-1040

CVE-2022-1040 : Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass This vulnerability allows an attacker to gain unauthorized access to the firewall management space by bypassing authentication ☕️ Live : ....... updated...

fitness-app

Fitbit Open Source Android App This app is based on the work of Jiska Classen, Matthias Hanreich, Steffen Kreis, Tobias Krichel, Johannes Riedel and Sven Ströher. Features Scan for BLE Fitbit devices Authenticate against Fitbit server like the original app Obtain authentication credentials from t...

threat-intel-brief-cve-2026-42208-litellm

Threat Intelligence Brief - CVE-2026-42208: BerriAI LiteLLM SQL Injection CVE: CVE-2026-42208 GHSA: GHSA-r75f-5x8p-qvmc CVSS Score: 9.3 Critical Affected Software: BerriAI LiteLLM versions = 1.81.16, 1.83.7 Fixed Version: 1.83.7-stable released April 19, 2026 CISA KEV Added: May 08, 2026 Sources:...

CVE-2025-53770

SharePoint ToolPane RCE Exploit Security research toolkit for testing SharePoint ToolPane vulnerabilities Overview • Features • Getting started • Usage • Project structure This repository contains proof-of-concept exploits and analysis tools for the SharePoint ToolPane vulnerability CVE-2025-5377...

accfly

How secure is your "security" camera? Executive summary In the beginning of 2020, at my former workplace, I had a chance to take part in an internal pwn2own style event. There were several targets available, but I was interested the most in Accfly Wireless Security camera. Unfortunately I had not...

CVE-2025-29927

CVE-2025-29927 - Next.js Middleware Authentication Bypass Advanced Bypass 🔥 Overview An advanced PoC for CVE-2025-29927 , allowing authentication bypass in Next.js Middleware by manipulating specific headers. This template enhances WAF evasion and security bypass techniques. 🚀 Features ✅...

CVE-2026-20127

CVE-2026-20127 Overview An exploit for the Cisco Catalyst SD-WAN Controller authentication bypass vulnerability, CVE-2026-20127. This exploit targets the vbondprocchallengeackack handler. It sends a forged CHALLENGEACKACK message msgtype=10 with an attacker-controlled verifystatus=1 byte, directl...

BlackBerryC2

BlackBerryC2 2.0.0-beta BlackBerryC2 is an encrypted remote administration and C2 framework designed exclusively for educational use, security research, and controlled laboratory environments. The project demonstrates how to build a custom command-and-control server with application-layer...