CVE-2026-81202

A missing authentication flaw in itsourcecode Payroll System 1.0 allows an unauthenticated remote attacker to manipulate the action argument in ajax.php (the CRUD Operation Handler component), bypassing authentication on the create/read/update/delete functions. The vulnerability is scored CVSS 3....

CVE-2026-81202 itsourcecode Payroll System CRUD Operation ajax.php delete missing authentication

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

cve-2024-21413-outlook-monikerlink-lab

CVE-2024-21413 — Outlook-Moniker-Link Labor / PoC Lehrreiche Labor-Notizen und ein kleines Proof of Concept PoC, das den CVE-2024-21413 -Angriffsablauf in einer kontrollierten Umgebung Labor im TryHackMe-Stil demonstriert. ⚠️ Nur für Bildungszwecke. Nicht gegen Systeme verwenden, die dir nicht...

2FA-Bypass-using-a-Brute-Force-Attack-CVE-2025-60424

Bypass della 2FA tramite attacco di forza bruta Panoramica L'applicazione Nagios Fusion versioni 2024R1.2 e 2024R2 è vulnerabile a un attacco di forza bruta sul meccanismo di autenticazione a due fattori 2FA. In particolare, l'implementazione della 2FA non applica adeguatamente meccanismi di...

CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template

CVE-2024-51568 - CyberPanel Command Injection PoC Eine Proof-of-Concept-Umgebung und Nuclei-Vorlage zum Testen von CVE-2024-51568, einer kritischen Pre-Authentication-Command-Injection-Schwachstelle in CyberPanel. Schwachstellendetails CVE: CVE-2024-51568 Schweregrad: Kritisch CVSS 9.8 Typ:...

CVE-2023-27100

CVE-2023-27100 - Bypass della protezione anti-forza bruta di pfSense Descrizione del problema Il sistema di autenticazione cerca di essere informativo e stampa informazioni aggiuntive insieme agli indirizzi IP per identificare completamente la provenienza di un utente quando accede tramite la GUI...

CVE-2025-26198

CVE-2025-26198 - Demonstração de Injeção SQL Projeto acadêmico ENSIMAG - Segurança 3A Autores: Wail Yacoubi, Mohammed-Yassine Akhmari Data: Janeiro de 2026 Aviso Este código é intencionalmente vulnerável para fins educativos. Nunca implantar em produção. Descrição Reprodução da CVE-2025-26198:...

CVE-2025-29927

Demo della vulnerabilità Next.js CVE-2025-29927 Questo repository contiene una dimostrazione della vulnerabilità Next.js CVE-2025-29927, che interessa le versioni di Next.js 15.2.2 e precedenti. La vulnerabilità consente agli attaccanti di bypassare i controlli di autenticazione del middleware...

Libssh-server-CVE-2018-10933

libssh Authentifizierungs-Bypass-SchwachstelleCVE-2018-10933 Chinesische Version libssh ist eine plattformübergreifende C-Bibliothek, die das SSHv2-Protokoll auf Client- und Serverseite implementiert. In der serverseitigen Zustandsmaschine von libssh wurde eine Logikschwachstelle gefunden. Der...

CVE-2024-10924

Exploit para CVE-2024-10924 Plugin Really Simple Security do WordPress - Bypass de Autenticação 📌 Visão Geral CVE-2024-10924 é uma vulnerabilidade crítica de bypass de autenticação no plugin Really Simple Security para WordPress versões 9.0.0 a 9.1.1.1. Esta vulnerabilidade permite que atacantes...

CVE-2026-65641

CVE-2026-65641 is a Critical (CVSS 9.3) vulnerability in Veeam ONE affecting all version 13 builds from 13.1.0.7034 and earlier (12.x is not affected). An unauthenticated network attacker can coerce the Veeam ONE service account into performing SMB (NTLM) authentication , potentially exposing the...

CVE-2026-65641

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account...

CVE-2021-36394-Pre-Auth-RCE-in-Moodle

CVE-2021-36394-Pre-Auth-RCE-in-Moodle Introduzione alla vulnerabilità Moodle è il sistema di gestione dell'apprendimento più popolare al mondo. Inizia a creare il tuo sito di eLearning in pochi minuti! Esiste una vulnerabilità di esecuzione remota di codice non autenticata nel modulo di...

CVE-2018-10933_ssh

CVE-2018-10933 para testar este código: obtenha a versão vulnerável do libssh na página inicial: https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz descompacte e compile; em seguida, vá para o diretório de exemplos; há um servidor sshd simples usando libssh chamado: samplesshd-cb execute este...

poc-cve-2019-14287

CVE-2019-14287 का PoC अवलोकन यह sudo की भेद्यता CVE-2019-14287 को Docker कंटेनर पर पुनरुत्पादित करने वाला एक नमूना है। अभ्यास के चरण 1. docker compose up -d से कंटेनर शुरू करें 2. docker exec -it vulnerablesudoapp bash से कंटेनर में प्रवेश करें 3. whoami और id कमांड चलाकर पुष्टि करें कि आप एक...

CVE-2018-10933-libSSH-Authentication-Bypass

libSSH-Authentication-Bypass Erhalte ohne Anmeldedaten eine Shell mithilfe von CVE-2018-10933 Informationen zu CVE-2018-10933 von libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Bugfix-Release von libSSH :...

CVE-2026-77298 SeaweedFS S3 OIDC Bearer authentication bypasses IAM role trust policy

SeaweedFS is a distributed storage system for files and blobs. In versions 4.39 and earlier, the S3 API accepts an external OIDC JWT sent directly in the Authorization header and maps it to an IAM role without enforcing that role's trust policy, so a federated user can assume a role they are not...

CVE-2026-77298 SeaweedFS S3 OIDC Bearer authentication bypasses IAM role trust policy

SeaweedFS is a distributed storage system for files and blobs. In versions 4.39 and earlier, the S3 API accepts an external OIDC JWT sent directly in the Authorization header and maps it to an IAM role without enforcing that role's trust policy, so a federated user can assume a role they are not...

CVE-2026-77298

SeaweedFS is a distributed storage system for files and blobs. In versions 4.39 and earlier , the S3 API accepts an external OIDC JWT sent directly in the Authorization header and maps it to an IAM role without enforcing that role's trust policy . While the standard STS AssumeRoleWithWebIdentity ...

CVE-2024-6043

CVE-2024-6043 root@kitploit: CVE-2024-6043 CVE-2024-6043 Panoramica Questo strumento Python sfrutta la vulnerabilità CVE-2024-6043, che riguarda il SourceCodester Best House Rental Management System 1.0. La vulnerabilità consente a un attaccante remoto di eseguire un'iniezione SQL tramite il file...