CVE-2025-9485

Exploit: Authentifizierungsumgehung via unsigniertes JWT alg: none 1 Ein unsigniertes JWT mit der Admin-E-Mail-Adresse erstellen root@kitploit: TOKEN=$node -e ' function b64us return Buffer.froms.toString"base64" .replace/+/g,"-" .replace///g,"" .replace/=+$/,"" const header = b64uJSON.stringify...

DAHUA_AUTH-BYPASS-CVE-2021-33044

Simulation des Dahua Authentication-Bypass-PoC CVE-2021-33044 Übersicht Dahua-IP-Kameras sind IoT-Geräte, die häufig in Sicherheitsüberwachungssystemen eingesetzt werden. Da sie oft in internen Netzwerken oder über das Internet erreichbar sind, können Sicherheitslücken bei IP-Kameras schwerwiegen...

CVE-2025-29927-Proof-of-Concept

Procedura dettagliata Passo 1 5 min Suggerimento Quali servizi di rete sono esposti dal target? — — — Soluzione root@kitploit: kali@kali:$ nmap kali@kali:$ nmap -sC -sV -p Passo 2 5 min Suggerimento 1 La pagina di destinazione mostra solo una pagina di login, ma i server web spesso espongono...

FORTIWEB_CVE-2025-64446-58034

Simulazione di sfruttamento di FortiWeb CVE-2025-64446 e CVE-2025-58034 Nota: Questo documento ha solo scopo didattico e di ricerca sulla sicurezza. Non utilizzare per attaccare sistemi senza autorizzazione. 1. Panoramica FortiWeb è un dispositivo Web Application Firewall WAF utilizzato per...

cups-script-final-project

Cosa fa Strumento di rilevamento in due fasi per CVE-2025-58060, vulnerabilità di bypass dell'autenticazione nel Common UNIX Printing System CUPS. Invece di affidarsi ai soli numeri di versione, lo strumento combina un controllo della versione basato sul banner con una sonda attiva di bypass...

CVE-2025-69295

CVE-2025-69295 — Vulnerabilità di Blind SQL Injection in TeconceTheme Coven Core CVE-2025-69295 è una vulnerabilità di SQL Injection che colpisce il componente Coven Core del tema WordPress TeconceTheme Coven Core. La vulnerabilità esiste a causa di una neutralizzazione impropria dell'input forni...

CVE-2018-15473

CVE-2018-15473 - Exploit di enumerazione degli username SSH Uno strumento per enumerare gli username validi su server SSH vulnerabili OpenSSH 2.3 fino alla 7.7. 📋 Descrizione della vulnerabilità La CVE-2018-15473 consente l'enumerazione degli utenti esistenti sui server SSH inviando pacchetti di...

React2Shell-PoC-CVE-2025-55182

Simulazione dell'attacco React2Shell CVE-2025-55182 Nota: Questo documento è solo a scopo educativo e di ricerca sulla sicurezza. Non utilizzare per attaccare sistemi senza autorizzazione. 1. Panoramica CVE-2025-55182, nota anche come React2Shell, è una grave vulnerabilità di Remote Code Executio...

CVE-2025-31161

CVE-2025-31161 - Exploração de Bypass de Autenticação CrushFTP PoC CVE-2025-31161 - Bypass de Autenticação CrushFTP 📌 Detalhes do CVE ID : CVE-2025-31161 Tipo : Bypass de Autenticação Fornecedor : CrushFTP Impacto : Permite que atacantes não autenticados forjem um token CrushAuth válido e criem u...

CVE-2026-81202

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

CVE-2026-75329

The Netty configuration distribution service port 8283 of super-diamond-server = 1.3.3 has no authentication mechanism. Attackers can directly obtain the full configuration of any project including database passwords, API keys, etc. by sending a TCP request without any credential...

CVE-2026-65641

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account...

Exch-CVE-2021-26855

Exch-CVE-2021-26855 ProxyLogon ist der formell generische Name für CVE-2021-26855, eine Sicherheitslücke auf Microsoft Exchange Server, die es einem Angreifer ermöglicht, die Authentifizierung zu umgehen und sich als Admin auszugeben. Wir haben diesen Fehler auch mit einer weiteren post-auth...

CVE-2025-10294

Exploit: Bypass de Autenticação via ownidsharedsecret Vazio Falsificação de JWT 1 Forje um JWT válido usando uma chave HMAC vazia root@kitploit: SUB= SUB="$SUB" python3 - /tmp/jwt.txt import base64, hmac, hashlib, json, time, os b64u = lambda b: base64.urlsafeb64encodeb.rstripb'='.decode header =...

CVE-2026-81202

A missing authentication flaw in itsourcecode Payroll System 1.0 allows an unauthenticated remote attacker to manipulate the action argument in ajax.php (the CRUD Operation Handler component), bypassing authentication on the create/read/update/delete functions. The vulnerability is scored CVSS 3....

CVE-2026-81202 itsourcecode Payroll System CRUD Operation ajax.php delete missing authentication

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

CVE-2026-65641

CVE-2026-65641 is a Critical (CVSS 9.3) vulnerability in Veeam ONE affecting all version 13 builds from 13.1.0.7034 and earlier (12.x is not affected). An unauthenticated network attacker can coerce the Veeam ONE service account into performing SMB (NTLM) authentication , potentially exposing the...

CVE-2026-65641

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account...

CVE-2026-77298 SeaweedFS S3 OIDC Bearer authentication bypasses IAM role trust policy

SeaweedFS is a distributed storage system for files and blobs. In versions 4.39 and earlier, the S3 API accepts an external OIDC JWT sent directly in the Authorization header and maps it to an IAM role without enforcing that role's trust policy, so a federated user can assume a role they are not...

CVE-2026-77298 SeaweedFS S3 OIDC Bearer authentication bypasses IAM role trust policy

SeaweedFS is a distributed storage system for files and blobs. In versions 4.39 and earlier, the S3 API accepts an external OIDC JWT sent directly in the Authorization header and maps it to an IAM role without enforcing that role's trust policy, so a federated user can assume a role they are not...