CVE-2025-2825

CVE-2025-2825/CVE-2025-31161 Introduction This document presents a security analysis of vulnerability CVE-2025-2825 affecting the server component of CrushFTP — a commercial solution for file transfer and storage FTP, SFTP, HTTP/S, S3-like interfaces, etc.. The defect is classified as an...

CVE-2026-PSA-2026-00043-1

PSA-2026-00043-1 CVE-2026-PSA-2026-00043-1 Proxmox VE 7.0–8.0.3: unauthenticated, single-request root auth bypass Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក...

cve-2022-1040

Environment In Python Environment3.10 It's strongly recommended to use the virtual environment pip3 install baseproxy python3.10 will raise an AttributeError if the version of pyOpenSSLdownloaded with baseproxy is too low. Reinstalling the latest version will fix it. pip3 uninstall pyOpenSSL pip3...

RCity-CVE-2024-27198

RCity - CVE-2024-27198 RCE & Admin Account Creation & CVE-2024-27199 Auth Bypass Exploiting CVE-2024-27198 & CVE-2024-27199 RCity is a Python script that interacts with a vulnerable TeamCity server. The CVE facilitates for unauthorised admin account creation, bypassing 403's on the domain. Whilst...

CVE-2024-0012

CVE-2024-0012 CVE-2024-0012 an authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit...

CVE-2023-25136

CVE-2023-25136 OpenSSH 9.1 Vulnerability Mass Scanning and Exploitation Vulnerability Details OpenSSH is software that implements the SSH protocol, commonly used to securely connect to Linux or Windows machines for remote administration. The CVE-2023-25136 security vulnerability introduced in...

CVE-2026-65145

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure...

EUVD-2026-110824

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure...

CVE-2026-65145

The NVIDIA NeMo Agent Toolkit contains a vulnerability involving missing authentication for critical functions (CWE-306). An attacker could exploit this issue to potentially achieve code execution , escalation of privileges , data tampering , denial of service , and information disclosure . The v...

CVE-2024-55591

CVE-2024-55591 PoC This repository contains an PoC Proof of Concept for CVE-2024-55591 , a critical authentication bypass vulnerability discovered in Fortinet's FortiOS and FortiProxy products. Vulnerability Overview CVE-2024-55591 is an authentication bypass vulnerability caused by an alternativ...

cve-2024-56348

JetBrains TeamCity Authentication Bypass + RCE CVE-2024-56348 PoC 📜 Description CVE-2024-56348 is a critical authentication bypass vulnerability in JetBrains TeamCity on-premises affecting all versions prior to 2024.12. The REST API improperly handles requests to paths containing ;.jsp, allowing ...

cve-2010-4221-lab

CVE-2010-4221 — ProFTPD TELNET IAC Stack Overflow: From Patch to RCE A fully reproducible lab and a hand-written, raw-socket exploit for CVE-2010-4221 — the pre-authentication stack buffer overflow in ProFTPD's prnetiotelnetgets — built as a learning exercise in vulnerability research and exploit...

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Rails Active Storage/libvips Arbitrary File Read → SECRETKEYBASE Theft → RCE Overview CVE-2026-66066 is a critical-severity CVSS 9.5 pre-authentication arbitrary file read to remote code execution chain in Ruby on Rails Active Storage, affecting Rails 7.2.0–7.2.3...

CVE-2025-63667

CVE-2025-63667 — Vatilon-based IP Cameras Vulnerability Evidence Sanitized Summary Several Vatilon-based IP cameras observed brands: SIMICAM, KEVIEW, ASECAM issue Session-Id tokens without verifying credential correctness. This flaw allows unauthenticated attackers to obtain valid sessions and...

CVE-2018-15473

CVE-2018-15473 - SSH Username Enumeration Exploit A tool for enumerating valid usernames on vulnerable SSH servers OpenSSH 2.3 through 7.7. 📋 Vulnerability Description CVE-2018-15473 allows enumeration of existing users on SSH servers by sending malformed authentication packets. The server respon...

CVE-2023-27350

CVE-2023-27350 The tool is designed specifically for Massive Authentication Bypass Papecut MF/NG, which refers to a process of circumventing or bypassing authentication mechanisms on a large scale. Screenshot Requirements Python3.7+ Supported Os Linuxer Wingays Get start with $ git clone...

auth-bypass-CVE-2025-40554

CVE-2025-40554 – SolarWinds Web Help Desk Auth Bypass PoC shodan Query http.favicon.hash:"1895809524" Nuclei nuclei -u https://TARGET:8443 -t CVE-2025-40554.yaml nuclei -l listtarget.txt -t CVE-2025-40554.yaml pip install -r requirements.txt Usage Single target bypass + login, default...

bouncy-castle-generative-test-poc

Generative testing bouncy castle vulnerability CVE-2020-28052 Running the tests Test the vulnerable versions defaults to 1.66 $ clojure -M:test $ clojure -M:test:v1.65 Test the versions before the vuln and after the patch 1.67 $ clojure -M:test:v1.64 $ clojure -M:test:patched Links...

cve-2026-39987

cve-2026-39987 Installation • Usage • Examples I'm just trying out Go :D Btw: CVE-2026-39987 PoC: Marimo:PORT/terminal/ws REDACTED@REDACTED:$ uname -a Linux ... REDACTED@REDACTED:$ exit exit INF:normalclose websocket: close 1000 normal: Terminal session ended Custom Command -c: cve-2026-39987 -t...

By-Poloss..-..CVE-2026-15038-POC

🚨 CVE-2026-15038 — InfiniteWP Client Admin Takeover Unauthenticated Admin Account Takeover in WordPress Multisite 📋 Overview InfiniteWP Client plugin for WordPress getoption'iwpclientactionmessageid' && !$iwpmmbcore-getoption'iwpclientpublickey' Reader : Uses getsiteoption → reads from...