CVE-2023-54391 Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter

Proxmox Virtual Environment VE 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-control before 8.0.4 that allows unauthenticated attackers to authenticate as any existing enabled user without a configured second factor by supplying an arbitrary tfa-challenge value ...

CVE-2023-54391

Proxmox Virtual Environment (VE) 7.0 through 8.0 contains a critical authentication bypass in libpve-access-control before 8.0.4 . By supplying an arbitrary value in the tfa-challenge parameter of the access ticket API endpoint, unauthenticated attackers can skip password verification entirely an...

CVE-2025-31161

CVE-2025-31161 CrushFTP 서버의 일부 버전에서 인증 우회 취약점...

BUK_TS_KILLER

BUKTSKILLER BUK-TS エクスプロイト RCE 認証バイパス - CVE-2026-12183: 1. 任意のパスワードを入力する 2. レスポンスをインターセプトする 3. 「userid=」を書き込む 4. バイパス成功 BDU:2025-13914 および CVE-2026-3843 向け公開エクスプロイト...

CVE-2022-4361

CVE-2022-4361 설명 이 저장소는 CVE-2022-4361에 대한 PoC를 포함합니다. 모든 크레딧은 발견의 원저자인 mulliken에게 돌아갑니다; 중요 : 이 PoC는 SAML 인증 프로토콜의 AssertionConsumerServiceURL 값에 대한 경우를 다루지 않으므로 완전하지 않습니다. 현재는 OIDC 경우만 다룹니다. 단계 1. 이 저장소를 클론합니다. root@kitploit: git clone https://github.com/faccimatteo/CVE-2022-4361.git && cd...

CVE-2023-27350

PaperCut NG/MG RCE CVE-2023-27350 CVE-2023-27350을 위한 간편한 Bash 익스플로잇입니다. 이 스크립트는 PaperCut 프린터 스크립팅 엔진을 통한 인증 우회, 환경 준비 및 명령어 주입을 자동화합니다. 시각적 증명 기본 rce: 리버스 셸 트리거: 빠른 시작 root@kitploit: Clone the repository git clone https://github.com/dezso-dfield/CVE-2023-27350.git Enter the directory cd...

Filament: Multi-factor authentication (app) codes can still be used after a newer code has been used

A flaw in the handling of one-time codes for app-based multi-factor authentication allows a previously issued code to be used after a newer code has already been accepted. This issue does not affect email-based MFA. Submitting the exact same code twice was already prevented, but any other code...

CVE-2025-3102

🔐 CVE-2025-3102 – SureTriggers WordPress 플러그인의 인증 우회 🚨 CVE-2025-3102 는 현재 100,000개 이상의 웹사이트 에 설치되어 활발히 사용되는 SureTriggers: All-in-One Automation Platform WordPress 플러그인에 영향을 미치는 심각한 인증 우회 취약점입니다. 취약점의 특성과 배포 규모로 인해 이 취약점은 상당한 보안 위험을 초래합니다. 🧠 취약점 요약 CVE ID : CVE-2025-3102 영향을 받는 플러그인 : SureTriggers...

Filament: Password validity disclosure for accounts denied panel access on login page

When multi-factor authentication is enabled, the login page presents the multi-factor challenge before evaluating canAccessPanel. For an account that canAccessPanel denies, submitting the correct password renders the challenge while an incorrect password returns the generic failure message,...

CVE-2026-83549

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

CVE-2026-83549

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

CVE-2026-83549

CVE-2026-83549 is a post-authentication OS Command Injection (CWE-78) in the SonicWall SMA1000 Appliance Management Console (AMC) , scored CVSS 7.8 (High) with a local attack vector. In specific conditions, a remote authenticated attacker with administrator privileges can execute arbitrary OS com...

CVE-2026-83548

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...

CVE-2026-83548

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...

CVE-2026-83548

CVE-2026-83548 is a critical (CVSS 10.0) pre-authentication SSRF vulnerability in the SonicWall SMA1000 Appliance Work Place interface, caused by an unintended alternate access path (CWE-918/CWE-441). A remote unauthenticated attacker can exploit it to access sensitive functionality and perform u...

CVE-2017-16524

CVE-2017-16524 발견자 Omar Mezrag - 0xFFFFFF 영향을 받는 제품 Samsung Network Video Recorders - Web Viewer 1.0.0.193 on Samsung SRN-1670D 제품 공급업체 Hanwha / Samsung Security - https://www.hanwhasecurity.com/ 취약점 유형 무제한 파일 업로드 취약점 공격 벡터 root@kitploit: AccessVector AV: Network User Interaction UI: None...

CVE-2026-73777

Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls...

CVE-2026-73779

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information...

CVE-2026-73764

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of...

CVE-2026-73771

An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system resources...