CVE-2025-3102

🔐 CVE-2025-3102 – SureTriggers WordPress 플러그인의 인증 우회 🚨 CVE-2025-3102 는 현재 100,000개 이상의 웹사이트 에 설치되어 활발히 사용되는 SureTriggers: All-in-One Automation Platform WordPress 플러그인에 영향을 미치는 심각한 인증 우회 취약점입니다. 취약점의 특성과 배포 규모로 인해 이 취약점은 상당한 보안 위험을 초래합니다. 🧠 취약점 요약 CVE ID : CVE-2025-3102 영향을 받는 플러그인 : SureTriggers...

Filament: Password validity disclosure for accounts denied panel access on login page

When multi-factor authentication is enabled, the login page presents the multi-factor challenge before evaluating canAccessPanel. For an account that canAccessPanel denies, submitting the correct password renders the challenge while an incorrect password returns the generic failure message,...

CVE-2026-83549

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

CVE-2026-83549

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

CVE-2026-83549

CVE-2026-83549 is a post-authentication OS Command Injection (CWE-78) in the SonicWall SMA1000 Appliance Management Console (AMC) , scored CVSS 7.8 (High) with a local attack vector. In specific conditions, a remote authenticated attacker with administrator privileges can execute arbitrary OS com...

CVE-2026-83548

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...

CVE-2026-83548

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...

CVE-2026-83548

CVE-2026-83548 is a critical (CVSS 10.0) pre-authentication SSRF vulnerability in the SonicWall SMA1000 Appliance Work Place interface, caused by an unintended alternate access path (CWE-918/CWE-441). A remote unauthenticated attacker can exploit it to access sensitive functionality and perform u...

CVE-2017-16524

CVE-2017-16524 Discovered by Omar Mezrag - 0xFFFFFF Affected Product Samsung Network Video Recorders - Web Viewer 1.0.0.193 on Samsung SRN-1670D Vendor of Product Hanwha / Samsung Security - https://www.hanwhasecurity.com/ Vulnerability type Unrestricted file upload vulnerability Attack Vector...

CVE-2026-73777

Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls...

CVE-2026-73779

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information...

CVE-2026-73764

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of...

CVE-2026-73771

An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system resources...

CVE-2026-73750

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could...

CVE-2024-49019-rayng

CVE-2024-49019の悪用: 証明機関の権限昇格 概要 CVE-2024-49019 は、Active Directory 証明書サービス AD CS の脆弱性であり、攻撃者が証明書ベースの認証を悪用して権限を昇格させることができます。このガイドでは、Certipy を使用してこの脆弱性を悪用する方法を示します。 資格情報テーブル 仮想マシン| ユーザー名| パスワード ---|---|--- Windows Server 2022| Administrator| !@windowsadmintest101 Windows Server 2022| testuser|...

CVE-2022-26923-rayng

Exploiting CVE-2022-26923: Certificate Authority Privilege Escalation Overview CVE-2022-26923 is a vulnerability in Active Directory Certificate Services AD CS that allows an attacker to escalate privileges by misusing certificate-based authentication. This guide outlines the steps to exploit thi...

tryhackme-monikerlink-writeup

TryHackMe: Moniker Link — CVE-2024-21413 Walkthrough A full walkthrough of TryHackMe's "Moniker Link" room: weaponizing CVE-2024-21413, a 2024 Microsoft Outlook vulnerability, to steal a victim's NTLMv2 hash the moment they click a link in a phishing email — no macro, no attachment, no obvious...

CVE-2026-48710

CVE-2026-48710 Principle: Starlette is an open-source, lightweight Python ASGI framework. The root cause is that when processing URL data structures, Starlette trusts the host sent by the client and directly concatenates it into the url variable for subsequent authentication handling. The raw URL...

CVE-2024-57366

CVE-2024-57366 Exploit A robust exploit for CVE-2024-57366 that allows remote code execution on vulnerable routers through MAC address validation bypass and command injection. This is a post-authorization exploit that requires the router "Remote Control" feature to be on, and the administrative...

CVE-2018-10933

CVE-2018-10933 - SSH 인증 우회 PoC 설명 CVE-2018-10933은 libssh 의 서버 측 구현에서 발생하는 인증 우회 취약점입니다. 이 결함으로 인해 공격자는 사전 인증 없이 SSH2MSGUSERAUTHSUCCESS 메시지를 전송하여 무단 액세스를 얻을 수 있습니다. 영향을 받는 시스템 SSH 서비스에 취약한 버전의 libssh 를 사용하는 모든 서버가 영향을 받습니다. 취약한 버전 libssh 0.6 이상 수정된 버전: 0.7.6 및 0.8.4 사용법 1. 스크립트의 ip를 대상의 IP 주소로 바꿉니...