CVE-2020-14882

WebLogic CVE-2020-14882 / CVE-2020-14883 테스트 스크립트 이 프로젝트는 Oracle WebLogic 서버가 인증 우회CVE-2020-14882 및 관련 원격 코드 실행 벡터CVE-2020-14883에 취약한지 테스트하기 위한 간단한 Bash 스크립트를 제공합니다. 스크립트는 WebLogic Console 경로 탐색 엔드포인트로 POST 요청을 보냅니다: /console/images/%252E%252E%252Fconsole.portal 프로토콜과 포트를 포함한 전체 URL을 전달하세요. 스크립트가...

CVE-2026-84483

WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass.json.php . An unauthenticated attacker can forge valid HMAC tokens by computing hash_hmac with the site's public base URL as the key and the current time as the message. With forged tokens, an attacker...

CVE-2026-84479

WWBN AVideo (version e01e41ecc and earlier) contains an authentication bypass vulnerability where three login-time security controls rely solely on the client-supplied User-Agent header. The isAVideoEncoder() and isAVideoMobileApp() checks match HTTP_USER_AGENT against hardcoded literals ("AVideo...

CVE-2026-84480 WWBN AVideo Password Recovery Token Expiration Bypass

WWBN AVideo fails to validate password recovery token expiration in userRecoverPassSave.json.php, allowing attackers to use expired tokens to reset account passwords indefinitely. Attackers who obtain a recovery token can use it at any time to change the target account's password and gain full...

CVE-2026-84479 WWBN AVideo Authentication Bypass via User-Agent Header

WWBN AVideo current e01e41ecc and earlier makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder/isAVideoMobileApp checks match HTTPUSERAGENT against a hardcoded literal "AVideoEncoder"/"AVideoMobileApp" with no IP check or shared...

CVE-2026-84479 WWBN AVideo Authentication Bypass via User-Agent Header

WWBN AVideo current e01e41ecc and earlier makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder/isAVideoMobileApp checks match HTTPUSERAGENT against a hardcoded literal "AVideoEncoder"/"AVideoMobileApp" with no IP check or shared...

CVE-2026-84480

WWBN AVideo fails to validate password recovery token expiration in userRecoverPassSave.json.php , allowing an attacker who obtains a recovery token to use it indefinitely to reset a target account's password and gain full account access . The vulnerability is network-exploitable with low complex...

CVE-2026-84476 WWBN AVideo Authentication Bypass via X-Real-IP Header

WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For headers, allowing attackers to spoof the client address used by enforceRateLimit. Attackers can rotate the header value per request to bypass login rate limiting and perform unlimited credential guessing...

CVE-2026-84476 WWBN AVideo Authentication Bypass via X-Real-IP Header

WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For headers, allowing attackers to spoof the client address used by enforceRateLimit. Attackers can rotate the header value per request to bypass login rate limiting and perform unlimited credential guessing...

CVE-2026-84476

WWBN AVideo contains an authentication bypass flaw in its login rate limiting mechanism. The application fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For headers, which are consumed by the enforceRateLimit() function. An unauthenticated, network-based attacker can ...

CVE-2026-83549

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

CVE-2026-83548

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...

CVE-2023-54391

Proxmox Virtual Environment VE 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-control before 8.0.4 that allows unauthenticated attackers to authenticate as any existing enabled user without a configured second factor by supplying an arbitrary tfa-challenge value ...

CVE-2022-27925

CVE-2022-27925 Описание 10 мая 2022 года Zimbra выпустила версии 9.0.0 patch 24 и 8.8.15 patch 31 для устранения множества уязвимостей в Zimbra Collaboration Suite, включая CVE-2022-27924 о котором мы писали ранее и CVE-2022-27925. Изначально Zimbra назвала CVE-2022-27925 аутентифицированной атак...

CVE-2026-18730

A server-side request forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause the Manage API to send crafted outbound requests to an attacker-controlled host. An unauthenticated endpoint parsed an attacker-supplied cluster...

CVE-2025-55182-POC-SCANNER

CVE-2025-55182: Critical Pre-Authentication RCE in React Server Components Security Research byschema.cx "Control is an illusion. It's the systems we build that control us—unless we understand them first." 📋 Содержание Отказ от ответственности и правовая информация Краткое резюме Техническое...

CVE-2007-2447

Эксплойт Samba CVE-2007-2447 Автономная реализация эксплойта CVE-2007-2447 на Rust, нацеленного на Samba smbd 3.0.20-Debian. Описание уязвимости CVE-2007-2447 — это уязвимость внедрения команд в версиях Samba с 3.0.0 по 3.0.25rc3. Уязвимость существует в функции SamrChangePassword, которая не...

CVE-2025-29927

🔍 CVE-2025-29927 - Детектор обхода middleware в Next.js Этот интеллектуальный сканер на Python помогает выявить уязвимость CVE-2025-29927 в приложениях Next.js — критический обход middleware, позволяющий злоумышленникам пропустить аутентификацию с помощью специально сформированного HTTP-заголовка...

CrushFTP-AS2-Bypass-Research-CVE-2025-54309

Исследование обхода аутентификации AS2 в CrushFTP ⚠️ ВАЖНО: Эта уязвимость была исправлена CrushFTP в ноябре 2025 года. Данное исследование публикуется только в образовательных и защитных целях. 📝 ПРИМЕЧАНИЕ: Это исследование основано на моделях уязвимостей, аналогичных CVE-2025-54309. Точный номе...

CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit

hi CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit MCP-сервер Serverless Framework CVE-2025-69256. Базовая оценка: 9.4/10 → Улучшенная оценка CTT: 9.9/10. Критическая уязвимость внедрения команд в MCP-сервере Model Context Protocol Serverless Framework, усиленная темпоральны...