CVE-2025-9209

🍔 RestroPress – نظام الطلب عبر الإنترنت 3.0.0 - 3.1.9.2 🛡️ CVE-2025-9209.py — أداة الاستغلال والاستخراج التلقائي الجماعي ⚠️ نظرة عامة على الثغرة RestroPress – نظام الطلب عبر الإنترنت الإصدارات من 3.0.0 إلى 3.1.9.2 تتأثر بثغرة كشف معلومات بدون مصادقة تؤدي إلى تجاوز المصادقة عبر JWT مزور. تكشف...

CVE-2022-40684

CVE-2022-40684 POC لـ CVE-2022-40684 يؤثر على أجهزة Fortinet FortiOS وFortiProxy وFortiSwitchManager. التحليل الفني يمكن العثور على تحليل فني للسبب الجذري للثغرة على مدونتنا: https://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684...

CVE-2020-1472

Script de test ZeroLogon Un script Python qui utilise la bibliothèque Impacket pour tester la vulnérabilité de l'exploit Zerologon CVE-2020-1472. Il tente d'effectuer le contournement de l'authentification Netlogon. Le script se terminera immédiatement lorsqu'il réussit le contournement, sans...

CVE-2020-7246

إعداد المختبر: a git clone https://github.com/pswalia2u/CVE-2020-7246.git b cd CVE-2020-7246 && docker build -t cve-assignment:ine . && docker run -it -p 80:80 cve-assignment:ine c يجب أن يكون خادم الويب متاحًا على http://127.0.0.1/index.php d حساب مُهيأ مسبقًا: البريد الإلكتروني:...

CVE-2025-8359

CVE-2025-8359 AdForest Dépôt : Nxploited/CVE-2025-8359 Script d'exploitation : CVE-2025-8359.py 📋 Description CVE : CVE-2025-8359 Type de vulnérabilité : Contournement de l'authentification Produit concerné : AdForest - Classified Ads WordPress Theme Versions concernées : Jusqu'à 6.0.9 inclus Sco...

CVE-2026-73779

CVE-2026-73779 affects the AOS-CX switch operating system (HPE), where a set of vulnerabilities allows an unauthenticated remote actor on an adjacent network to circumvent existing authentication controls . Successful exploitation can lead to information disclosure , unauthorized modification , a...

CVE-2026-73779 Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information...

EUVD-2026-69642

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information...

EUVD-2026-69640

Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls...

EUVD-2026-69634

An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system resources...

CVE-2026-73771

CVE-2026-73771 affects the AOS-CX management interface and API from HPE Aruba , where an improper authentication processing flaw could allow an unauthenticated remote attacker, under specific conditions, to bypass authentication controls or exhaust system resources . Successful exploitation may l...

CVE-2026-73771 Improper Authentication Handling in AOS-CX Management Interface and API

An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system resources...

CVE-2026-73764 Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of...

EUVD-2026-69628

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of...

CVE-2026-73764

CVE-2026-73764 affects the operating system of HPE AOS-CX switches , where an unauthenticated actor from an adjacent network can bypass authentication controls, enabling unauthorized modification of resources and limited service disruption . The CVSS 3.1 score is 7.1 (HIGH) with an attack vector ...

EUVD-2026-69614

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could...

CVE-2026-73750

CVE-2026-73750 affects the authentication module of HPE ArubaOS-CX (AOS-CX) , specifically an API endpoint. The root cause is improper handling of malformed or truncated input, constituting a buffer overflow. An authenticated remote attacker—via a compromised or hostile authentication server—can ...

CVE-2026-73750 Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could...

CVE-2021-44270

CVE-2021-44270 Anviz-Access-Control-Authentication-Bypass https://nvd.nist.gov/vuln/detail/CVE-2021-44270...

CVE-2026-84307

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.5 and 5.7.5, packages/panels/src/Auth/Pages/Login.php presents the multi-factor authentication challenge before evaluating canAccessPanel. For an account that canAccessPanel denies,...