CVE-2026-55040

Microsoft SharePoint JWT 身份验证绕过（CVE-2026-55040） 概述 CVE-2026-55040.py 是一个概念验证（PoC）脚本，用于利用 SharePoint 身份验证绕过漏洞 CVE-2026-55040。 如需完整的技术分析，请参阅我们的 Rapid7 分析。 用法 root@kitploit: $ python CVE-2026-55040.py --help usage: CVE-2026-55040.py -h --target TARGET --host HOST --x5t X5T --realm REALM --sid SID...

Weblogic_Unauthorized-bypass-RCE

CVE-2020–14882 Bypass no autorizado RCE de Weblogic CVE-2020-14882 Script de prueba de bypass no autorizado RCE de Oracle Weblogic Funciona en Python3 Solicitudes root@kitploit: POST /console/images/%252E%252E%252Fconsole.portal HTTP/1.1 Host: User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...

CVE-2026-59243_exploit

CVE-2026-59243 — Apache Airflow FAB Provider: Bypass de autenticación OAuth → RCE vía DAG Bypass de autenticación en el proveedor FAB auth-manager de Apache Airflow apache-airflow-providers-fab, que conduce a la ejecución remota de código mediante un DAG desencadenado. El proveedor decodifica el...

CVE-2021-40539

CVE-2021-40539 CVE-2021-40539：ADSelfService Plus RCE漏洞 一：漏洞描述 ZOHO ManageEngine ADSelfService Plus是卓豪（ZOHO）公司的针对 Active Directory 和云应用程序的集成式自助密码管理和单点登录解决方案。 CVE-2021-40539 Zoho ManageEngine ADSelfService Plus 6113 及更早版本存在 REST API 身份验证绕过漏洞，远程攻击者可以利用此漏洞来控制受影响的系统。该漏洞CVSS评分：9.33，危害等级：严重 二：漏洞利用...

onedrive_user_enum

onedriveuserenum v2.10 enumerate valid onedrive users For a full rundown of the enumeration technique and OneDrive enum, check out the blog here: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ If you are looking for the old, non-database vesion of OneDrive Enum, you can find it here:...

CVE-2024-6043

CVE-2024-6043 CVE-2024-6043 概要 このPythonツールは、SourceCodester Best House Rental Management System 1.0 に影響を与える CVE-2024-6043 の脆弱性を悪用します。この脆弱性により、リモートの攻撃者は adminclass.php ファイルを介してSQLインジェクションを実行でき、特にログイン機能の username パラメータを標的にします。このツールは、脆弱なエンドポイントを検出し、認証をバイパスするペイロードを注入するプロセスを自動化します。 特徴 自動パス検出 :...

Security Bulletin: IBM i is Affected By An Improper Authentication Vulnerability in Network Authentication Service [CVE-2026-16892]

Summary IBM i is vulnerable to allowing a remote authenticated attacker to bypass security restrictions CVE-2026-16892 in Network Authentication Service NAS as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16892 DESCRIPTION: IBM i could allow a remote...

Security Bulletin: IBM i is Affected By Denial of Service Vulnerabilities in NFS [CVE-2026-17057, CVE-2026-17207]

Summary IBM i is vulnerable to denial of service due to missing authentication and a buffer overflow CVE-2026-17057, CVE-2026-17207 in Network File System NFS as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17057 DESCRIPTION: IBM i could allow a remote...

poc-cve-2019-14287

PoC of CVE-2019-14287 概要 sudo の脆弱性 CVE-2019-14287 を Docker コンテナ上で再現するサンプルです。 演習手順 1. docker compose up -d でコンテナを立ち上げる 2. docker exec -it vulnerablesudoapp bash でコンテナに入る 3. whoamiや idコマンドを実行して、自分が一般ユーザである（rootでない）ことを確認 root@kitploit: $ whoami user1 $ id uid=1000user1 gid=1000user1 groups=1000user1...

Hikvision-CVE-2017-7921-decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor このPythonファイルは、CVE-2017-7921の影響を受けるHikvisionカメラで使用されている configurationFile を復号化します。 https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ 説明 Hikvision IPカメラの認証バイパス CVE-2017-7921...

CVE-2026-67340_exploit

CVE-2026-67340 — ArcadeDB JAVASCRIPT 触发器脚本 RCE（认证后） 通过一个可触达宿主类的 JAVASCRIPT 触发器 ，在 ArcadeDB （一款 Java 多模型数据库）中实现认证后的远程代码执行。 触发器的 GraalVM 多语言引擎在构建时带有宿主类白名单，其中包含 java.lang. （ScriptTriggerExecutor.setAllowedPackages），因此触发器脚本可以调用： root@kitploit:...

PT-2026-84482

Name of the Vulnerable Software and Affected Versions AOS-CX switches affected versions not specified Description Issues in the operating system of AOS-CX switches may allow an unauthenticated remote actor to bypass authentication controls. This could lead to the unauthorized modification of...

PostgreSQL 16.x < 16.15 / 17.x < 17.11 / 18.x < 18.6 SCRAM Observable Response Discrepancy

The version of PostgreSQL installed on the remote host is 16 prior to 16.15, 17 prior to 17.11, or 18 prior to 18.6. As such, it is potentially affected by an information disclosure vulnerability: - Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user ...

RockyLinux 10 : freerdp (RLSA-2026:61378)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61378 advisory. FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses CVE-2026-67297 FreeRDP: FreeRDP: Memory disclosure or denial of service v...

PT-2026-84453

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer versions prior to 7.4.0 Description Issues in the API allow an unauthenticated remote attacker to bypass authentication controls. This could enable an attacker to obtain administrative privileges and achieve remo...

PT-2026-84168

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description An authentication bypass by spoofing allows an authenticated attacker to escalate privileges to Administrator. Recommendations At the moment, there is no information about a newer...

PT-2026-84542

Name of the Vulnerable Software and Affected Versions WWBN AVideo versions prior to commit 9c39d8c8 Description An incomplete authentication bypass exists in the 'encryptPass.json.php' endpoint. This flaw allows unauthenticated attackers to compute valid HMAC Hash-based Message Authentication Cod...

PT-2026-84538

Name of the Vulnerable Software and Affected Versions WWBN AVideo versions e01e41ecc and earlier Description Three security controls during the login process rely exclusively on the client-supplied User-Agent header. The functions isAVideoEncoder and isAVideoMobileApp compare the HTTP USER AGENT...

PT-2026-84349

Name of the Vulnerable Software and Affected Versions Dell PowerStore SDNAS affected versions not specified Description An issue exists where authentication is missing for a critical function. This allows an unauthenticated attacker with remote access to potentially gain access to the filesystem...

PT-2026-84106

Name of the Vulnerable Software and Affected Versions Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System versions prior to 1.4.53 Description An authentication bypass exists that allows for administrator account takeover. The issue resides in the guest ticket...