173239 matches found
CVE-2020-8193-Citrix-Scanner
CVE-2020-8193-Citrix-Scanner Recherche de CVE-2020-8193 - Vérification du contournement d'authentification https://vulners.com/cve/CVE-2020-8193 Documents de référence :...
FortiWeb-CVE-2025-52970-Authentication-Bypass
🚨 تجاوز المصادقة في FortiWeb → تنفيذ الأوامر عن بُعد 📌 نظرة عامة يوضح هذا المستودع تجاوز المصادقة في FortiWeb والذي يمكن ربطه لتحقيق تنفيذ الأوامر عن بُعد RCE. يستغل الثغرة نقطة نهاية ضعيفة لحقن حمولات SQL، تحميل ويب شيل، وتنفيذ الأوامر عبر رؤوس HTTP. ⚠️ إخلاء مسؤولية : هذا المشروع لأغراض تعليمية...
CVE-2018-9995-EXPLOIT
CVE-2018-9995 - Contournement d'authentification DVR Ce référentiel traite de la vulnérabilité de sécurité identifiée sous le nom CVE-2018-9995, affectant divers appareils DVR, notamment TBK DVR4104, DVR4216, Novo, CeNova, QSee, Pulnix, XVR 5 en 1, Securus, Night OWL, DVR Login, HVR Login et MDVR...
CVE-2025-49113
CVE-2025-49113 – Roundcube Webmail RCE エクスプロイト Python PoC CVE ID: CVE-2025-49113 エクスプロイト種別: リモートコード実行（PHPオブジェクトインジェクション経由） 対象アプリケーション: Roundcube Webmail ≤ 1.5.9 および ≤ 1.6.10 エクスプロイト言語: Python 作成者: 00xCanelo ステータス: 脆弱なRoundcubeインストールでテスト済み、動作確認済み 📌 説明 このエクスプロイトは、Roundcube...
CVE-2026-82694
A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web UI. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly available and might be...
CVE-2026-82695
A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. The attack can be launched remotely. The exploit has been released to the public and may b...
CVE-2026-82693
A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function TendaTelnet of the file /goform/telnet of the component Web UI. Executing a manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been...
CVE-2017-11427-DEMO
CVE-2017-11427-DEMO Environnement de base root@kitploit: $ sudo apt-get install libxml2-dev libxslt1-dev $ sudo apt-get install libxml2-dev libxmlsec1-dev libxmlsec1-openssl DÉMO: root@kitploit: $ git clone https://github.com/CHYbeta/CVE-2017-11427-DEMO.git $ cd CVE-2017-11427-DEMO $ source...
FreeRDP: FreeRDP: Authentication bypass via incorrect RDSTLS PDU handling
A vulnerability in FreeRDP's server-side RDSTLS allows remote, unauthenticated attackers to bypass authentication. By sending a crafted capabilities PDU instead of the expected authentication request, an attacker can gain an authenticated session without valid credentials...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
nextjs-CVE-2025-29927
nextjs-CVE-2025-29927 قالب Nuclei لاكتشاف CVE-2025-29927، ثغرة تجاوز المصادقة في Next.js. إذا كنت تريد فهم كيفية عمل هذه الثغرة بالضبط، يمكنك قراءة المقال الممتاز للباحثين الأصليين هنا هذا القالب بسيط جدًا. يقوم بأمرين: أولاً، يحدد أن الموقع يستخدم Next.js، ثم يختبر ما إذا كان الهدف يستخدم...
CVE-2026-82695 Tenda AC18 Telnet telnet missing authentication
A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. The attack can be launched remotely. The exploit has been released to the public and may b...
CVE-2026-82695
A missing authentication flaw affects the Telnet Handler component (file /goform/telnet) in Tenda AC18 firmware version 15.03.05.19 , allowing a remote attacker to access the device without credentials. The flaw is rated CVSS 4.0 base score 10.0 (CRITICAL) with low attack complexity, no privilege...
EUVD-2026-68509
A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. The attack can be launched remotely. The exploit has been released to the public and may b...
CVE-2026-82694
Tenda AC1206 (firmware 15.03.06.23) is affected by a missing authentication vulnerability in the Web UI component. The vulnerable function is R7WebsSecurityHandler in the file /goform/ate , allowing a remote, unauthenticated attacker to manipulate it. The CVSS 3.1 score is 10.0 (Critical) with ch...
CVE-2026-82694 Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication
A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web UI. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly available and might be...
EUVD-2026-68507
A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web UI. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly available and might be...
CVE-2017-7921-EXPLOIT
CVE-2017-7921 - Vulnérabilité d'authentification impropre dans les séries de caméras Hikvision Une faille de sécurité identifiée comme CVE-2017-7921, qui affecte divers modèles de caméras Hikvision. La vulnérabilité a été découverte dans les appareils des séries DS-2CD2xx2F-I V5.2.0 build 140721 ...
CVE-2020-15906
CVE-2020-15906 شرح لـ CVE-2020-15906. شكر خاص لـ Frederic Mohr Lastbreach على دعمك الخلفي. Tiki Wiki Cms Groupware 16.x - 21.1 تجاوز المصادقة بواسطة Maximilian Barz لقد وجدت ثغرة جديدة في TikiWiki Cms Groupware 16.x - 21.1. تسمح للمهاجمين غير المصادقين عن بُعد بتجاوز صفحة تسجيل الدخول مما يؤدي إل...
WordPress MyHome Core plugin <= 4.4.5 - Authentication Bypass to Account Takeover vulnerability
Authentication Bypass to Account Takeover vulnerability discovered by Rafie Muhammad in WordPress Plugin MyHome Core versions = 4.4.5...