Lucene search
+L

172310 matches found

Kitploit
Kitploit
added 2026/08/30 6:34 a.m.4 views

CVE-2021-37580

CVE-2021-37580 POC for CVE-2021-37580 0x00 Vulnerability Principle Vulnerability principle: Apache ShenYu Admin bypass JWT authentication CVE-2021-37580 0x01 Single URL root@kitploit: Usage: python3 CVE-2021-37580.py -u url -n username.txt For shenyu-admin-2.4.0, vulnerable versions see below: Fo...

9.8CVSS7.2AI score0.40058EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/30 5:50 a.m.5 views

tiktok-scraper

TikTok Scraper & Téléchargeur Récupérez et téléchargez des informations utiles depuis TikTok. Aucun identifiant ou mot de passe requis Ceci n'est pas un support d'API officiel, etc. C'est simplement un scraper qui utilise l'API Web de TikTok pour récupérer des médias et les méta-informations...

6AI score
SaveExploits0References4
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.13 views

User Profile Builder 3.16.4 - Unauthenticated Authentication Bypass

The User Profile Builder plugin for WordPress version 3.16.4 is vulnerable to an authentication bypass via type confusion. Profile Builder's automatic-login-after-registration handler passes the return value of wpinsertuser through absint before testing it with iswperror, so the error check runs...

9.8CVSS6.1AI score0.04615EPSS
SaveExploits4References6
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.13 views

Concrete CMS <9.5.1 - Unauthenticated File-Usage Internal Metadata Disclosure

Concrete CMS 9.5.0 and below is vulnerable to IDOR combined with a missing authentication gate. The endpoint /ccm/system/dialogs/file/usage/fID accepts an integer file ID in the URL and returns internal site structure data page IDs, versions, URL paths to anyone who sends a GET request. id:...

6.3CVSS5.8AI score0.00523EPSS
SaveExploits0References1
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.218 views

Sharp Multifunction Printers - Directory Listing

It was observed that Sharp printers are vulnerable to an arbitrary directory listing without authentication. Any attacker can list any directory located in the printer and recover any file. id: CVE-2024-33605 info: name: Sharp Multifunction Printers - Directory Listing author: gy741 severity: hig...

7.5CVSS7.3AI score0.06175EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.23 views

Masteriyo LMS <= 1.7.3 - Insecure Direct Object Reference

Authentication Bypass Using an Alternate Path or Channel vulnerability in Masteriyo Masteriyo - LMS. Unauth access to course progress.This issue affects Masteriyo - LMS: from n/a through 1.7.3. id: CVE-2024-33939 info: name: Masteriyo LMS = 1.7.3 - Insecure Direct Object Reference author:...

5.3CVSS5.9AI score0.00934EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.62 views

Apache Solr - Authentication Bypass

Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass.A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the origina...

9.8CVSS7.4AI score0.91714EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.23 views

Netgear DGN2200 - Improper Authentication

A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication. When adding "?x=1.gif" to the requested url, it will be recognized as passing the authentication. id: CVE-2024-57046 info: name: Netgear DGN2200...

8.8CVSS7.4AI score0.02084EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.40 views

Arcserve Unified Data Protection - Authentication Bypass

An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin. id: CVE-2024-0799 info: name: Arcserve Unified Data Protection -...

9.8CVSS7.4AI score0.04342EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.85 views

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure

A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is...

8.7CVSS5.8AI score0.03692EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.71 views

pgAdmin 4 - Authentication Bypass

pgAdmin 4 versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data. id: CVE-2024-9014 info: name: pgAdmin 4 - Authentication Bypass author...

9.9CVSS7.2AI score0.09685EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.11 views

LatePoint <= 5.0.12 - Authentication Bypass

LatePoint plugin for WordPress versions up to 5.0.12 contains an authentication bypass caused by insufficient verification of user during booking, letting unauthenticated attackers log in as any existing user if they have user ID access, exploit requires access to user ID, and the 'Use WordPress...

9.8CVSS5.8AI score0.0308EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.38 views

Milvus - Unauthenticated Metrics API Access

Milvus 2.5.27 and 2.6.10 contains an authentication bypass caused by weak default token and unauthenticated REST API on TCP port 9091, letting attackers perform arbitrary expression evaluation and data manipulation, exploit requires network access to port 9091. id: CVE-2026-26190 info: name: Milv...

9.8CVSS7.3AI score0.36912EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.40 views

Tattile Camera < 1.181.5 - Default Login

Tattile Smart+, Vega, and Basic device families firmware = 1.181.5 contain a broken authentication caused by default credentials not forced to be changed, letting attackers with management interface access gain administrative privileges. id: CVE-2026-26341 info: name: Tattile Camera 1.181.5 -...

9.8CVSS5.8AI score0.02663EPSS
SaveExploits3References1
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.4 views

Flowise <= 3.0.13 - Unauthenticated OAuth Configuration Disclosure

Flowise before 3.1.0 contains a missing authentication vulnerability in the /api/v1/loginmethod endpoint, allowing unauthenticated remote attackers to retrieve an organization's complete SSO configuration including OAuth client secrets by providing an organizationId parameter. id: CVE-2026-56270...

8.7CVSS6.1AI score0.02048EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.8 views

Hoppscotch <= 2026.4.1 - Mass Assignment JWT_SECRET Overwrite

Hoppscotch self-hosted backend = 2026.4.1 contains a broken authentication caused by mass assignment via unauthenticated POST /v1/onboarding/config endpoint, letting unauthenticated attackers overwrite JWTSECRET to forge tokens and fully compromise the server, exploit requires attacker to access...

10CVSS6.1AI score0.01701EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.40 views

Open WebUI 'LDAP Empty Password' - Authentication Bypass

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is non-empty before performing a Simple Bind against the LDAP server. The LdapForm Pydantic model accep...

9.1CVSS7.2AI score0.01461EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.310 views

WSO2 User Registration - Arbitrary Account Creation

The SOAP admin service in WSO2 products has a security vulnerability that allows the creation of new user accounts regardless of the self-registration configuration settings. id: CVE-2024-7097 info: name: WSO2 User Registration - Arbitrary Account Creation author: iamnoooob,rootxharsh,pdresearch...

4.3CVSS5.9AI score0.00654EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.164 views

Gitea Container Registry - Unauthorized Private Image Access

Gitea = 1.26.2. As a temporary workaround, set REQUIRESIGNINVIEW=true in gitea app.ini, though this blocks all anonymous access including public repos. reference: - https://blog.gitea.com/release-of-1.26.2/ - https://github.com/go-gitea/gitea/pull/37290 -...

8.2CVSS7.3AI score0.01393EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.45 views

SiYuan Note <= 3.6.5 - Authentication Bypass

SiYuan Note 3.6.5 and prior is vulnerable to authentication bypass. The CheckAuth middleware unconditionally trusted all chrome-extension:// origins, granting RoleAdministrator access without token validation to any request with a spoofed Origin header. Fixed in v3.7.0. id: CVE-2026-54069 info:...

9.2CVSS7.1AI score0.00579EPSS
SaveExploits0References2
Rows per page
Query Builder