POC-CVE-2025-29927-

影響を受ける Next.js 15.x 15.2.3、14.x 14.2.25、Next.js 13.x 13.5.9 認証などの重要な機能にMiddlewareを使用するセルフホスト環境。 ガイド root@kitploit: npm run dev root@kitploit: curl --compressed -X GET http://localhost:3000/dashboard \ -H "Host: localhost:3000" \ -H "sec-ch-ua: "Chromium";v="135", "Not-A.Brand";v="8"" \ -H...

CVE-2026-8054

1. Vulnerability Overview CVE-2026-8054 is a high-severity pre-authentication SQL injection vulnerability Pre-auth SQL Injection in the dotCMS Core Publish Audit API. The vulnerability is officially tracked as Security Incident SI-75 and was formally disclosed at the end of May 2026. Since...

CVE-2024-46507

The script was tested and built on Ubuntu Server 20.04 LTS, while Kali Linux was used for exploitation and walkthrough. This walkthrough guides you through exploiting the vulnerable server containing CVE-2024-46507 command injection and CVE-2024-46508 authentication bypass vulnerabilities. Initia...

Kangaroo

Kangaroo A exploit that bypasses authentication on telnet servers running 2.7 or lower. Also known as cve-2026-32746 How to defend against this attack Disable Telnet: Stop and turn off the telnetd daemon on your servers and network devices immediately if you do not need it.Block Port 23: Use...

CVE-2026-8451

🚨 CVE-2026-8451 - NetScaler SAML IdP Memory Overread Vulnerability A pre-authentication memory disclosure vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway configured as a SAML Identity Provider IdP. ✨ Overview CVE-2026-8451 is a High-Severity memory disclosure vulnerability caus...

CVE-2026-66908

A flaw was found in the Apache Camel Platform HTTP Main component. When JSON Web Token JWT authentication is configured with a keystore but without specifying an issuer or audience, the system fails to validate the 'iss' and 'aud' claims. This improper authentication allows an attacker to use any...

tiktok-scraper

TikTok Scraper & Downloader Extrae y descarga información útil de TikTok. No se requieren inicio de sesión ni contraseña Esto no es un soporte de API oficial ni nada por el estilo. Es solo un scraper que utiliza la API web de TikTok para extraer contenido multimedia e información meta relacionada...

CVE-2025-5777

CVE-2025-5777 - Citrix NetScaler Memory Leak Exploit 📌 Overview This tool demonstrates CVE-2025-5777 , a critical memory disclosure vulnerability in Citrix NetScaler ADC/Gateway devices. The exploit leaks sensitive memory contents via malformed authentication requests. Key Features: ✔ Memory leak...

watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553

CVE-2025-40552 및 CVE-2025-40553 SolarWinds Web Help Desk 사전 인증 RCE 체인 SolarWinds Web Help Desk 사전 인증 RCE 체인 탐지 아티팩트 생성 도구 설명 이 탐지 아티팩트 생성기는 SolarWinds Web Help Desk 인스턴스가 CVE-2025-40552 및 CVE-2025-40553에 취약한지 확인합니다. 탐지 아티팩트 생성기는 두 가지 작업을 수행하려고 시도합니다: CVE-2025-40552를 이용한 인증 우회 - 이 검사는 매우 정확합니다. 성공...

CVE-2026-11387

CVE-2026-11387 — SMS Alert ≤ 3.9.5 ☆ Unauthenticated Privilege Escalation via Arbitrary Password Reset ☆ === Beelze === 📋 Vulnerability Info Field| Details ---|--- CVE ID| CVE-2026-11387 CVSS Score| 9.8 Critical CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Type| Missing Authenticatio...

CVE-2018-10933

CVE-2018-10933 - libssh Authentication Bypass Proof-of-Concept implementation for CVE-2018-10933 , a critical authentication bypass vulnerability affecting the server-side implementation of libssh. Disclaimer This repository is provided solely for educational purposes, vulnerability research, and...

CVE-2023-22960

PoC para CVE-2023-22960 Detalles PoC para CVE-2023-22960 que descubrí. Esta vulnerabilidad permite a un atacante eludir el mecanismo de prevención de fuerza bruta de credenciales de la interfaz del Servidor Web Integrado de todos los modelos de impresoras Lexmark que tengan una versión de firmwar...

librenswan: IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload

A flaw was found in Libreswan's implementation of IKEv2 authentication when processing signatures utilizing the RSASSA-PKCS1-v15 scheme. The RSAauthenticatehashsignaturepkcs115rsa function does not correctly validate the DER encoding of the ASN.1 digest. A remote, unauthenticated attacker could...

CVE-2025-59718-PoC

CVE-2025-59718 익스플로잇 위저드 개요 이 도구는 CVE-2025-59718에 대한 개념 증명PoC 익스플로잇 스크립트입니다. CVE-2025-59718은 Fortinet 제품FortiOS, FortiProxy, FortiSwitchManager 등에서 FortiCloud SSO를 위한 SAML 메시지의 암호화 서명 검증이 부적절하여 발생하는 치명적인 인증 우회 취약점입니다. 이 취약점으로 인해 인증되지 않은 원격 공격자가 서명되지 않은 SAML 응답을 제작 및 전송하여 인증을 우회하고 관리자 권한을 획득할 수...

1Panel-CVE-2025-54424-

CVE-2025-54424 CVE-2025-54424: 1Panel - RCE через обход клиентского сертификата. Комбинированный инструмент сканирование + эксплуатация Описание уязвимости 1Panel — это открытая, современная панель управления Linux, предоставляющая графический интерфейс для развертывания веб-сайтов, управления...

CVE-2026-29145-Everything

CVE-2026-29145 Everything Apache Tomcat CLIENTCERT + OCSP soft-fail bypass complete reproduction environment, exploit traffic captures, and Suricata detection rule writing materials. For authorized security research and detection rule development only. Do not use on unauthorized systems...

CVE-2025-33073

CVE-2025-33073 — Windows SMB Client NTLM Reflection EoP Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. An improper access control flaw in the Windows SMB Client that revives NTLM reflection techniques thought to be mitigated — letti...

itsm-exploit

Exploits for Ivanti Neurons for ITSM On Premise This script exploits several flaws that allow an unauthenticated attacker to gain administrator access and execute remote commands CVE-2023-46808 on Ivanti Neurons for ITSM On Premise. For technical details, see Technical Details Affected versions...

CVE-2026-42568

CVE-2026-42568 — YAMCS LDAP Injection in LdapAuthModule Summary An LDAP injection vulnerability exists in org.yamcs.security.LdapAuthModule. The username parameter is inserted directly into LDAP search filters without RFC 4515 escaping, allowing authentication bypass...

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps Simulated exploitation and mitigation of CVE-2025-54918 Windows NTLM flaw. Includes detection scripts, Ansible patching, and CI/CD hardening. Demonstrates privilege escalation from low-level access to SYSTEM in hybrid...