certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

CVE-2026-41940_exploit

CVE-2026-41940 - cPanel & WHM 认证绕过利用工具 漏洞：cpsrvd 的 HTTP Basic 认证处理器中存在通过 CRLF 注入进行会话文件操作 CVE: CVE-2026-41940 CVSS: 9.8（严重） CWE: CWE-93（CRLF 注入）/ CWE-306（缺少认证） 受影响： cPanel & WHM 版本低于： 11.110.0.97, 11.118.0.63, 11.126.0.54, 11.132.0.29, 11.134.0.20, 11.136.0.5 端口：...

gitea-CVE-2026-28699

CVE-2026-28699: Gitea OAuth2 スコープバイパス（HTTP Basic 認証経由） read:user のみにスコープされた Gitea OAuth2 アクセストークンが、Bearer トークンとしてではなく Authorization: Basic base64:x-oauth-basic として送信されると、完全な書き込みアクションを実行できます。Basic 認証で提示されたトークンはスコープチェックがスキップされます。 影響を受けるバージョン: HTTP 403 blocked Basic PATCH /api/v1/user/settings - HTT...

phpBB-CVE-2026-48611

自行承担使用风险。 本工具严格仅供授权的安全研究、渗透测试和教育目的使用。请仅对您拥有或已获得明确书面许可的系统运行此工具。 作者不对本工具的任何非法或不道德使用，或因此类使用导致的任何后果负责或承担责任。本工具如何操作的所有法律和道德责任完全由运行者承担——作者不参与、不认可、也不纵容对本软件的未经授权使用。 phpBB-CVE-2026-48611 针对 phpBB OAuthloginlink 认证绕过的自动化 PoC phpBB 发布了 CVE-2026-48611 并附有该漏洞的技术分析报告，但除 Pentest-Tools.com 自己的公告...

CVE-2025-1739

CVE-2025-1738 与 CVE-2025-1739 — Trivision 摄像头 NC227WF PoC 📋 概述 CVE| CVSS v3.1| 评分| CWE| 类型 ---|---|---|---|--- CVE-2025-1739| AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N| 7.1| CWE-288| 通过 Basic Auth 泄露绕过身份验证 🔓 CVE-2025-1739 — Basic Auth 代码暴露 / 身份验证绕过 CWE-288 描述 摄像头通过 mblogin.asp 端点泄露了一个有效的 Base64 编码 Basi...

vicidial-cve-2024-8503-blind-sqli-poc

vicidial-cve-2024-8503-blind-sqli-poc Unauthenticated time-based blind SQL injection proof of concept for VICIdial's VERMAJAXfunctions.php endpoint CVE-2024-8503. The project is intended for authorized security testing, validation, and education only. Overview CVE-2024-8503 is an unauthenticated...

MLflow Job API - Authentication Bypass

MLflow latest version contains an authentication bypass caused by unprotected FastAPI job endpoints under /ajax-api/3.0/jobs/ when basic-auth is enabled, letting unauthenticated network clients submit and manage jobs, exploit requires job execution enabled and allowlisted job functions. id:...

Linux Distros Unpatched Vulnerability : CVE-2026-90461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTPS Basic Authentication...

CVE-2026-90461

OpenStack Ironic versions through 38.0.0 may leak a username and password to an unexpected remote host when the Image Service is configured for HTTP(S) Basic Authentication . The credential disclosure results in a HIGH confidentiality impact with a changed scope , rated CVSS 3.1: 6.3 (Medium) due...

CVE-2026-90461

OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTPS Basic Authentication...

CVE-2025-4476-Exploit

CVE-2025-4476-Exploit 一个用于发送带有超大 Authorization: Basic 头的 HTTP GET 请求的小型 Python 测试客户端。 该工具旨在用于实验室测试和研究头部解析问题（例如，libsoup 中诸如 CVE-2025-4476 的空指针解引用/崩溃漏洞）。它演示了带有畸形头的客户端-服务器交互如何触发解析错误；它不是一个漏洞利用框架。 用法：仅针对本地或已授权的测试目标运行。 重要提示：请负责任地使用——未经明确许可，请勿扫描或攻击系统。...

CVE-2026-87872

A flaw was found in the OCAPI modules ocapicommand, ocapiinfo of the community.general Ansible collection. The shared OCAPI request helper disables TLS certificate validation on every request and the modules expose no parameter to re-enable it, while sending HTTP Basic-Auth credentials to an http...

CVE-2026-85584

SiYuan versions before v3.8.2 contain a denial of service vulnerability in the publish-service Basic Auth throttle that stores failed-attempt state using attacker-controlled usernames without enforcing capacity limits or eviction policies. Unauthenticated attackers can submit repeated...

CVE-2026-85582

SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth handler that allows authenticated attackers to exhaust memory. Attackers can repeatedly authenticate with valid credentials to create persistent session entries without expiry or...

CVE-2026-85584

SiYuan versions before v3.8.2 are affected by a denial of service vulnerability in the publish-service Basic Auth throttle . The throttle stores failed-attempt state keyed by attacker-controlled usernames without enforcing capacity limits or eviction policies, allowing unauthenticated attackers t...

CVE-2026-85582 SiYuan before v3.8.2 Unbounded Session Creation via Basic Auth

SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth handler that allows authenticated attackers to exhaust memory. Attackers can repeatedly authenticate with valid credentials to create persistent session entries without expiry or...

CVE-2026-85582 SiYuan before v3.8.2 Unbounded Session Creation via Basic Auth

SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth handler that allows authenticated attackers to exhaust memory. Attackers can repeatedly authenticate with valid credentials to create persistent session entries without expiry or...

EUVD-2026-71005

SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth handler that allows authenticated attackers to exhaust memory. Attackers can repeatedly authenticate with valid credentials to create persistent session entries without expiry or...

CVE-2026-85582

SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth handler . Authenticated attackers can repeatedly authenticate with valid credentials to create persistent session entries without expiry or capacity limits, causing indefinite proce...

CVE-2020-10965

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:01+00:00| seen| https://t.me/hackingAttack/95929 2026-09-01 20:01:01+00:00| seen| https://t.me/hackingAttack/95931 2026-09-02 01:01:21+00:00| seen| https://t.me/hackingAttack/95931 2026-09-02 01:01:22+00:00| seen|...