CVE-2026-59335 Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise

Improper handling of case sensitivity CWE-178 in the identity zone authorization check in the Identity Zone Endpoint in Cloud Foundry UAA allows a remote authenticated attacker holding only the zones.write authority to bypass the intended restriction that this authority does not grant access to t...

EUVD-2026-65466

Improper handling of case sensitivity CWE-178 in the identity zone authorization check in the Identity Zone Endpoint in Cloud Foundry UAA allows a remote authenticated attacker holding only the zones.write authority to bypass the intended restriction that this authority does not grant access to t...

CVE-2026-59335

Cloud Foundry UAA is affected by an authorization bypass (CWE-178) in its Identity Zone Endpoint . The root cause is a mismatch between the application's case-sensitive zone identifier comparison and MySQL's case-insensitive default collation: an attacker holding only zones.write can reference th...

cve-2024-32002-poc-aw

CVE-2024-32002 PRC AW Una POC per CVE-2024-32002 che dimostra la scrittura arbitraria nella directory .git. Vedi cve-2024-32002-submodule-aw per il repository del sottomodulo correlato. Cosa contiene questo repo Un symlink con un nome arbitrario che punta alla directory .git. Un file .gitmodules...

CVE-2025-29306

POC - CVE-2025-29306 Vulnerabilidade de Execução de Código em FOXCMS /images/index.html Visão Geral Um problema no FoxCMS v.1.2.5 permite que um atacante remoto execute código arbitrário através da página de exibição de casos no componente index.html. POC Completo Leia sobre — CVE-2025-29306 Avis...

CVE-2026-9086-poc

CVE-2026-9086: Keycloak URI-Schema-Validierungs-Bypass XSS PoC Englische Version Überblick Dieses Repository ist ein Proof of Concept PoC der Cross-Site-Scripting XSS-Schwachstelle CVE-2026-9086 in der Client-URI-Validierung von Keycloak. Das verwundbare Keycloak validierte die javascript:- und...

CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity

CVE-2026-5556 – Bypass del controller di ammissione Kubernetes tramite la distinzione tra maiuscole e minuscole Codice del programma webhook di ammissione Python + exploit root@kitploit: !/usr/bin/env python3 admissionwebhook.py - Vulnerable webhook that rejects pods with specific name from flask...

Qinglong-Combo-Exploit

🐉 Qinglong Combo Exploit Qinglong Panel Three Vulnerabili...

nosqli-flintcms

nosqli-flintcms Blindes noSQL-Injection-Fallstudienlabor basierend auf CVE-2018-3783 Privilegienerweiterung auf flintcms 1.1.9. Die Schwachstelle wurde ursprünglich von Benoit Côté-Jodoin entdeckt. Sie können den Originalbericht auf HackerOne lesen. Voraussetzungen root@kitploit: docker-compose...

weakpass

Weakpass Here, you can find the list of tools and example of API server from weakpass.com for password and hash cracking in one place. 📂 Folder Structure tools A collection of password and hash cracking tools. Check them out: Kraker-js Lookup Passcheck Passgen libs Links to the libraries used in...

CVE-2026-59335 - UAA case insensitive check bypass | Cloud Foundry

Severity CVSSv4.0 – 7.7 — CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N CVSSv3.1 – 8.3 — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N Vendor CloudFoundry Foundation Versions Affected Severity is High unless otherwise noted. UAA All versions prior to v78.16.0 CF Deployment All...

CVE-2023-52709-PoC

Prova di concetto per CVE 2023-52709 "Lo stack Bluetooth TI non riesce a generare un indirizzo privato casuale risolvibile RPA portando a un DoS per dispositivi già accoppiati" CVE 2023-52709 Riepilogo Quando si esegue il test case Defensics SMP legacy 1001 con modalità loop sul DUT configurato c...

CVE-2026-7808

justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content e.g., script or style to survive sanitization, potentially leading to cross-site scripting. The issues primarily affect advanced usage rather than the default JustHTML..., sanitize=Tru...

EUVD-2026-64658

justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content e.g., script or style to survive sanitization, potentially leading to cross-site scripting. The issues primarily affect advanced usage rather than the default JustHTML..., sanitize=Tru...

CVE-2026-18356

The Limit Login Attempts Reloaded WordPress plugin before 3.3.5 does not compare logins against its username denylist case-insensitively and does not account for the account's email address, allowing an account an administrator intended to block from logging in to authenticate anyway...

EUVD-2026-63912

The Limit Login Attempts Reloaded WordPress plugin before 3.3.5 does not compare logins against its username denylist case-insensitively and does not account for the account's email address, allowing an account an administrator intended to block from logging in to authenticate anyway...

CVE-2026-18356 Limit Login Attempts Reloaded < 3.3.5 - Username Denylist Bypass via Case Variant and Account Email

The Limit Login Attempts Reloaded WordPress plugin before 3.3.5 does not compare logins against its username denylist case-insensitively and does not account for the account's email address, allowing an account an administrator intended to block from logging in to authenticate anyway...

CVE-2026-18356

The Limit Login Attempts Reloaded WordPress plugin before 3.3.5 contains a bypass in its username denylist mechanism. The plugin fails to compare login attempts against the denylist case-insensitively and does not account for the account's email address , allowing an account that an administrator...

gitls

Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline This tool is available when the repository, such as github, is included in the bugbounty scope. Sometimes specified as an org name or user name rather than a specific repository, you can use this tool to extract url...

Kibana 8.x < 8.19.20 / 9.0.x < 9.3.5 / 9.4.x < 9.4.2 Denial of Service (ESA-2026-136)

The version of Kibana installed on the remote host is 8.x prior to 8.19.20, 9.0.x prior to 9.3.5, or 9.4.x prior to 9.4.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-136 advisory. - Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input...