EUVD-2026-87152

The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of currentadmin...

CVE-2026-85292

In InvoicePlane versions prior to 1.7.2 , a loose type comparison in the User_Controller allows for potential authentication or authorization bypass . The application uses PHP's loose inequality operator to compare the session user_type value against the required role. In specific configurations ...

web_exploit_detector

웹 익스플로잇 탐지기 소개 웹 익스플로잇 탐지기는 웹 호스팅 환경에서 가능한 감염, 악성 코드 및 의심스러운 파일을 탐지하는 데 사용되는 Node.js 애플리케이션및 NPM 모듈입니다. 이 애플리케이션은 하나 이상의 웹사이트를 호스팅하는 웹 서버에서 실행하도록 설계되었습니다. 애플리케이션을 실행하면 잠재적으로 감염된 파일 목록이 생성되며, 각 파일에는 감염에 대한 설명과 관련 온라인 리소스 링크가 함께 제공됩니다. 버전 1.1.0부터 이 애플리케이션에는 디렉터리 구조의 스냅샷을 생성하고 비교하는 유틸리티도 포함되어 있어, 사용...

CVE-2021-32648

CVE-2021-32648 Patch your code for October CMS Auth Bypass CVE-2021-32648 Instructions 1. Open the file vendor/october/rain/src/Auth/Models/User.php 2. Perform the patch found in these diff notes 3. Save the file Overview You are converting a loose comparison to a strict comparison by replacing t...

CVE-2026-17532

Seraphinite Accelerator . Una URL, sin autenticación: root@kitploit: http://TARGET/?seraphaccelprep=alertdocument.domain" Uso Python requiere pip install requests:...

hashes

Hashes mágicos – «colisiones» de hash en PHP Regístrate con contraseña 1 y luego inicia sesión con contraseña 2. Si consigues entrar, entonces el almacenamiento usa el algoritmo especificado para aplicar hash a la contraseña y PHP usa == para compararlas para MD5, SHA-1 y texto plano. MD5, SHA-1,...

win-exp-

DESCRIPTION Esta herramienta compara los niveles de parches de un objetivo contra la base de datos de vulnerabilidades de Microsoft para detectar posibles parches faltantes en el objetivo. También notifica al usuario si hay exploits públicos y módulos de Metasploit disponibles para los boletines...

CVE-2025-41646---Critical-Authentication-Bypass-

CVE-2025-41646---Bypass-Crítico-de-Autenticación- CVE-2025-41646 - Bypass crítico de autenticación 🔓 CVE-2025-41646 - RevPi WebStatus Bypass de Autenticación PoC Una vulnerabilidad crítica de bypass de autenticación CVE-2025-41646 en RevPi WebStatus ≤ v2.4.5 permite a un atacante iniciar sesión...

CVE-2024-7928

CVE-2024-7928: Vulnerabilidad de lectura arbitraria de archivos en FastAdmin V1.3.4.20220530 CVEHunter es una herramienta de detección y explotación de vulnerabilidades para recuperar los detalles de la base de datos de instancias de FastAdmin para CVE-2024-7928, con mayor precisión y concurrenci...

UBUNTU-CVE-2026-79677

Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lost time outs for asynchronous WebSocket writes. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through...

CVE-2026-79677

Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lost time outs for asynchronous WebSocket writes. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through...

CVE-2012-2122-Home-Lab

INGLÉS ABAJO CVE-2012-2122 Laboratorio Local de Omisión de Autenticación de MySQL Este laboratorio es un ejemplo de demostración de la vulnerabilidad CVE-2012-2122 - MySQL Authentication Bypass Se debe a un error en la comparación de los valores de las contraseñas en MySQL versión 5.5.23 o inferi...

CVE-2026-79677

A concurrency bug in Apache Tomcat allows an attacker to trigger a denial of service (DoS) by causing lost timeouts during asynchronous WebSocket writes . This vulnerability affects the following versions: 11.0.0-M1 through 11.0.25 , 10.1.0-M1 through 10.1.59 , and 9.0.0.M1 through 9.0.121 . Addi...

CVE-2026-79677

Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lost time outs for asynchronous WebSocket writes. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through...

EUVD-2026-85055

The WPC Smart Compare for WooCommerce WordPress plugin before 6.6.1 does not apply WordPress's post-password protection when returning product content through its comparison handler, allowing unauthenticated users to read the description of password-protected products...

Next.JS-CVE-2025-29927

Escáner de Vulnerabilidades de Next.js CVE-2025-29927 Una herramienta de seguridad para detectar y verificar aplicaciones Next.js vulnerables a CVE-2025-29927 Bypass de Autenticación. Características 🎯 Detección precisa de Next.js con múltiples métodos de verificación 🔍 Comparación precisa de...

CVE-2026-95270

A flaw has been found in dgtlmoon changedetection.io up to 0.60.7. The affected element is the function checkpassword of the file changedetectionio/flaskapp.py of the component Hash Comparison. This manipulation of the argument Password causes observable timing discrepancy. The attack is possible...

CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity

CVE-2026-5556 – Bypass del controlador de admisión de Kubernetes mediante sensibilidad a mayúsculas y minúsculas Código del programa webhook de admisión en Python + exploit root@kitploit: !/usr/bin/env python3 admissionwebhook.py - Vulnerable webhook that rejects pods with specific name from flas...

Password-Analysis

Password Analysis: Based on Entropy and Dictionaries of Weak Passwords Script in Go that analyzes a list of passwords. Download and Compilation You can download the binary directly from the releases. If you prefer to compile it manually, consider the following steps. root@kitploit: git clone...

Oracle-mysql-CVE-2012-2122

Vulnerabilidad de omisión de autenticación de MySQL CVE-2012-2122 Al conectarse a MariaDB/MySQL, la contraseña introducida se compara con la contraseña correcta esperada. Debido a un manejo incorrecto, incluso si memcmp devuelve un valor distinto de cero, MySQL considera que ambas contraseñas son...