TitanNit Web Control 2.01/Atemio 7600 - Remote Code Execution

The device contains a command injection caused by the 'getcommand' query in the application, letting unauthorized attackers execute system commands with root privileges, exploit requires attacker to send crafted requests. id: CVE-2024-9166 info: name: TitanNit Web Control 2.01/Atemio 7600 - Remot...

Contest Gallery - Broken Access Control

Contest Gallery from n/a through 23.1.2 contains an exposure of sensitive information to an unauthorized actor caused by insufficient access controls, letting attackers access sensitive data, exploit requires no specific conditions. id: CVE-2024-43283 info: name: Contest Gallery - Broken Access...

Cluster Control CMON API - Directory Traversal

Directory Traversal vulnerability in Severalnines Cluster Control 1.9.8 before 1.9.8-9778, 2.0.0 before 2.0.0-9779, and 2.1.0 before 2.1.0-9780 allows a remote attacker to include and display file content in an HTTP request via the CMON API. id: CVE-2024-41628 info: name: Cluster Control CMON API...

Templately <= 3.1.2 - Broken Access Control

Templately allow an attacker to logout users who signed in to their templately account, so you can sign in your templately account to exploit this vulnerability. Go to http://IP/wordpress/wp-admin/admin.php?page=templately&path=sign-in to sign in then logout. id: CVE-2024-47308 info: name:...

Keycloak < 24.0.5 - Broken Access Control

A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise. id: CVE-2024-3656 info...

CData Arc < 23.4.8839 - Path Traversal

A path traversal vulnerability exists in the Java version of CData Arc 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions. id: CVE-2024-31850 info: name: CData Arc 23.4.88...

DATAGERRY - Improper Access Control

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information. id: CVE-2024-50967 info: name: DATAGERRY -...

ipTIME A2004 - Unauthorized Access

An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication. id: CVE-2024-54763 info: name: ipTIME A2004 - Unauthorized Access author: ritikchaddha severity: medium description: | An access control...

extract75-cve-2020-13995

Control Flow Hijack Exploit for CVE-2020-13995 Build it: make Run it: make run Mayhem it: docker tag extract75-cve-2020-13955 /extract75-cve-2020-13955 docker push /extract75-cve-2020-13955 mayhem run --image /extract75-cve-2020-13955 \ --project /extract75 . Default runtime is 600 seconds;...

CVE-2026-9268

GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with limited permissions to modify project CI/CD deployment rollback settings without...

splitting-the-email-atom

Splitting The Email Atom: Exploiting Parsers To Bypass Access Controls Welcome to the repo. This repository contains all the materials for my talk "Splitting The Email Atom:Exploiting Parsers To Bypass Access Controls". You can read about this research at:...

CVE-2023-31711

CVE-2023-31711 Incorrect Access Control in ZKTECO allows remote attackers to read any file via the administrative API. Installing required modules Inside the directory ZKTEco: $ pip install -r ./pyzatt/requirementsdev.txt Running the exploit Inside the directory ZKTEco: $ python exploit.py...

CVE-2025-32463

CVE-2025-32463 Detection Framework A comprehensive security monitoring and detection framework designed to identify exploitation attempts targeting the sudo chroot privilege escalation vulnerability CVE-2025-32463. This project demonstrates advanced threat detection methodologies, incident respon...

wordpress-jetpack-broken-access-control-vulnerable-application

wordpress-jetpack-broken-access-control-vulnerable-application This is a vulnerable application to test the exploit for the Jetpack 13.9.1 broken access control CVE-2024-9926. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is recommended using a...

CVE-2021-24006-Fortimanager-Exploit

CVE-2021-24006 – FortiManager Improper Access Control Exploit PoC PoC Proof of Concept - Educational Use Only Exploit for improper access to SD-WAN Orchestrator in FortiManager, exploiting access control flaw CWE-284. Description The CVE-2021-24006 vulnerability affects FortiManager versions 6.4....

CVE-2025-45422---Bbox

CVE-2025-45422: Proximus b-box UPnP Persistence & Access Control Bypass https://vulners.com/cve/CVE-2025-45422 This script demonstrates CVE-2025-45422 affecting Proximus b-box routers running firmware version 8c.725A. It leverages the router’s UPnP functionality to create arbitrary port forwardin...

CVE-2025-51862

CVE-2025-51862 Vulnerability description TelegAI, a web application for constructing and chatting with AI Characters, is vulnerable to Insecure Direct Object Reference IDOR in its chat component. An attacker can exploit this IDOR to tamper other users' conversation. Additionally, malicious conten...

CVE-2023-22515

CVE-2023-22515 Key Information about CVE-2023-22515 Affected Product: Atlassian Confluence Data Center & Confluence Server. Disclosure Date: 04/10/2023. Severity: Critical CVSS 10.0. Vulnerability Type: Broken Access Control / Improper Authorization → allows an attacker to remotely create an admi...

CVE-2019-13403

CVE-2019-13403 Report: May 2019 Fix: May 2019 Credit: B3Bo1d Description Temenos CWX version 8.9 has an Broken Access Control vulnerability in the module /CWX/Employee/EmployeeEdit2.aspx, leading to the viewing of user information. PoC Before After Reference https://vulners.com/cve/CVE-2019-13403...

CVE-2017-16245

CVE-2017-16245 Source code for CVE-2017-16245 Avecto Defendpoint bypass originally disclosed by Nettitude The PowerShell implementation of CVE-2017-16245 can and should be copied and pasted straight into PowerShell. If PowerShell is blocked, try to execute powershell.exe from the command prompt...