Vmware-ESXI

CVE-2024-37085 ドメイン参加済みESXiハイパーバイザーに対する認証なしシェルアップロードから完全な管理者権限の取得。 ESXIVORTEXをダウンロード 詳細: 認証バイパスにより、vpxuser コンテキストでのシェルアップロードが可能になり、ドメイン参加済みESXiハイパーバイザー上で完全な管理者権限を取得します。 この脆弱性を悪用するには、ESXiシェルが有効になっている必要があります。 エクスプロイト: この脆弱性の悪用には、完全な管理者制御を達成するためにいくつかの手順を実行する必要があります。 これらすべての手順は、1つのPythonスクリプトで処理されます。...

CVE-2020-24033

fs.com S3900 24T4S の最新バージョン 1.7.1 およびそれ以前の全バージョン、CSRF バックステージ管理者 このフォームには認証またはトークン認証メカニズムが存在しないため、クロスサイトリクエストフォージェリ（ユーザーアカウント追加）により、フルアクセス権を持つユーザーを追加することが可能です。 S3900 24T4S 上のすべてのフォームはクロスサイトリクエストフォージェリ攻撃の対象となります。 root@kitploit: User Name admin guest admin2 Access Level 0...

Teldat-Router-CVE-2022-POC

Teldat ルーター CVE-2022-39996 & CVE-2022-39997 POC Teldat RS123 / RS123w ルーターで発見された 2 つの脆弱性の概念実証（POC）です。 概要 CVE ID| 種別| CWE| CVSS| 重要度 ---|---|---|---|--- CVE-2022-39996| 反射型 XSS| CWE-79| 6.1| 中 CVE-2022-39997| 脆弱なパスワード| CWE-521| 9.8| 重大 影響を受ける製品: Teldat RS123、RS123w ルーター CVE-2022-39997 - 脆弱なパスワード 説...

cve-2026-86060

CVE-2026-86060 — MikroTik RouterOS SSH 認証前の権限昇格による完全な管理者制御 項目| 値 ---|--- CVE| CVE-2026-86060 製品| MikroTik RouterOS SSH サービス 影響を受けるバージョン| RouterOS 6.x および 7.0.0 – 7.23.3 含む 修正済みバージョン| RouterOS 7.23.4 以降 脆弱性の種類| 認証前の権限昇格 認証バイパス / アクセス制御の不備 攻撃ベクトル| リモート、未認証、SSH サービス経由 前提条件| なし —...

Exploit for CVE-2026-86060

CVE-2026-86060 — MikroTik RouterOS SSH Pre-Authentication Priv...

Exploit for CVE-2026-72898

🔴 CVE-2026-72898 - Unauthenticated SQL Injection Met...

CVE-2026-1728

Tokens issued to a low-privileged user are not sufficiently restricted, allowing them to be used to access product-level Admin REST APIs. Exploitation of this vulnerability allows a low-privileged user to invoke the Admin REST APIs of WSO2 products, potentially leading to full administrative...

EUVD-2026-53821

Tokens issued to a low-privileged user are not sufficiently restricted, allowing them to be used to access product-level Admin REST APIs. Exploitation of this vulnerability allows a low-privileged user to invoke the Admin REST APIs of WSO2 products, potentially leading to full administrative...

CVE-2026-1728

Tokens issued to a low-privileged user are not sufficiently restricted, allowing them to be used to access product-level Admin REST APIs. Exploitation of this vulnerability allows a low-privileged user to invoke the Admin REST APIs of WSO2 products, potentially leading to full administrative...

CVE-2026-71205 changedetection.io - No Rate Limiting on /login Enables Unlimited Password Brute-Force

changedetection.io's /login route checks the submitted password against a single PBKDF2-HMAC-SHA256 hash with no per-IP or per-session rate limiting, failed-attempt counter, or lockout no rate-limiting library is present in requirements.txt...

CVE-2026-41452 Krayin CRM 2.2.4 Missing Authentication via install/api/admin-config-setup

Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator account by sending a crafted HTTP POST request with the X-Requested-With: XMLHttpRequest header to bypass the CanInstall...

CVE-2026-16232

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security polici...

CVE-2026-61425

Joomla Extension - balbooa.com - Authentication bypass in Gridbox 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access...

CVE-2026-61425

Joomla Extension - balbooa.com - Authentication bypass in Gridbox 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access...

CVE-2026-43978

wger is a free, open-source workout and fitness manager. In versions prior to 2.6, a gym trainer can escalate their session to any higher-privileged account gym manager, general manager by chaining two calls to the trainer-login endpoint. Once a trainer performs a legitimate switch into a...

PT-2026-56482

Name of the Vulnerable Software and Affected Versions Portainer Community Edition versions 2.39.0 through 2.39.3 Portainer Community Edition versions 2.40.0 through 2.42.x Description Unauthenticated access to specific endpoints is possible during the five-minute setup window of uninitialized...

CVE-2026-47102

A flaw was found in LiteLLM. A user with access to the /user/update endpoint can exploit a privilege escalation vulnerability. By modifying their own userrole to proxyadmin, an attacker can gain full administrative access to LiteLLM, including control over all users, teams, keys, models, and prom...

EUVD-2026-36297

Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, a user with Manage Server / ManageGuild, but without Manage Roles or Administrator, can configure the bot’s AutoRole feature to assign an arbitrary role to new members. If the select...

CVE-2026-41448

AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability that allows unauthenticated attackers to gain full admin access by supplying a path traversal sequence in the Admin-Token cookie, exploiting unsanitized string concatenation in the token file path...

CVE-2026-47102 LiteLLM < 1.83.10 Privilege Escalation via User Update

LiteLLM prior to 1.83.10 allows a user to modify their own userrole via the /user/update endpoint. While the endpoint correctly restricts users to updating only their own account, it does not restrict which fields may be changed. A user who can reach this endpoint can set their role to proxyadmin...