Lucene search
+L

52 matches found

Kitploit
Kitploit
added 2026/08/31 4:37 a.m.5 views

Teldat-Router-CVE-2022-POC

Teldat Router CVE-2022-39996 & CVE-2022-39997 POC Proof of Concept for two vulnerabilities discovered in Teldat RS123 / RS123w routers. Overview CVE ID| Type| CWE| CVSS| Severity ---|---|---|---|--- CVE-2022-39996| Reflected XSS| CWE-79| 6.1| Medium CVE-2022-39997| Weak Password| CWE-521| 9.8|...

8CVSS6AI score0.0034EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/28 11:38 a.m.4 views

CVE-2020-24033

Die neueste Version von fs.com S3900 24T4S 1.7.1 und alle vorherigen Versionen, CSRF Backstage Admin Das Formular verfügt über keine Authentifizierungs- oder Token-Authentifizierungsmechanismen, daher besteht eine Cross-Site-Request-Forgery Benutzerkonto hinzufügen, um einen Benutzer mit...

8.8CVSS7.3AI score0.00971EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2026/08/12 1:54 p.m.43 views

Exploit for CVE-2026-72898

🔴 CVE-2026-72898 - Unauthenticated SQL Injection Met...

10CVSS6.4AI score0.79215EPSS
SaveExploits7
OSV
OSV
added 2026/08/05 6:59 a.m.15 views

CVE-2026-71205 changedetection.io - No Rate Limiting on /login Enables Unlimited Password Brute-Force

changedetection.io's /login route checks the submitted password against a single PBKDF2-HMAC-SHA256 hash with no per-IP or per-session rate limiting, failed-attempt counter, or lockout no rate-limiting library is present in requirements.txt...

6.5CVSS5.3AI score
SaveExploits0References3
OSV
OSV
added 2026/08/03 3:43 p.m.25 views

CVE-2026-41452 Krayin CRM 2.2.4 Missing Authentication via install/api/admin-config-setup

Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator account by sending a crafted HTTP POST request with the X-Requested-With: XMLHttpRequest header to bypass the CanInstall...

9.3CVSS5.8AI score
SaveExploits0References5
NVD
NVD
added 2026/07/22 2:17 p.m.16 views

CVE-2026-16232

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security polici...

9.8CVSS0.72051EPSS
SaveExploits4References2
NVD
NVD
added 2026/07/20 7:17 p.m.11 views

CVE-2026-61425

Joomla Extension - balbooa.com - Authentication bypass in Gridbox 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access...

9.4CVSS0.00573EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/20 6:45 p.m.8 views

CVE-2026-61425

Joomla Extension - balbooa.com - Authentication bypass in Gridbox 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access...

9.4CVSS5.3AI score0.00573EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2026/07/16 11:16 p.m.19 views

CVE-2026-43978

wger is a free, open-source workout and fitness manager. In versions prior to 2.6, a gym trainer can escalate their session to any higher-privileged account gym manager, general manager by chaining two calls to the trainer-login endpoint. Once a trainer performs a legitimate switch into a...

8.1CVSS0.00371EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/08 12:00 a.m.20 views

PT-2026-56482

Name of the Vulnerable Software and Affected Versions Portainer Community Edition versions 2.39.0 through 2.39.3 Portainer Community Edition versions 2.40.0 through 2.42.x Description Unauthenticated access to specific endpoints is possible during the five-minute setup window of uninitialized...

7.1CVSS5.9AI score0.00493EPSS
SaveExploits1References15
RedhatCVE
RedhatCVE
added 2026/06/25 6:44 p.m.21 views

CVE-2026-47102

A flaw was found in LiteLLM. A user with access to the /user/update endpoint can exploit a privilege escalation vulnerability. By modifying their own userrole to proxyadmin, an attacker can gain full administrative access to LiteLLM, including control over all users, teams, keys, models, and prom...

8.8CVSS6AI score0.00654EPSS
SaveExploits2References10
RedhatCVE
RedhatCVE
added 2026/06/09 8:59 p.m.16 views

CVE-2026-41448

AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability that allows unauthenticated attackers to gain full admin access by supplying a path traversal sequence in the Admin-Token cookie, exploiting unsanitized string concatenation in the token file path...

9.4CVSS5.6AI score0.00542EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/21 8:34 p.m.13 views

CVE-2026-47102 LiteLLM < 1.83.10 Privilege Escalation via User Update

LiteLLM prior to 1.83.10 allows a user to modify their own userrole via the /user/update endpoint. While the endpoint correctly restricts users to updating only their own account, it does not restrict which fields may be changed. A user who can reach this endpoint can set their role to proxyadmin...

8.7CVSS7.3AI score
SaveExploits0References14
Rapid7 Blog
Rapid7 Blog
added 2026/05/14 4:00 p.m.19 views

The Dark Side of Efficiency: When Network Controllers Become "God Mode" for Attackers

Imagine you build a massive corporate campus with every security control money can buy. Blast resistant doors. Biometric scanners. Guards at every entrance. Maybe something similar to the infamous Death Star. On paper, it looks fantastic. Then, somewhere along the way, somebody decides the...

10CVSS6.1AI score0.91522EPSS
SaveExploits4
Cvelist
Cvelist
added 2026/05/12 9:43 p.m.48 views

CVE-2026-42844 Grav: Low-privileged API users can create super-admin accounts via blueprint-upload

Grav is a file-based Web platform. In Grav 2.0.0-beta.2, a low-privileged authenticated API user with api.media.write can abuse /api/v1/blueprint-upload to write an arbitrary YAML file into user/accounts/, then log in as the newly created account with api.super privileges. This results in full...

8.7CVSS0.00336EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/03/28 4:56 a.m.10 views

CVE-2026-33890

MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.71, an unauthenticated attacker can register an arbitrary passkey and subsequently authenticate with it to obtain a full admin session. The application exposes passkey registration endpoints without...

9.8CVSS6AI score0.00492EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/03/27 12:38 a.m.9 views

EUVD-2026-16519

MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.71, an unauthenticated attacker can register an arbitrary passkey and subsequently authenticate with it to obtain a full admin session. The application exposes passkey registration endpoints without...

9.3CVSS5.9AI score0.00492EPSS
SaveExploits1References2
CVE
CVE
added 2026/03/27 12:38 a.m.30 views

CVE-2026-33890

CVE-2026-33890 is a pre-1.8.71 issue in MyTube (self-hosted downloader/player) where unauthenticated users can register an arbitrary passkey via exposed endpoints and then authenticate with that passkey to obtain a full admin session. The root cause is unauthenticated passkey registration that im...

9.8CVSS5.9AI score0.00492EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2026/02/25 3:21 p.m.45 views

CVE-2025-1242

CVE-2025-1242 affects Gardyn Home Kit via Gardyn IoT Hub. Root cause: hard-coded administrative credential iothubowner exposed across multiple vectors (API responses, mobile app, and device firmware), enabling unauthenticated full admin access to the hub and connected devices. Connected documents...

9.3CVSS5.4AI score0.00517EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2026/02/19 12:00 a.m.29 views

PT-2026-42539

Name of the Vulnerable Software and Affected Versions LiteLLM versions prior to 1.83.10 Description An issue exists where the '/user/update' endpoint does not restrict which fields a user can modify when updating their own account. This allows a user to change their user role to proxy admin,...

9CVSS5.3AI score0.00654EPSS
SaveExploits2References28
Rows per page
Query Builder