CVE-2018-13257

Suplantación de cabecera de host en ticket CAS de Blackboard Learn Un módulo de autenticación dentro de Blackboard Learn es susceptible a la suplantación de la cabecera de host HTTP durante la validación del ticket de servicio del Servicio Central de Autenticación CAS. Un ticket de servicio CAS...

CVE-2026-55584

CVE-2026-55584 - Bypass de la lista de permitidos de IP de phpSysInfo CWE-290, CVSS 7.5 Alta, phpSysInfo = 3.4.5 Refs: GHSA-786w-p5pm-cvgh, CVE.org PSIALLOWED resuelve la IP del cliente a partir de las cabeceras controladas por el atacante X-Forwarded-For luego Client-IP antes de recurrir a...

N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 id: CVE-2026-86206 info: name: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing author:...

CVE-2025-2825-CrushFTP-AuthBypass

🚨 CVE-2025-2825 – Omisión de Autenticación en CrushFTP 🔎 Descripción General CVE-2025-2825 es una vulnerabilidad crítica de omisión de autenticación que afecta a CrushFTP , un servidor de transferencia segura de archivos ampliamente utilizado. La falla permite a atacantes remotos omitir la...

0xMiddleware

CVE-2025-29927: Next.js Middleware Exploit This tool demonstrates and automates the exploitation of CVE-2025-29927 , a vulnerability in Next.js that allows an attacker to bypass middleware checks like authentication by abusing the internal header x-middleware-subrequest. 🔧 How the Exploit Works...

CVE-2026-20896-Gitea-Authentication-Bypass

CVE-2026-20896 - Gitea ≤1.26.2 Authentication Bypass 1. What is Gitea? Gitea is a lightweight, open-source Git hosting platform that allows organizations and developers to manage source code repositories, track issues, review changes, and collaborate on software projects. It provides functionalit...

CVE-2022-31813

Iniciar el laboratorio docker compose up --build Acceso normal root@kitploit: GET / HTTP/1.1 Host: 127.0.0.1:8080 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/145.0.0.0 Safari/537.36 Accept:...

CVE-2022-46169

CVE-2022-46169 Exploit para CVE-2022-46169 Cacti versiones anteriores a 1.2.3 Aquí remoteclientauthorized verifica el nombre del host del cliente en la tabla poller para la entrada root@kitploit: function remoteclientauthorized // ... $clientaddr = getclientaddr; // ... $clientname =...

CVE-2025-29927

CVE-2025-29927 - Next.js Middleware 15.2.2 - Bypass de Autorización ⚠️ Bypass crítico de autenticación en NextJS Middleware 🛠️ Implementación del PoC por @zs1n 💡 Resumen NextJS es un framework web popular basado en React que tiene una vulnerabilidad de autenticación que afecta a versiones...

CVE-2026-35616-check

CVE-2026-35616 Vulnerability Assessment Tool Safely detect whether a FortiClient EMS server is vulnerable to CVE-2026-35616 without causing any disruption. See the full write-up on the Bishop Fox blog. Description CVE-2026-35616 is a pre-authentication API bypass in FortiClient EMS 7.4.5 and 7.4....

CVE-2026-35616

CVE-2026-35616 Author: wa6n3r | GitHub | Web Description Exploitation of the certificate chain verification bypass vulnerability in the Fortinet API. The script automatically discovers valid Common Names CN from various sources, generates a fake client certificate, and performs requests to...

CVE-2025-29927

CVE-2025-29927 — Next.js bypass de autorización en middleware Brevemente: vulnerabilidad en el middleware de Next.js que permite eludir las comprobaciones de autorización mediante la falsificación del encabezado x-middleware-subrequest. Contenido CVE-2025-29927 — Next.js bypass de autorización en...

CVE-2019-17240

CVE-2019-17240 Exploit Las versiones hasta la 3.9.2 inclusive del CMS Bludit son vulnerables a una evasión del mecanismo anti-fuerza bruta que está implementado para bloquear a los usuarios que hayan intentado iniciar sesión incorrectamente 10 veces o más. La vulnerabilidad fue descubierta por...

Astra Linux – Vulnerability in python-webob

WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user will be redirected to using Python’s urlparse function, and joining that parsed URL to the base URL. However, the...

CVE-2026-88004

Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forwardedHeaders inspect req.Header but not req.Trailer, allowing an unauthenticated client to submit an aliasing or trusted...

EUVD-2026-75538

Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forwardedHeaders inspect req.Header but not req.Trailer, allowing an unauthenticated client to submit an aliasing or trusted...

CVE-2026-88004 Traefik entrypoint header-name sanitization bypassed via request trailers

Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forwardedHeaders inspect req.Header but not req.Trailer, allowing an unauthenticated client to submit an aliasing or trusted...

CVE-2026-88004

Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forwardedHeaders inspect req.Header but not req.Trailer, allowing an unauthenticated client to submit an aliasing or trusted...

CVE-2026-88004 Traefik entrypoint header-name sanitization bypassed via request trailers

Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forwardedHeaders inspect req.Header but not req.Trailer, allowing an unauthenticated client to submit an aliasing or trusted...

PT-2026-89452

Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forwardedHeaders inspect req.Header but not req.Trailer, allowing an unauthenticated client to submit an aliasing or trusted...