CVE-2023-34362

CVE-2023-34362 POC per CVE-2023-34362 che interessa MOVEit Transfer Analisi Tecnica Un'analisi tecnica della causa principale della vulnerabilità è disponibile sul blog: Riepilogo Questo POC sfrutta un'iniezione SQL per ottenere un token di accesso API da sysadmin e poi usa tale accesso per abusa...

CVE-2022-22954-Testi

CVE-2022-22954-Testi Test della vulnerabilità CVE-2022-22954 VMware Workspace ONE Access e Identity Manager contengono una vulnerabilità di esecuzione di codice remoto dovuta all'iniezione di template lato server. Un attore malintenzionato con accesso alla rete può attivare un'iniezione di templa...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access e Identity Manager RCE tramite SSTI. CVE-2022-22954 - PoC SSTI Uso: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file |...

Oracle-Identity-Manager-CVE-2025-61757

Oracle Identity Manager CVE-2025-61757 Schwachstellenerkennungstool v2.2 🔥 Hintergrund der Schwachstelle Kürzlich wurde eine schwere Remote-Code-Ausführungsschwachstelle CVE-2025-61757 in Oracle Identity Manager aufgedeckt. Diese Schwachstelle besteht aufgrund einer unsachgemäßen Verarbeitung von...

CVE-2026-81777 WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability

Authentication Bypass by Spoofing vulnerability in WPDeveloper Essential Addons for Elementor allows Identity Spoofing. This issue affects Essential Addons for Elementor: from n/a through 6.8.0...

EUVD-2026-67656

Authentication Bypass by Spoofing vulnerability in WPDeveloper Essential Addons for Elementor allows Identity Spoofing. This issue affects Essential Addons for Elementor: from n/a through 6.8.0...

CVE-2026-81777

Essential Addons for Elementor (WordPress plugin by WPDeveloper) versions up to and including 6.8.0 are affected by an Authentication Bypass by Spoofing vulnerability that enables Identity Spoofing . The issue was discovered by Gaurav popalghat and scored CVSS 5.3 (MEDIUM) , with a network attack...

GrafanaSCIMalform

Grafana SCIMalform CVE-2025-41115 Übersicht Dieses Repo enthält meine Forschung zur Schwachstelle CVE-2025-41115 in der SCIM-Komponente von Grafana Enterprise. Es besteht aus einem Teststand mit verwundbarer Anwendung und Exploit-Code. Referenzen Nur ein paar nützliche Referenzen: NIST -...

CVE-2023-49496_PoC

CVE-2023-49496PoC Beschreibung UCServer ist ein fortschrittlicher Unified-Communications-Server. Bei UCServer von Shanghaier Shupin Informationstechnologie GmbH besteht eine SQL-Injection-Schwachstelle. Angreifer können diese Schwachstelle ausnutzen, um vertrauliche Datenbankinformationen zu...

VMWare_CVE-2022-22954

VMWareCVE-2022-22954 CVE-2022-22954 è una vulnerabilità di server-side template injection in VMware Workspace ONE Access e Identity Manager Risultato della ricerca Shodan PoC Segui Youtube Twitter...

CVE-2022-33174

CVE-2022-33174 Powertek PDU-Identitätsumgehung Optionale Argumente: -h, --help Zeigt diese Hilfemeldung an und beendet das Programm -u url, --url url Ziel-URL, z.B. "http://127.0.0.1" -f file, --file file Ziele in Datei, z.B. "ip.txt" Verwendung python3 CVE-2022-33174.py -u http://127.0.0.1 pytho...

CVE-2019-13496

CVE-2019-13496 शोषण शीर्षक: OTP bypass Filed Integrity check दिनांक: 07/10/2019 शोषण लेखक: Furqan Khan विक्रेता होमपेज: https://www.oneidentity.com/ सॉफ़्टवेयर लिंक: https://www.oneidentity.com/products/cloud-access-manager/ संस्करण: 8.1.3 परीक्षण किया गया: Kali Linux , Windows 7 ,Ubantu 16.04 OT...

CVE-2022-22954-PoC

CVE-2022-22954 PoC VMware Workspace ONE Access und Identity Manager RCE über SSTI. CVE-2022-22954 - PoC SSTI Verwendung: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan |...

CVE-2021-38666-poc

CVE-2021-38666-poc Devi verificare la tua identità e ottenere l'approvazione...

lightwave

Cos'è Lightwave Project Lightwave è un progetto open source composto da servizi di gestione delle identità e degli accessi di livello enterprise, progettati per affrontare le sfide critiche di sicurezza, governance e conformità per le app cloud-native all'interno dell'impresa. Attraverso...

FortiOS - Insecure LDAP Configuration Detection

The FortiGate LDAP configuration was detected to be insecure due to missing ca-cert, secure LDAPS, or server-identity-check, potentially exposing LDAP communications to credential interception or man-in-the-middle attacks under specific network conditions. id: CVE-2019-5591 info: name: FortiOS -...

Zitadel - User Registration Bypass

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...

Shibboleth OIDC OP <3.0.4 - Server-Side Request Forgery

The Shibboleth Identity Provider OIDC OP plugin before 3.0.4 is vulnerable to server-side request forgery SSRF due to insufficient restriction of the requesturi parameter, which allows attackers to interact with arbitrary third-party HTTP services. id: CVE-2022-24129 info: name: Shibboleth OIDC O...

kratos

Chat · Discussioni · Newsletter · Documentazione · Prova Ory Network · Lavora con noi Ory Kratos è un sistema di gestione delle identità e degli utenti basato su API per applicazioni cloud native. Centralizza i flussi di login, registrazione, recupero, verifica e gestione del profilo in modo che ...

COVIDSafe-CVE-2020-12856

COVIDSafe-CVE-2020-12856: Ein stilles Pairing-Problem in Bluetooth-basierten Kontaktverfolgungs-Apps Autoren: Jim Mussared George Robotics, Alwen Tiu The Australian National University Es wurde eine Schwachstelle in der Android-Version der australischen COVIDSafe-Kontaktverfolgungs-App v1.0.17 un...