410 matches found
Damn-Vulnerable-Bank
Damn Vulnerable Bank GuΓa: https://rewanthtammana.com/damn-vulnerable-bank/ Acerca de la aplicaciΓ³n Damn Vulnerable Bank estΓ‘ diseΓ±ada como una aplicaciΓ³n android intencionalmente vulnerable. Todos los detalles estΓ‘n documentados en la guΓa, aquΓ. PrΓ³ximas Sesiones NoNameCon...
CasaOS < 0.4.4 - Authentication Bypass via Random JWT Token
CasaOS is an open-source Personal Cloud system. Unauthenticated attackers can craft arbitrary JWTs and access features that usually require authentication and execute arbitrary commands as root on CasaOS instances. This problem was addressed by improving the validation of JWTs in commit 705bf1f...
Strapi-RCE
Strapi-RCE Script de explotaciΓ³n que muestra una combinaciΓ³n de CVE-2019-18818 y CVE-2019-19609 para la ejecuciΓ³n remota de cΓ³digo no autenticada en Strapi CMS. Exploit Este script explota una vulnerabilidad en Strapi CMS versiones 3.0.0-beta.17.4 y anteriores, permitiendo la ejecuciΓ³n remota de...
CVE-2019-19609
CVE-2019-19609 Framework Strapi vulnerable a ejecuciΓ³n remota de cΓ³digo bueno, no encontrΓ© ningΓΊn exploit para CVE-2019-19609, asΓ que escribΓ uno. :/ Uso root@kitploit: python3 exploit.py Un video https://youtu.be/alhZJmuUd2s MΓ‘s informaciΓ³n https://hack-fast.herokuapp.com/cve/CVE-2019-19609...
CVE-2025-51864
CVE-2025-51864 DescripciΓ³n de la vulnerabilidad AIBOX es una aplicaciΓ³n web para explorar consultorΓa de IA y probar mΓΊltiples LLM. Permite a los usuarios chatear con varios LLM. Existe una vulnerabilidad de cross-site scripting XSS reflejado en el componente de chat, que podrΓa provocar el robo ...
CVE-2019-19609-POC-Python
The script will try to reset the password to the one declared in the "updatedpass" variable, if it succeeds - it will give a JWT token from Strapi and use it to execute commands. Executing bind commands won't work unless sending a reverse shell payload, with bash or python or whatever. You can...
CVE-2019-19609-EXPLOIT
CVE-2019-19609-EXPLOIT Exploit para CVE-2019-19609 en Strapi ejecuciΓ³n remota de cΓ³digo en strapi-3.0.0-beta.17.7 o anterior. Me enfrentΓ© a un escenario con esta vulnerabilidad, pero sin un exploit pΓΊblico. DecidΓ crear el mΓo propio y compartirlo aquΓ. InstalaciΓ³n root@kitploit: git clone...
TokenBreaker
TokenBreaker Token Breaker se centra en 2 vulnerabilidades particulares relacionadas con tokens JWT. None Algorithm RSAtoHMAC Consulte este enlace para conocer mΓ‘s sobre la vulnerabilidad y cΓ³mo un atacante puede falsificar los tokens. Pruebe esta vulnerabilidad aquΓ Uso de TheNone root@kitploit:...
D-Link D-View 8 v2.0.1.28 - Authentication Bypass
Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28 id: CVE-2023-5074 info: name: D-Link D-View 8 v2.0.1.28 - Authentication Bypass author: DhiyaneshDK severity: critical description: | Use of a static key t...
Alibab-Nacos-Unauthorized-Reset-PWD
Vuln Impact An issue has been discovered in Nacos affecting Nacos = 2.2.0. When a user uses the default JWT Key, it will cause an attacker to reset the password of any user and take over the user account. Vuln Product Nacos = 2.2.0 version Vulnerability reappearance Step 1οΌGet username can use ol...
CVE-2026-1529-PoC-keycloak-unauthorized-registration-via-improper-invitation-token-validation
CVE-2026-1529 Keycloak Exploit Tool Keycloak: Unauthorized organization registration via improper invitation token validation Disclaimer This tool is for educational and security testing purposes only. Use only on systems you have explicit permission to test. Unauthorized access to computer syste...
CVE-2026-1529
CVE-2026-1529 Keycloak Exploit Tool CVE-2026-1529 : Keycloak - Unauthorized organization registration via improper invitation token validation β οΈ WARNING : This tool is for educational and authorized security testing purposes only. Unauthorized access to computer systems is illegal. π Table of...
ls-poc
CVE-2026-30368 Proof of concept !IMPORTANT This is patched and now requires credentials, use the workaround to perform actions on yourself. Introduction CVE-2026-30368 allows an attacker to control student devices via a weak authentication flaw in Lightspeed Classroom management. The POC poc.js...
CVE-2019-20933
CVE-2019-20933 InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret aka shared secret. see https://nvd.nist.gov/vuln/detail/CVE-2019-20933 For more details PoC This PoC exploit...
CVE-2019-19609
CVE-2019-19609 Strapi Remote Code Execution Usage python3 exploit.py rhost jwt url lhost Exploit POC https://bittherapy.net/post/strapi-framework-remote-code-execution/...
CVE-2018-1002105
CMPT733-Group110x90 CVE-2018-1002105 Miembros : Abhishek Rungta, Shubham Saini, Siddhant Sood ConfiguraciΓ³n del Entorno Una mΓ‘quina virtual Linux como Ubuntu 20.04 Minikube para el despliegue local de Kubernetes Cualquiera de estas versiones antiguas 1.0.xβ 1.9.x, 1.10.0β1.10.10, 1.11.0β1.11.4,...
CVE-2022-51016
PocketMine-MP 3.x before 3.27.0 does not implement Minecraft Bedrock protocol encryption, so the server cannot verify that a connecting client possesses the private key corresponding to its login token. An attacker who captures a valid login from another player's session for example by tricking t...
CVE-2022-51016 PocketMine-MP 3.x before 3.27.0 Authentication Bypass via Login Replay
PocketMine-MP 3.x before 3.27.0 does not implement Minecraft Bedrock protocol encryption, so the server cannot verify that a connecting client possesses the private key corresponding to its login token. An attacker who captures a valid login from another player's session for example by tricking t...
CVE-2026-86195
grav-plugin-api versions 1.0.0 through 1.0.19 contain a privilege escalation vulnerability in the InvitationsController . The stripSuperFlags() method removes nested super flags but fails to strip dot-keyed equivalents such as api.super . A non-super user with api.access and api.users.write permi...
CVE-2026-78970
JeecgBoot 3.9.2 and earlier contains an authorization bypass vulnerability in the SystemApiController component. An authenticated attacker with any valid JWT token can access multiple API endpoints including queryAllUser, queryUsersByUsernames, queryUserById, and queryUsersByIds to retrieve...