CVE-2025-3639

CVE-2025-3639 PoC - Обход аутентификации Liferay Portal/DXP Этот репозиторий содержит Proof of Concept PoC для CVE-2025-3639 — уязвимости обхода аутентификации в Liferay Portal версии 7.3.0–7.4.3.132 и Liferay DXP различные версии от 2024.Q1 до 2025.Q1.6. PoC демонстрирует, как...

zyxel-social-login-bypass-cve-2026-8508

CVE-2026-8508: Zyxel-Captive-Portal-Bypass über vertrauenswürdige, vom Browser übermittelte Facebook-Identität Dieses Repository bündelt den öffentlichen Writeup, das Schnellverifizierungsskript und ausgewählte unterstützende Artefakte für CVE-2026-8508. Worum es geht CVE-2026-8508 ist eine...

CVE-2026-9198

🚨 CVE-2026-9198 IBM Langflow OSS RCE non autenticata tramite bypass del login automatico 📋 Panoramica CVE-2026-9198 è una vulnerabilità critica di Remote Code Execution RCE non autenticata in IBM Langflow OSS. Questo exploit combina due vulnerabilità: CVE-2026-9103 : Bypass del login automatico c...

CVE-2026-9198

CVE-2026-9198 - IBM Langflow Nicht authentifizierte RCE per Auto-Login-Bypass PoC zu Bildungszwecken Dieses Repository bietet einen Proof of Concept zu Bildungszwecken für CVE-2026-9198 , das IBM Langflow OSS betrifft. Der PoC poc.py zeigt, wie ein nicht authentifizierter Angreifer Folgendes...

LoHongCam-CVE-2021-33044

CVE-2021-33044 Dahua IPC/VTH/VTO उपकरणों का प्रमाणीकरण बाईपास शोषण परिचय: लॉगिन प्रक्रिया के दौरान कुछ Dahua उत्पादों में पाई गई पहचान प्रमाणीकरण बाईपास भेद्यता। हमलावर दुर्भावनापूर्ण डेटा पैकेट बनाकर उपकरण की पहचान प्रमाणीकरण को बायपास कर सकते हैं। root@kitploit: use - python3 dahuaexploit.py...

bluebox

Nota: este repositório faz referências a repositórios externos conhecidos como submodules do Git. Após clonar este repositório, certifique-se de executar os seguintes comandos para clonar esses submodules: root@kitploit: git submodule init git submodule update BlueBox BlueBox é uma coleção de...

Sophos-Vulnerability

Analisi della Vulnerabilità CVE-2022-1040 Sophos RCE Nel gruppo di ricerca Toasec, dedicato alla cybersecurity offensiva, ci siamo dati il compito di condurre l'analisi su questa vulnerabilità nei firewall Sophos. Tale vulnerabilità, come molte altre, può essere segnalata e trovata se sai cercare...

Vue Vben Admin - Default Credentials

Vue Vben Admin 2.10.1 contains a broken authentication caused by hardcoded credentials in the backend, letting attackers log in without proper authorization, exploit requires access to the login interface. id: CVE-2025-25570 info: name: Vue Vben Admin - Default Credentials author: 0xAkoko severit...

AVTECH DVR - Login Verification Code Bypass

AVTECH DVR products are vulnerable to verification code bypass just by entering the "login=quick" parameter to bypass verification code. id: CVE-2013-4982 info: name: AVTECH DVR - Login Verification Code Bypass author: ritikchaddha severity: low description: | AVTECH DVR products are vulnerable t...

CVE-2022-23131

Vulnerabilidade de bypass de login SAML SSO do Zabbix CVE-2022-23131 Ambiente e PoC da CVE-2022-23131 Ambiente Você pode criar um Zabbix com SAML SSO seguindo os passos em Ambiente Zabbix para CVE-2022-23131. PoC O PoC foi modificado a partir de jweny Uso: root@kitploit: go run poc.go check -t...

ABO.CMS-Login-SQLi-CVE-2024-25227

ABO.CMS-Login-SQLi-CVE-2024-25227 SQLi non autenticata e bypass del login CVE-2024-25227 Data: 23/02/2024 Testato su ABO.CMS 5.8 Fornitore: ABO.CMS URL del fornitore:https://abocms.ru ABO.CMS 5.8 è vulnerabile a SQL Injection tramite il parametro tblogin, pagina di login admin. Il componente...

ABO.CMS-EXPLOIT-Unauthenticated-Login-Bypass-CVE-2024-25227

ABO.CMS-EXPLOIT-Unauthenticated-Login-Bypass-CVE-2024-25227 CVE-2024-25227 Exploit CVE-2024-25227 ist eine ABO.CMS 5.8 SQLi-Schwachstelle, die im Parameter "tblogin" gefunden wurde. PoC: root@kitploit: POST /login.aspx HTTP/1.1 Host: localhost Accept-Encoding: gzip, deflate User-Agent: Mozilla/5....

CVE-2023-4169_CVE-2023-3306_CVE-2023-4415

Ruijie-RG-EW1200G CVE-2023-4169CVE-2023-3306CVE-2023-4415 1. RG-EW1200G后台远程代码执行漏洞CVE-2023-3306 2. CVE-2023-4169 未授权任意密码修改CVE-2023-4169 3. 锐捷RG-EW1200G 登录绕过CVE-2023-4415 Atenção 我开发了一个用于本地测试和POC开发的工具，仅供技术学习参考。请不要将其用于非法目的。个人或组织使用本文提供的信息所造成的任何直接或间接后果和损失均由用户自行负责，与作者无关！！！ I have developed a tool for...

CVE-2026-33017-langflow-rce

CVE-2026-33017 — تنفيذ التعليمات البرمجية عن بُعد دون مصادقة في Langflow RCE نظرة عامة معرف CVE: CVE-2026-33017 البرنامج المتأثر: Langflow الإصدارات المعرضة للخطر: = 1.9.0 الخطورة: حرجة المؤلف: r3nsi15 التاريخ: 2026 الوصف يكشف Langflow عن نقطة نهاية عامة لبناء التدفقات...

exploits

exploits Le PoC pubblicate sono disponibili su exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

CVE-2021-32099_SQLi

CVE-2021-32099 SQLi Login-Bypass Nützlich, um die User Flag auf Pandora.htb zu lesen CVE-2021-32099 SQLi erlaubt es einem Angreifer, den Login zu umgehen. Ziel Exploit auf: Pandora FMS v7.0NG.742FIXPERL2020 Analyse Gelesen von cvedetail. Wir kennen den Endpunkt des Ziels:...

CVE-2026-6182-SQLI-auth

Bypass dell'Autenticazione tramite SQL Injection - Simple Content Management System PHP Descrizione Esiste una vulnerabilità di SQL Injection nella pagina di login dell'amministratore di Simple Content Management System PHP. Il parametro user non viene sanitizzato prima di essere passato alla que...

Ruijie RG-EW1200G Router Background - Login Bypass

A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2021-41647

CVE-2021-41647 CVE-2021-41647 Online-Food-Ordering-Web-App의 SQL 인젝션 Online-Food-Ordering-Web-App는 인증되지 않은 오류 기반 및 시간 기반 블라인드 SQL 인젝션 공격에 취약합니다. /login.php 페이지의 username 매개변수는 사용자 입력을 검증하지 않으므로, 공격자는 간단한 우회 기법으로 로그인을 우회할 수 있습니다. 애플리케이션 링크 Online-Food-Ordering-Web-App 영향을 받는 구성 요소 및 매개변수 URL:...

CVE_2022_3141

CVE-2022-3141: Iniezione SQL in ACS EDU 3rd Generation Questa repository contiene un'analisi di sicurezza dettagliata e un report per la vulnerabilità identificata come CVE-2022-3141, che riguarda il sistema smart-card ACS EDU 3rd Generation. Panoramica della vulnerabilità ID CVE : CVE-2022-3141...