Zabbix-cve-2022-23131-SSO-bypass

Zabbix-cve-2022-23131-SSO-bypass To bypass the Zabbix SSO login portal,make sure to take the cookie from your browser.Replace it with the one, that is in the script. Make sure to also change the username you wnat to login as and run the exploitmost of the time its going to be "Admin" in Zabbix. N...

CVE-2020-27368

CVE-2020-27368 TOTOLINK-A702R-V1.0.0-B20161227.1023 Directory Indexing Vulnerability Description Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /icons/ directories via GET Parameter. Additional Information Remediation disabling...

Array Networks SSL VPN - Login Panel Detection

Array Networks AG Series SSL VPN appliances provide enterprise remote access. The web login portal Pilot is typically accessible on port 8889 or via /prx/ paths. !/usr/bin/env python3 -- coding: utf-8 -- """Array Networks AG Series SSL VPN appliances provide enterprise remote access.""" from...

WebCTRL OEM <= 6.5 - Cross-Site Scripting Detection

WebCTRL OEM 6.5 and prior is susceptible to a cross-site scripting vulnerability because the login portal does not sanitize the operatorlocale GET parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WebCTRL OEM 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

ShinyHunters escalates Canvas attacks with school login defacements

Days after confirming a major data breach, Instructure is now facing a second blow. Earlier this week, Instructure confirmed a major data breach affecting its cloud‑hosted Canvas environment, with the ShinyHunters group claiming it stole hundreds of millions of records tied to thousands of school...

CVE-2023-40519

A cross-site scripting XSS vulnerability in the bpk-common/auth/login/index.html login portal in Broadpeak Centralized Accounts Management Auth Agent 01.01.00.19219575ee9195b0, 01.01.01.30097902fd999e76, and 00.12.01.95655881254b459 allows remote attackers to inject arbitrary web script or HTML v...

EUVD-2018-3481

Malware in sbrugna...

EUVD-2020-16573

Malware in sbrugna...

EUVD-2020-19880

Malware in sbrugna...

EUVD-2022-33639

Malicious code in bioql PyPI...

EUVD-2021-30021

Malicious code in bioql PyPI...

EUVD-2021-31096

Malicious code in bioql PyPI...

PoisonSeed Attack Turns Out to Be Not a FIDO Bypass After All

Cybersecurity firm Expel, in an update shared on July 25, 2025, said it's retracting its findings about a phishing attack that it said leveraged cross-device sign-in to get around FIDO account protections despite being not in physical proximity to the authenticating client device. "The evidence...

CVE-2024-3378

A vulnerability has been found in iboss Secure Web Gateway up to 10.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /login of the component Login Portal. The manipulation of the argument redirectUrl leads to cross site scripting. The attack...

CVE-2022-29152

The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page...

CVE-2022-29296

A reflected cross-site scripting XSS vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2021-34218

Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /add/ , /img/, /js/, and /mobile directories via GET Parameter...

Clinic's Patient Management System 1.0 - Unauthenticated RCE

This module exploits an SQL injection in login portal, which allows to log in as admin. Next, it allows the attacker to upload malicious files through user modification to achieve RCE. Module Options msf use exploit/multi/http/clinic/pmssqlitorce msf undefinedpmssqlitorce show actions ...actions...

VulnCheck KEV: CVE-2024-3378

A vulnerability has been found in iboss Secure Web Gateway up to 10.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /login of the component Login Portal. The manipulation of the argument redirectUrl leads to cross site scripting. The attack...

CVE-2024-44349

A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows unauthenticated attackers to execute arbitrary SQL commands via the username parameter and disclosure of some data in the underlying DB...