CVE-2025-41646---Critical-Authentication-Bypass-

CVE-2025-41646---Critical-Authentication-Bypass- CVE-2025-41646 - Critical Authentication bypass 🔓 CVE-2025-41646 - RevPi WebStatus Authentication Bypass PoC A critical authentication bypass vulnerability CVE-2025-41646 in RevPi WebStatus ≤ v2.4.5 allows an attacker to log in as admin without val...

CVE-2023-27742

CVE-2023-27742 IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login. Description IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login. Vulnerability Type SQL Injection Vendor of Product IDURAR...

CVE-2024-48197

CVE-2024-48197 AudioCodes MP-202b 中的反射型 XSS 描述 AudioCodes MP-202b v.4.4.3 中存在跨站脚本攻击漏洞，允许远程攻击者通过 Web 界面的登录页面提升权限。 附加信息 无 漏洞类型 反射型跨站脚本攻击 XSS 产品供应商 AudioCodes 受影响产品代码库 MP-202b - 4.4.3 受影响组件 设备 Web 界面的登录页面 攻击类型 远程 权限提升影响 是 攻击向量 必须诱使用户通过特制的 URL 登录应用程序。该特制 URL 随后可用于捕获登录凭据。 发现者 Gareth C - AnchorSec...

telnet-inetutils-auth-bypass-CVE-2026-24061

CVE-2026-24061: Omisión de Autenticación en GNU inetutils-telnetd Un laboratorio Docker para demostrar CVE-2026-24061 — una vulnerabilidad crítica de omisión de autenticación en GNU inetutils telnetd que permaneció sin parchear durante 11 años. La Vulnerabilidad Telnetd pasa la variable de entorn...

CVE-2026-29861

CVE-2026-29861 🛡️ CVE 공개: CVE-2026-29861 — PHP-MYSQL-User-Login-System의 SQL 인젝션 공개 날짜: 2026년 4월 10일 CVE ID: CVE-2026-29861 심각도: CRITICAL CVSS 9.8 🧩 요약 PHP-MYSQL-User-Login-System v1.0의 login.php 엔드포인트에서 심각한 SQL 인젝션 취약점이 발견되었습니다. 이 애플리케이션은 사용자 입력을 검증 없이 SQL 쿼리에 직접 포함시켜, 인증되지 않은 공격자가 인증을 우회하고 전체 관리자...

CVE-2020-5902

Readme F5 BIG-IP 任意文件读取+远程命令执行RCE root@kitploit: +-------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-5902 F5 BIG-IP Read File + RCE + +-------------------------------------------------------------+ + USE: python3 + +...

CVE-2025-65427

CVE-2025-65427: Authentication Rate Limiting Issue in Dbit N300 T1 Pro CVE ID: CVE-2025-65427 Date: 2025-12-16 Discoverer: Kirubel Product: Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router Firmware Version: V1.0.0 Description An issue was discovered in the Dbit N300 T1 Pro Easy Setup Wireless...

CVE-2025-63820

CVE-2025-63820 Submitter: Nicola Giuffrida Information Vendor: TOTOLINK Vendor's website: TOTOLINK Model: A720R Firmware version: V4.1.5cu.630B20250509 Firmware download address: TOTOLINK Vulnerability details When logging into the control panel, the username and password are sent in plain-text:...

Atlassian Questions For Confluence - Hardcoded Credentials

Atlassian Questions For Confluence contains a hardcoded credentials vulnerability. When installing versions 2.7.34, 2.7.35, and 3.0.2, a Confluence user account is created in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attack...

HTC

HTC | HackTheCCTV DVRs Credentials Exposed | CVE-2018-9995 | The CCTV Leaked Username For Get Loggin Access Usage root@kitploit: Open https://www.zoomeye.org/ Search With Keywod : /login.rsp $ python3 thecctv.py...

CVE-2025-56764

CVE-2025-56764 — Trivision NC-227WF Summary Trivision NC-227WF firmware 5.80 build 20141010 login mechanism reveals whether a username exists or not by returning different error messages "Unknown user" vs. "Wrong password", allowing an attacker to enumerate valid usernames. Referenced CVE record...

CVE-2026-41462

🚨 CVE-2026-41462 - ProjeQtor Unauthenticated SQL Injection Critical Unauthenticated SQL Injection in ProjeQtor ≤ 12.4.3 📌 Overview CVE-2026-41462 is a critical unauthenticated SQL Injection vulnerability in the login functionality of the ProjeQtor project management tool. CVE ID : CVE-2026-41462...

ABO.CMS-Login-SQLi-CVE-2024-25227

ABO.CMS-Login-SQLi-CVE-2024-25227 Unauthenticated SQLi and Login Bypass CVE-2024-25227 Date: 23/02/2024 Tested on ABO.CMS 5.8 Vendor: ABO.CMS Vendor URL:https://abocms.ru ABO.CMS 5.8 is vulnerable to SQL Injection via the tblogin parameter, admin login page. The affected component is "tblogin"...

CVE-2023-4169_CVE-2023-3306_CVE-2023-4415

Ruijie-RG-EW1200G CVE-2023-4169CVE-2023-3306CVE-2023-4415 1. RG-EW1200G后台远程代码执行漏洞CVE-2023-3306 2. CVE-2023-4169 未授权任意密码修改CVE-2023-4169 3. 锐捷RG-EW1200G 登录绕过CVE-2023-4415 Attention 我开发了一个用于本地测试和POC开发的工具，仅供技术学习参考。请不要将其用于非法目的。个人或组织使用本文提供的信息所造成的任何直接或间接后果和损失均由用户自行负责，与作者无关！！！ I have developed a tool for...

PT-2026-89002

🚨 HIGH SEVERITY: CVE-2026-86199 CVSS 7.5 PocketMine-MP 5.43.1 vulnerable to unauthenticated server crash via certificate validation bypass. Patch immediately. CVE Vulnerability PatchNow ThreatIntel CyberSecurity https://t.co/RrkmnFX0tI...

Dropbear_CVE-2013-4434

DropbearCVE-2013-4434 dropbearCVE-2013-4434.sh 此脚本检查 CVE-2013-4434 https://vulners.com/cve/CVE-2013-4434。低于 2013.59 版本的 Dropbear SSH Server 在登录失败时，会根据用户账户是否存在生成不同时间延迟的错误信息，这使得远程攻击者能够发现有效用户名。...

CVE-2025-505050

CVE-2025- Des: unauthinticated access to uploaded files POC: navigate to any uploaded file it will be accesed without login Discovered by Aljohara Abdulmohsen Alsubaie...

CVE-2026-86084 n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the public OIDC login and callback endpoints completed authentication even when OIDC was not the enabled active authentication method. An Enterprise administrator who had configured and later disabled an...

CVE-2026-33017-langflow-rce

CVE-2026-33017 — Langflow Unauthenticated Remote Code Execution RCE Overview CVE ID: CVE-2026-33017 Affected Software: Langflow Vulnerable Versions: = 1.9.0 Severity: Critical Author: r3nsi15 Date: 2026 Description Langflow exposes a public flow build endpoint /api/v1/buildpublictmp/flowID/flow...

CVE-2019-17240

CVE-2019-17240 Exploit Versions prior to and including 3.9.2 of the Bludit CMS are vulnerable to a bypass of the anti-brute force mechanism that is in place to block users that have attempted to incorrectly login 10 times or more. The vulnerability was discovered by Rastating. Submitting a login...