CVE-2025-0108-PoC

CVE-2025-0108 Prova di concetto PoC Questo repository contiene una Prova di concetto PoC per la vulnerabilità CVE-2025-0108 , che è un problema di bypass dell'autenticazione nel software PAN-OS di Palo Alto Networks. Gli script forniti qui testano la vulnerabilità inviando una richiesta HTTP...

Evertz SDVN 3080ipx-10G - Unauthenticated Arbitrary Command Injection

The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network switching, and register license among...

Tattile Camera < 1.181.5 - Default Login

Tattile Smart+, Vega, and Basic device families firmware = 1.181.5 contain a broken authentication caused by default credentials not forced to be changed, letting attackers with management interface access gain administrative privileges. id: CVE-2026-26341 info: name: Tattile Camera 1.181.5 -...

Progress Kemp LoadMaster - Command Injection

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution. id: CVE-2024-1212 info: name: Progress Kemp LoadMaster - Command Injection author: DhiyaneshDK severity: critical description: | Unauthenticated remote...

Cisco VPN Routers - Unauthenticated Arbitrary File Upload

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

FatPipe WARP/IPVPN/MPVPN - Authorization Bypass

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 contain a missing authorization caused by lack of access control in the web management interface, letting remote attackers access sensitive URLs, exploit requires no authentication. id: CVE-2021-27858 info: name:...

FOGProject <= 1.5.10.1673 - Authentication Bypass

FOGProject version 1.5.10.1673 suffers from an authentication bypass vulnerability that allows unauthenticated users to access the management interface without proper authentication. This can lead to unauthorized access to system configuration, host management, and potentially database informatio...

CVE-2020-13259

CVE-2020-13259 PoC der vollständigen Account-Übernahme auf RAD SecFlow-1v Eine Sicherheitslücke in der webbasierten Verwaltungsoberfläche von RAD SecFlow-1v könnte es einem nicht authentifizierten, entfernten Angreifer ermöglichen, einen Cross-Site-Request-Forgery-Angriff CSRF auf ein betroffenes...

CVE-2022-40684

CVE-2022-40684 Rispetto della legge: Ogni individuo e organizzazione che utilizza la rete deve rispettare le leggi costituzionali, l'ordine pubblico e la morale sociale, non deve compromettere la sicurezza della rete, né utilizzare la rete per danneggiare la sicurezza nazionale, l'onore e gli...

CVE-2022-1040

CVE-2022-1040 : Sophos XG115w Firewall 17.0.10 MR-10 - Bypass dell'autenticazione Questa vulnerabilità consente a un attaccante di ottenere accesso non autorizzato allo spazio di gestione del firewall bypassando l'autenticazione. ☕️ Live : ....... aggiornato...

CVE-2020-2038

CVE-2020-2038 Exploit per sfruttare la vulnerabilità CVE-2020-2038. Secondo Palo Alto Networks: Una vulnerabilità di OS Command Injection nell'interfaccia di gestione PAN-OS che consente agli amministratori autenticati di eseguire comandi arbitrari del sistema operativo con privilegi di root...

CVE-2024-7593

CVE-2024-7593 विवरण: CVE-2024-7593 एक गंभीर कमजोरी है जो कई Pulse Secure उत्पादों को प्रभावित करती है, जिसमें Pulse Secure VPN भी शामिल है। यह कमजोरी एक प्रमाणित हमलावर को प्रबंधन इंटरफ़ेस तक पहुंच के साथ प्रभावित सर्वर पर मनमाने कमांड निष्पादित करने की अनुमति देती है। इससे दुर्भावनापूर्ण कोड का...

cve-2024-0012_9474-panos_authbypass_reproduction

CVE-2024-0012 / CVE-2024-9474 — PAN-OS Authentifizierungsumgehung → Privilegieneskalationskette CVE| Beschreibung| CVSS ---|---|--- CVE-2024-0012| PAN-OS Management-Interface Authentifizierungsumgehung| 9.3 CVE-2024-9474| PAN-OS Privilegieneskalation| 6.9 In einer Kette ermöglichen diese...

EUVD-2026-67784

PLANET GS-4210-16P2S firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the readHttpParam function copies an oversized HTTP query string without guaranteeing NUL termination, allowing parsequerystring to process...

CVE-2026-81578

CVE-2026-81578 is an improper access control vulnerability in the web management interface of PaperCut MF and PaperCut NG (CVSS 8.8, network vector, no privileges required). The root cause lies in PaperCut's use of the Apache Tapestry framework , where authorization is validated only against the ...

EUVD-2026-67713

An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allow...

CVE-2026-81578 PaperCut MF/NG: Authentication Bypass

An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allow...

fortios-auth-bypass-check-CVE-2024-55591

CVE-2024-55591 Fortinet FortiOS प्रमाणीकरण बाईपास संवेदनशील व्यवहार जांच कार्य में जांच root@kitploit: python CVE-2024-55591-check.py --target 192.168.1.10 --port 443 / | | |\ \ \ / / \ \ / | | \| | / \ / / \ \ \ / / | | \ \| Y | | \ / | | \ // || \\ ||| | \ / \// || \ \ \...

EUVD-2026-67281

Administrative credentials may be exposed in plaintext within the Ebyte device's management interface, increasing the risk of credential compromise through visual or remote observation. This undermines the confidentiality of device access...

EUVD-2026-67277

Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability...