CVE-2021-22911-rust

CVE-2021-22911 Реализация на Rust для доказательства концепции этой CVE. Используется в рамках https://tryhackme.com/room/rocket, CTF-задачи «boot to root» на обучающей платформе TryHackMe. Для использования обновите константы в main.rs и запустите — всё должно работать сразу. Требуется, чтобы у...

joombrute

JoomBrute Современный набор инструментов для атаки на аутентификацию Joomla J3 / J4 / J5 - CVE-2023-23752 · CVE-2023-23755 · CVE-2025-25227 Описание Набор инструментов для атаки на учётные данные Joomla, охватывающий версии CMS 3, 4 и 5. Шесть подкоманд реализуют полную цепочку атак «от начала до...

CVE-2025-3639

CVE-2025-3639 PoC - Обход аутентификации Liferay Portal/DXP Этот репозиторий содержит Proof of Concept PoC для CVE-2025-3639 — уязвимости обхода аутентификации в Liferay Portal версии 7.3.0–7.4.3.132 и Liferay DXP различные версии от 2024.Q1 до 2025.Q1.6. PoC демонстрирует, как...

CVE-2026-105212

ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UIs that accepts passkey or other authenticator enrollment on identify-only login sessions, before any primary factor is verified. Unauthenticated attackers knowing only a victim'...

CVE-2026-105210

ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and initialization handlers act on an identify-only session before any primary factor is verified. Attackers knowing only a victim's login name can enro...

CVE-2026-105211

ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over accounts by obtaining OTP codes via the returnCode delivery type. Attackers knowing a login name of a victim with OTP-Email and OTP-SMS enrolled can read both codes...

CVE-2026-105211 ZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP returnCode

ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over accounts by obtaining OTP codes via the returnCode delivery type. Attackers knowing a login name of a victim with OTP-Email and OTP-SMS enrolled can read both codes...

CVE-2026-105210 ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlers

ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and initialization handlers act on an identify-only session before any primary factor is verified. Attackers knowing only a victim's login name can enro...

CVE-2026-105210 ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlers

ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and initialization handlers act on an identify-only session before any primary factor is verified. Attackers knowing only a victim's login name can enro...

EUVD-2026-92103

ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and initialization handlers act on an identify-only session before any primary factor is verified. Attackers knowing only a victim's login name can enro...

CVE-2026-105210

ZITADEL versions 3.x before 3.4.15 and 4.x before 4.17.1 are vulnerable to a missing authentication flaw in the hosted Login V1 UI . The root cause is that second-factor enrollment and initialization handlers process requests on an identify-only session before the primary factor is verified. An a...

CitrixBleedCVE-2026-8452-2025-5777

Инструмент эксплуатации CitrixBleed — CVE-2025-5777 и CVE-2026-8452. Неавторизованное удалённое чтение памяти из Citrix NetScaler ADC и Gateway. Похищение токенов сессий администратора, извлечение хэшей nsroot, дамп секретов и обход MFA. Эксплойт на Python 3 с полным разбором памяти...

CVE-2025-67070-Intelbras-CFTV-MFA-Bypass

Intelbras NVD 9032 R Ftd – Критическая уязвимость сброса пароля Обнаружено: Theo Cia CVE: CVE-2025-67070 Статус: Сообщено вендору Дата обнаружения: ноябрь 2025 Воздействие: Полный административный доступ через обход MFA Прошивка: V2.800.00IB00C.0.T Дата сборки: 2022-08-17 Краткое описание...

CVE-2024-10924-Bypass-MFA-Wordpress-LAB

CVE-2024-10924 Обход MFA WordPress - Лаборатория эксплойта Этот репозиторий предоставляет лабораторию для эксплуатации уязвимости CVE-2024-10924 в WordPress, а именно для обхода двухфакторной аутентификации MFA и получения доступа к панели администрирования WordPress. Предварительные требования...

Azure-AD-Password-Checker

Azure AD 비밀번호 검사기 Azure AD 환경에서 특별한 권한 없이도 사용자가 MFA다단계 인증를 비활성화했는지 확인할 수 있습니다. 이는 계정 생성 날짜와 마지막 비밀번호 변경 날짜를 분석하여 확인할 수 있습니다. 계정의 생성 날짜와 시간이 마지막 비밀번호 변경 날짜와 시간과 일치한다면, 계정 생성 이후 사람의 상호작용이 없었고 사용자가 MFA다단계 인증를 활성화하거나 비밀번호를 변경하지 못했음을 나타낼 수 있습니다. 또한 비밀번호 변경 날짜가 생성 날짜보다 이른 것과 같은 다른 '이상 징후'도 있습니다. 이는 사용자...

secdim-assurance-drift-challenge

SecDim Challenge Builder Repro — Assurance Drift Рабочее воспроизведение предложенной задачи по безопасности, вдохновлённой CVE-2026-88861 , опубликованной 10 сентября 2026 года. Концепция безопасности Приложение корректно проверяет подписанную сессию и корректно проверяет роль admin, но оно...

CS-Remote-OPs-BOF

Remote Operations BOF This repo serves as an addition to our previously released SA repo. Our original stance was that we would not release our tooling that modified other systems, and we would only provide information gathering tooling in a ready to go format. Over time, we have seen many other...

Joomla 4.0.x < 5.4.9 / 6.0.x < 6.1.4 Multiple Vulnerabilities (joomla-6-1-4-5-4-9-security-bugfix-release)

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.0.x prior to 5.4.9 or 6.0.x prior to 6.1.4. It is, therefore, affected by multiple vulnerabilities. - Joomla! Core - 20260905 - Core - Arbitrary directory deletion via cache purge action in Jooml...

GO-2026-6589 ZITADEL: MFA bypass via session reuse in Login V2 in github.com/zitadel/zitadel

ZITADEL: MFA bypass via session reuse in Login V2 in github.com/zitadel/zitadel...

CVE-2026-104181

The Filament full-stack components for Laravel are vulnerable in versions 4.0.0 through 4.13.3 and 5.8.3 . The root cause is that app-based multi-factor authentication (MFA) management actions do not consistently require the current password for confirmation. An attacker with access to an authent...