CVE-2019-20224

CVE-2019-20224 Der offizielle Exploit für Pandora v7.0NG Post-auth Remote Code Execution CVE-2019-20224...

CVE-2015-1397-Magento-Shoplift

CVE-2015-1397-Magento-Shoplift Dettagli della vulnerabilità Vulnerabilità come vista in HackTheBox - SwagShop Fase 1 = exploit.py Ottieni le credenziali di amministratore per il pannello di controllo di Magento CMS Fase 2 = postauth.py Con le credenziali ottenute da exploit.py aggiunte a...

CVE-2020-8813

CVE-2020-8813 O exploit oficial para a Execução Remota de Código no Cacti v1.2.8 CVE-2020-8813 Cacti v1.2.8 Execução Remota de Código Pré-Autenticação Cacti v1.2.8 Execução Remota de Código Pós-Autenticação...

OWASSRF-CVE-2022-41082-POC

CVE-2022-41082-POC PoC per la vulnerabilità NotProxyShell OWASSRF CVE-2022-41082 che colpisce i server Microsoft Exchange. Questa è una RCE post-autenticazione per ProxyNotShell OWASSRF, sono necessarie credenziali valide per l'esecuzione dei comandi. Aggiunto lo script PoC Powershell per la...

CVE-2023-20209

Ho iniziato a esaminare Cisco Expressway dopo aver notato parecchi di questi dispositivi su Internet durante gli engagement di Red Team, ma non ho mai avuto il tempo durante il lavoro di approfondire ulteriormente il prodotto. Inizialmente cercavo un bypass dell'autenticazione per innescare una...

CVE-2022-41082-POC

CVE-2022-41082-POC CVE-2022-41082 NotProxyShell OWASSRF भेद्यता के लिए PoC जो Microsoft Exchange सर्वरों को प्रभावित करती है यह ProxyNotShell OWASSRF के लिए पोस्ट-प्रमाणीकरण RCE है, कमांड निष्पादन के लिए मान्य प्रमाण-पत्र आवश्यक हैं। TabShell भेद्यता CVE-2022-41076 के लिए Powershell PoC स्क्रिप्ट...

Crater-CVE-2023-46865-RCE

Crater-CVE-2023-46865-RCE Crater =6.0.6, CVE-2023-46865 Post-Auth RCE Superadmin Schwachstellenbeschreibung Crater Invoice ist anfällig für uneingeschränkte Datei-Uploads mit gefährlichem Typ aufgrund fehlender ordnungsgemäßer Eingabevalidierung. Die Base64Mime-Prüfklasse kann umgangen werden,...

CVE-2019-11539

CVE-2019-11539 Scoperta originale: Orange Tsai, Meh Chang Autori: Justin Wagner, Alyssa Herrera Ringraziamenti a: Orange, Meh Chang, Rich Warren, Alyssa, Mimir Descrizione della vulnerabilità Nelle versioni di Pulse Secure Pulse Connect Secure 9.0RX precedenti alla 9.0R3.4, 8.3RX precedenti alla...

CVE-2026-73489 Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records

Russh is a Rust SSH client & server library. Prior to 0.62.4, an authenticated SSH client can cause a denial of service by sending a pty-req channel request with more than 130 terminal-mode records. The parser in russh/src/server/encrypted.rs stores terminal modes in a fixed 130-entry...

EUVD-2026-55962

The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service account...

GHSA-8WC8-HF36-MJH9 File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope

Summary ScopedFs confines every File Browser user to a scope directory. Its within guard is meant to reject any operation that follows a symbolic link out of that scope. When the link target does not exist yet, the guard walks up to the nearest existing ancestor and validates that instead. For a...

CVE-2026-7829 UltraVNC repeater authenticated out-of-bounds write in rule parser via oversized token

UltraVNC repeater through 1.8.2.2 contains a post-authentication out-of-bounds write in the allow/deny rule parser. In repeater/webgui/settings.c:225-272, after strncpys copies a rule token into temp1rule1 25-byte destination or temp2/temp3 16-byte destination, the code unconditionally writes a N...

JetBrains TeamCity <= 2025.11.4 Privilege Escalation (CVE-2026-44413)

The version of JetBrains TeamCity installed on the remote host is 2025.11.4 or prior. It is, therefore, affected by a post-authentication privilege escalation vulnerability that may allow any authenticated user, including standard or guest accounts, to expose some parts of the TeamCity server API...

EUVD-2026-23519

xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buffer overflow in the EGFX graphics dynamic virtual channel implementation due to insufficient validation of client-controlled size parameters, allowing an out-of-bounds write via crafted PDUs. Pre-authentication...

DEBIAN-CVE-2026-23943

Improper Handling of Highly Compressed Data Compression Bomb vulnerability in Erlang OTP ssh sshtransport modules allows Denial of Service via Resource Depletion. The SSH transport layer advertises legacy zlib compression by default and inflates attacker-controlled payloads pre-authentication...

CVE-2026-23943 Pre-auth SSH DoS via unbounded zlib inflate

Improper Handling of Highly Compressed Data Compression Bomb vulnerability in Erlang OTP ssh sshtransport modules allows Denial of Service via Resource Depletion. The SSH transport layer advertises legacy zlib compression by default and inflates attacker-controlled payloads pre-authentication...

CVE-2024-48705

Wavlink AC1200 with firmware versions M32A3V1410230602 and M32A3V1410240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "setsysadm" function of the "adm.cgi" binary, and is due to improper santization ...

VulnCheck KEV: CVE-2024-45891

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to deletewlanprofile...

CVE-2025-49218

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. This is similar to, but not identical to CVE-2025-49215. Please note: an attacker must first obtain the ability to execute...

Fedora 42 : roundcubemail (2025-70701de9de)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-70701de9de advisory. This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities: Fix Post-Auth RCE...