230 matches found
watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.py
cve-2026-41940 cPanel/WHM 認証バイパス - 検出アーティファクト生成器 cPanel/WHM 認証バイパス検出アーティファクト生成ツール 説明 この検出アーティファクト生成器は、cPanel/WHM が最近の認証バイパスに対して脆弱かどうかを検証します。 動作例 脆弱なインスタンスに対してテスト: root@kitploit: python authbypass-RCE.py --target https://target:2087/ / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y...
CVE-2015-7808
CVE-2015-7808 vBulletin PreAuth 취약점에 대한 PoC 코드 사용법: perl vbulletin.pl www.vbulletin.com/forum id...
CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE
CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN 제로데이 CVE-2026-20127, 2023년부터 관리자 액세스를 위해 악용됨. 이 저장소는 CVE-2026-20127에 대한 작동하는 개념 증명 익스플로잇을 포함하고 있습니다. 이는 Cisco Catalyst SD-WAN Controller 이전 vSmart 및 Catalyst SD-WAN Manager 이전 vManage의 중요한 사전 인증 취약점으로, 2023년부터 실제 환경에서 활발히 악용되었습니다. 이 취약점은...
CVE-2021-22205
CVE-2021-22205 Preauth RCE via exiftool on Gitlab CE/EE Summary of the CVE GitLab uses ExifTool to scan every tiff/jpeg/jpg file to remove any tags that are not whitelisted. But because ExifTool doesn't use file extensions to determine filetype but it rather uses the content of the file, which...
TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal
TRUfusion Enterprise versions 7.10.4.0 and earlier contained a vulnerability that allowed unauthenticated access to the Internal Admin Contact Page, resulting in the disclosure of PII including partner and contact names. id: CVE-2025-27225 info: name: TRUfusion Enterprise = 7.10.4.0 - Admin Conta...
CVE-2021-22205
CVE-2021-22205 GitLab CE/EE Preauth RCE using ExifTool This project is for learning only, if someone's rights have been violated, please contact me to remove the project, and the lastDO NOT USE IT ILLEGALLY If you have any illegal behavior in the process of using this tool, you will bear all the...
Sophos UTM Preauth - Remote Code Execution
Sophos SG UTMA WebAdmin is susceptible to a remote code execution vulnerability in versions before v9.705 MR5, v9.607 MR7, and v9.511 MR11. id: CVE-2020-25223 info: name: Sophos UTM Preauth - Remote Code Execution author: gy741 severity: critical description: Sophos SG UTMA WebAdmin is susceptibl...
CVE-2026-38820
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/ endpoint because of libopennds.sh...
CVE-2026-38820
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/ endpoint because of libopennds.sh...
UBUNTU-CVE-2026-38820
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/ endpoint because of libopennds.sh...
CVE-2026-38820
openNDS versions before 11.0.0 are susceptible to unauthenticated OS command execution due to a shell command injection vulnerability in libopennds.sh . The flaw is triggered through the fas query parameter on the /opennds_preauth/ endpoint, allowing an attacker on an adjacent network to execute ...
EUVD-2026-67360
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/ endpoint because of libopennds.sh...
CVE-2026-38820
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/ endpoint because of libopennds.sh...
PT-2026-82832
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds preauth/ endpoint because of libopennds.sh...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Out-of-bounds access has been avoided in the decodepreauthctxt function. It has been confirmed that the address of pnegctxt-HashAlgorithms lies within the boundaries of the SMB request. The deassemblenegcontexts function...
Astra Linux – Vulnerability in krb5
In kdc/kdcpreauthec.c of the Key Distribution Center KDC in MIT Kerberos 5 also known as krb5, before versions 1.18.4 and 1.19.x, and before version 1.19.2, remote attackers could exploit a vulnerability that led to a NULL pointer dereferencing and a crash of the daemon. This occurs because the...
PT-2026-72610
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of conn-preauth info in concurrent SMB2 NEGOTIATE conn-preauth info is shared connection state struct preauth integrity info, kmalloc-96 that is allocated and freed by the SMB2 NEGOTIATE handler and read...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller
watchTowr-vs-Citrix-Netscaler-PreAuth-RCE Detection Artifact...
Security update for libssh2_org
This update for libssh2org fixes the following issues: CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. CVE-2026-55199: pre-authentication DoS...