4063 matches found
CVE-2026-47156
MantisBT is an open source bug tracker. Versions 2.28.3 and earlier contain a critical authentication bypass in the SOAP API's mcichecklogin function. Any user knowing any valid cookiestring can authenticate as any other user knowing their username, including the administrator, without knowing th...
EUVD-2026-75087
MantisBT is an open source bug tracker. Versions 2.28.3 and earlier contain a critical authentication bypass in the SOAP API's mcichecklogin function. Any user knowing any valid cookiestring can authenticate as any other user knowing their username, including the administrator, without knowing th...
CVE-2026-47156
MantisBT versions 2.28.3 and earlier contain a critical authentication bypass in the SOAP API's mci_check_login() function. Any user holding a valid cookie_string (obtainable from the MANTIS_STRING_COOKIE browser cookie after login) can authenticate as any other user by supplying that cookie_stri...
CVE-2026-47156 MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator
MantisBT is an open source bug tracker. Versions 2.28.3 and earlier contain a critical authentication bypass in the SOAP API's mcichecklogin function. Any user knowing any valid cookiestring can authenticate as any other user knowing their username, including the administrator, without knowing th...
CVE-2026-47156 MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator
MantisBT is an open source bug tracker. Versions 2.28.3 and earlier contain a critical authentication bypass in the SOAP API's mcichecklogin function. Any user knowing any valid cookiestring can authenticate as any other user knowing their username, including the administrator, without knowing th...
suds
VISIÓN GENERAL El cliente de servicios web "Suds" es un cliente ligero basado en soap para python que está licenciado bajo LGPL. Para más detalles, visita: Sitio del proyecto: https://fedorahosted.org/suds/ Documentación: https://fedorahosted.org/suds/wiki/Documentation Epydocs:...
Cisco-IOS-XE-CVE-2023-20198
Cisco-IOS-XE-CVE-2023-20198 Exploit PoC para CVE-2023-20198 Información de vulnerabilidad y uso del exploit proporcionados por smokeinthellos Ver referencias La gestión del endpoint, tipo de contenido http y encabezados ha sido modificada a partir de otros PoCs existentes para funcionar en...
cve-2023-34960
cve-2023-34960 chamilo soap api rce /webservices/additionalwebservices.php...
SAP NetWeaver AS Java Denial of Service (3736494)
The version of SAP NetWeaver Application Server Java detected on the remote host is affected by a denial of service vulnerability as referenced in SAP Security Note 3736494: - SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested...
Security Bulletin: IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
Summary IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities. Vulnerability Details CVEID:CVE-2026-16190 DESCRIPTION: IBM WebSphere Application Server is affected by an authorization bypass vulnerability. CWE:CWE-862: Missing Authorization CVSS...
CVE-2026-30849-PoC
CVE-2026-30849.ts — usage This TypeScript script performs a check and an exploit for MantisBT via SOAP. Prerequisites Node.js installed Dependencies installed: root@kitploit: npm install Command root@kitploit: ts-node CVE-2026-30849.ts check --url ts-node CVE-2026-30849.ts exploit --url...
CVE-2026-46592
CVE-2026-46592 — Inyección en el encabezado operationName de camel-cxf Redirección de operación SOAP Reproductores de prueba de concepto ejecutables para la misma vulnerabilidad de Apache Camel, uno por tiempo de ejecución:...
KyoceraCredsDump
KyoceraCredsDump - CVE-2022-1026 Basado en el exploit original de Aaron Herndon, @ac3lives Rapid7 - https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ Créditos para Aaron Herndon / https://twitter.com/ac3lives /...
CVE-2026-58234
SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact o...
EUVD-2026-72574
SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact o...
CVE-2026-58234 Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)
SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact o...
CVE-2026-58234 Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)
SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact o...
CVE-2026-58234
SAP Process Integration (SOAP Adapter) is affected by a Denial of Service vulnerability where a privileged user can send specially crafted requests containing deeply nested entity definitions , temporarily increasing processor load and degrading system responsiveness under certain conditions. The...
PT-2026-86949
SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact o...
CVE-2023-21742
CVE-2023-21742 PoC Atención: Es solo un PoC para filtrar el atributo/propiedad, no un EXP de RCE. root@kitploit: POST /vtibin/webpartpages.asmx HTTP/1.1 Host: splab13 SOAPAction: http://microsoft.com/sharepoint/webpartpages/ConvertWebPartFormat Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0...