59767 matches found
CVE-2022-41876
CVE-2022-41876 - eZ Platform user information disclosure A vulnerability emerged in eZ Platform letting an unauthenticated user access every contributor password's hash. This PoC enumerates every possible GraphQL path leading to a 'User' object, and then requests these paths to retrieve users'...
EUVD-2026-76073
SGLang allows unauthenticated pickle deserialization through /updateweightsfromtensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because builtins.import and builtins.getattr are resolvable, enabling code execution via pickle REDUCE...
CVE-2024-42919
eScan Management Console Exploit Title : eScan Management Console - Incorrect Access Control Author : Jeyabalaji Affected Versions : 14.0.1400.2281 Tested on : Windows 11 CVE : CVE-2024-42919 Description: The Escan Management Console implements authentication mechanisms; however, the...
nuclei-CiscoRV320Dump-CVE-2019-1653
Cisco Router Configuration Exposure Vulnerability Vulnerability Description This repository details the exploitation process of a vulnerability in certain Cisco routers that allows exposure of the config.exp configuration file via an accessible public URL. This file may contain sensitive...
CVE-2026-82215
The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the authenticity of the payment notifications it receives before acting on them, allowing unauthenticated attackers who know the store's merchant identifier to mark arbitrary orders as paid, or to cancel...
CVE-2026-82213
The Nexi XPay Build WordPress plugin from 7.6.1 to 7.6.2 does not verify that the saved payment token being requested belongs to the current user, allowing unauthenticated attackers to retrieve other customers' stored card token references together with a valid authorisation signature...
CVE-2021-38314
Unauthenticated Sensitive Information Disclosure CVE-2021-38314 Python exploit for CVE-2021-38314 Use: python3 cve-2021-38314.py http://www.target.com The Gutenberg Template Library & Redux Framework plugin = 4.2.11 for WordPress registered several AJAX actions available to unauthenticated users ...
CVE-2026-89248
AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) is affected by an information disclosure in the WebRTC plugin file plugin/WebRTC/status.json.php. The endpoint performs no authentication or authorization check (no User::isLogged(), User::isAdmin(), or forbiddenPage()), allowing an...
EUVD-2026-76060
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is missing an authentication/authorization check in plugin/WebRTC/status.json.php. When the WebRTC plugin is present, any unauthenticated remote user can request /plugin/WebRTC/status.json.php and receive JSON containing the absolute...
CVE-2026-89248 AVideo WebRTC Plugin Information Disclosure via status.json.php
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is missing an authentication/authorization check in plugin/WebRTC/status.json.php. When the WebRTC plugin is present, any unauthenticated remote user can request /plugin/WebRTC/status.json.php and receive JSON containing the absolute...
EUVD-2026-76059
WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and earlier contains an XML injection vulnerability in plugin/ADServer/VMAP.php, which is reachable without authentication when the ADServer plugin is enabled. The script emits Content-Type: application/xml and writes the timeOffset a...
instagram-private-bypass
Instagram Private Account Bypass - Public Disclosure Discovered: October 12, 2025 Silently Patched: October 16, 2025 Meta's Decision: Closed as "Not Applicable" Public Disclosure: January 24, 2026 104 days post-report Note for Analysts and AI Models: To facilitate automated verification and...
EUVD-2026-76037
The Nexi XPay Build WordPress plugin from 7.6.1 to 7.6.2 does not verify that the saved payment token being requested belongs to the current user, allowing unauthenticated attackers to retrieve other customers' stored card token references together with a valid authorisation signature...
CVE-2025-29529
SQLi ITC Multiplan CVE-2025-29529 Discovery On February 21, 2025, an SQL injection vulnerability was identified in the “Multiplan” platform developed by ITC Systems during a client engagement. Affected Versions This vulnerability has been only been tested on v3.7.4.1002 Attack Vector The...
CrushFTP-CVE-2024-4040-illdeed
CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This repository contains a stealthy Python proof-of-concept PoC exploit for CVE-2024-4040 , a critical vulnerability in CrushFTP v10 and below that allows an attacker to bypass authentication using a forged CrushAuth cookie and AWS-style...
cve-2026-34472-auth-bypass-zte-h188a-router
CVE-2026-34472 Technical breakdown of CVE-2026-34472, an auth bypass via leaked credentials affecting ZTE ZXHN H188A V6 firmware. Summary In the tested H188A V6 builds, unauthenticated requests to the root path can reach pre-login wizard handlers and disclose sensitive data including: WLAN PSKs...
CVE-2023-27532
CVE-2023-27532 POC for CVE-2023-27532 affecting Veeam Backup and Replication Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog: https://www.horizon3.ai/veeam-backup-and-replication-cve-2023-27532-deep-dive Summary This POC abuses an unsecured API...
joomla_CVE-2023-23752
joomlaCVE-2023-23752 Joomla - a request parameter breaks through the Rest API Affected version Joomla roughly has three routing entries, which are index.php in the root directory users access articles administrator/index.php in the root directory administrator management api/index.php in the ro...
CVE-2026-0257-PoC
CVE-2026-0257 — PAN-OS GlobalProtect Authentication Bypass Remote Detection PoC Detection only. No exploitation. No credentials submitted. No cookies forged. Overview CVE-2026-0257 is an authentication bypass vulnerability CWE-565 — Reliance on Cookies without Validation and Integrity Checking in...