149583 matches found
CVE-2026-67279
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated...
CVE-2026-67281
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file-serving path dereferences th...
CVE-2017-14980
Exploit-CVE-2017-14980 PoC exploit for CVE-2017-14980 ā a stack-based buffer overflow vulnerability in Sync Breeze Enterprise 10.0.28. š Full technical analysis of the exploit: š https://davigsantana.github.io/posts/buffer-overflow/ About This repository contains a proof-of-concept PoC developed...
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September 5. Sansec, which discovered the fl...
CVE-2023-22047-Oracle-PeopleSoft-LFI
š CVE-2023-22047 - PeopleSoft LFI Exploit Unauthenticated Local File Inclusion LFI in Oracle PeopleSoft Enterprise PeopleTools šØāš» Author...
CVE-2026-66730-Infinite-Loop-DoS-in-facil.io-MIME-Parser
Security Advisory: Infinite Loop DoS in facil.io MIME Parser Partial Boundary Assigned CVE ID : CVE-2026-66730 Product: facil.io Affected versions: facil.io = 0.6.0 all 0.6.x, all 0.7.x, master; introduced alongside the MIME parser in 0.6.0 Component: lib/facil/http/http.c,...
EXPLOIT-CVE-2026-26216
CVE-2026-26216 ā Crawl4AI unauthenticated RCE via hooks GHSA-5882-5rx9-xgxp CVSS 10.0 Ā· pre-auth RCE Ā· CWE-94 Code Injection Unauthenticated remote code execution on the Crawl4AI Docker server field. This code is executed with exec inside a "homemade sandbox" ā a restricted builtins dictionary...
CVE-2026-27971_POC
CVE-2026-27971 ā Qwik server$ Unauthenticated RCE PoC !WARNING This repository contains an active remote-code-execution proof of concept. Use it only against systems you own or are explicitly authorized to test. The author assumes no responsibility for unauthorized use or damage. A standalone...
cve-2025-55182-scanner
CVE-2025-55182 / CVE-2025-66478 Vulnerability Scanner React Server Components Flight Protocol Remote Code Execution Detection Tool Executive Summary This scanner identifies systems potentially vulnerable to CVE-2025-55182 React and CVE-2025-66478 Next.js, critical unauthenticated remote code...
CrushFTP-auth-bypass-CVE-2025-31161
CrushFTP Authentication Bypass - CVE-2025-31161 A comprehensive toolkit for exploiting CVE-2025-31161, an authentication bypass vulnerability in CrushFTP that allows unauthorized user account creation. š What is CVE-2025-31161? CVE-2025-31161 is a critical authentication bypass vulnerability in...
CVE-2019-9053
CMS Made Simple Extracts data character by character by checking response delays. Extracts: Salt cmssiteprefs table Admin use...
EUVD-2026-72029
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS...
CVE-2026-86060
MikroTik RouterOS contains an argument-handling flaw in the SSH login path. An unauthenticated attacker can supply a username beginning with a prohibited character to reach the RouterOS login helper and modify the trusted policy mask , achieving privilege escalation . The vulnerability is rated C...
CVE-2026-67281 Unauthenticated file read in Mikrotik RouterOS
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file-serving path dereferences th...
EUVD-2026-72028
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file-serving path dereferences th...
CVE-2026-67281
MikroTik RouterOS WebFig is affected by an unauthenticated file-read vulnerability in the /jsproxy path. The root cause is a stale uninitialized principal pointer retained by a newly allocated session, which an attacker can exploit by preparing the allocator and supplying parent-directory compone...
CVE-2026-67279 SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated...
EUVD-2026-72027
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated...
CVE-2026-67279
MikroTik RouterOS is affected by a SSH pre-authentication rekey state bypass (CVE-2026-67279). The root cause is that the SSH service enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated remote client to ope...
CVE-2026-67277
MikroTik RouterOS btest service is vulnerable to unauthenticated kernel memory disclosure and denial of service . An unauthenticated attacker can exploit a race condition where a "related" btest connection is accepted before primary session authentication completes, then start an IPv4 UDP test. W...