CVE-2026-83548

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...

CVE-2026-73778

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providi...

CVE-2026-73762

A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this could enable unauthorized access to management functionality that should be restricted by the configured access control policy...

CVE-2018-10933

CVE-2018-10933 - SSH 인증 우회 PoC 설명 CVE-2018-10933은 libssh 의 서버 측 구현에서 발생하는 인증 우회 취약점입니다. 이 결함으로 인해 공격자는 사전 인증 없이 SSH2MSGUSERAUTHSUCCESS 메시지를 전송하여 무단 액세스를 얻을 수 있습니다. 영향을 받는 시스템 SSH 서비스에 취약한 버전의 libssh 를 사용하는 모든 서버가 영향을 받습니다. 취약한 버전 libssh 0.6 이상 수정된 버전: 0.7.6 및 0.8.4 사용법 1. 스크립트의 ip를 대상의 IP 주소로 바꿉니...

vulnerability-in-Remix-React-Router-CVE-2025-31137-

개요 @zhero의 개인 블로그 게시물에 있는 writeup을 읽은 후, 어떻게 작동하는지 배우기 위해 이 CTF를 만들기로 결정했고, 그 후 이 취약점을 악용하는 방법을 배우고 싶은 사람과 공유하기로 했습니다. [email protected] 버전으로 CTF를 만들려고 했지만, @remix-run/express를 확인했을 때 코드가 패치된 것을 발견하고 GitHub에서 취약한 코드를 복사하여 붙여넣었으므로 아래 설명대로 @remix-run/express 패키지의 코드를 변경해야 합니다. 목표 admin 페이지에서...

CVE-2022-40684

CVE-2022-40684 CVE-2022-40684에 대한 POC로, Fortinet FortiOS, FortiProxy 및 FortiSwitchManager 장비에 영향을 미칩니다. 기술 분석 취약점에 대한 기술적 근본 원인 분석은 당사 블로그에서 확인할 수 있습니다: https://www.horizon3.ai/fortios-fortiproxy-and-fortiswitchmanager-authentication-bypass-technical-deep-dive-cve-2022-40684 침해 지표 침해 지표에 대한...

CVE-2026-73779

CVE-2026-73779 affects the AOS-CX switch operating system (HPE), where a set of vulnerabilities allows an unauthenticated remote actor on an adjacent network to circumvent existing authentication controls . Successful exploitation can lead to information disclosure , unauthorized modification , a...

CVE-2026-73779 Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information...

CVE-2026-73778

CVE-2026-73778 affects the Credential Manager component of HPE devices. The vulnerability stems from a predictable factory-default password present in devices that are in their factory-default or post-ZTP (Zero Touch Provisioning) state before an administrator has configured credentials. An unaut...

CVE-2026-73764

CVE-2026-73764 affects the operating system of HPE AOS-CX switches , where an unauthenticated actor from an adjacent network can bypass authentication controls, enabling unauthorized modification of resources and limited service disruption . The CVSS 3.1 score is 7.1 (HIGH) with an attack vector ...

CVE-2026-73762

CVE-2026-73762 affects the API endpoint of HPE ArubaOS-CX (AOS-CX) , where a remote actor with high privileges can circumvent configured access controls, potentially gaining unauthorized access to management functionality that should be restricted. The vulnerability is rated CVSS 3.1 6.6 (MEDIUM)...

EUVD-2026-69626

A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this could enable unauthorized access to management functionality that should be restricted by the configured access control policy...

CVE-2026-73762 Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access

A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing access controls. In some cases this could enable unauthorized access to management functionality that should be restricted by the configured access control policy...

NextJS-Exploit-

NextSploit: Next.js CVE-2025-29927 スキャナー＆エクスプロイター NextSploit は、Next.js のセキュリティ上の欠陥である CVE-2025-29927 を検出・悪用するために設計されたコマンドラインツールです。このツールはまず、対象のウェブサイトが Next.js で動作しているかを特定し、そのバージョンが脆弱な範囲に該当するかを判定します。ウェブサイトが脆弱であると確認された場合、ツールは ミドルウェアによる保護をバイパスして悪用を自動的に試行 し、制限されたページへの不正アクセスを引き起こす可能性があります。 特徴 Next.js...

CVE-2021-44270

CVE-2021-44270 Anviz-Access-Control-Authentication-Bypass https://nvd.nist.gov/vuln/detail/CVE-2021-44270...

exploit-grafana-CVE-2021-43798

CVE-2021-43798 – Grafana エクスプロイト 概要 これは、Grafanaの未承認任意ファイル読み取り脆弱性（CVE-2021-43798）に対する概念実証エクスプロイトです。 この脆弱性はGrafana 8.0.0-beta1 to 8.3.0に影響します。 Shodanのデータによると、オンライン上に公開されているGrafanaサーバーは2,000強であり、その大半は米国と欧州に存在しています。下図を参照してください。 詳細情報:...

nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw

A flaw in the Node.js Permission Model allows attackers to bypass --permission restrictions, enabling unauthorized read or write access to files and directories...

EUVD-2026-69450

A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorizati...

EUVD-2026-69441

A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to access data beyond what is authorized by the user's existing privilege level, potentially leading to further...

EUVD-2026-69433

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system information and to change the state of certain settings of a vulnerable system. Successful exploitation could allow an attacker to gain insight into internal servic...