QAFA Firmware Authentication Bypass

The vulnerability of the QAFA Firmware for telecommunications equipment relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the administrative web console...

jexboss

JexBoss - JBoss and others Java Deserialization Vulnerabilities verify and EXploitation Tool JexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. Requirements Python = 2.7.x urllib3 ipaddress Installatio...

H2 Database Console - JNDI Injection RCE

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution via the H2 web console versions before...

Red Hat JBoss - Web/JMX Console Access

Red Hat JBoss Enterprise Application Platform EAP can expose the Web Console, JMX Console, and JMXInvokerServlet without authentication, allowing remote attackers to reach admin dashboards and interact with MBeans, leading to full server compromise. id: CVE-2010-1428 info: name: Red Hat JBoss -...

kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal and Web console for Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...

outlook-auto-register

Outlook Auto Register Pure-protocol Microsoft Outlook bulk registration · PerimeterX solver · Web console · Proxy pool / account pool / liveness checks What it solves · Screenshots · Quick start · Proxy · Anti-ban guide · 中文 · Tiếng Việt Repository : lxf746/outlook-auto-register For learning and...

CVE-2015-3224

CVE-2015-3224 Ruby-On-Rails Web Console RCE What is this? This is a metasploit module for Metasploit. I already have this module. Yes, this is packaged into metasploit. But with that module you can't get arbitrary command execution. I mean, you can only establish reverse/bind shell payloads with...

CVE-2021-36563

CVE-2021-36563 – Multiple Stored and Reflected XSS Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 2.0.0p9 Attack type: Stored and Reflected XSS Solution: Update to Software Revision 2.0.0p10 or later Summary: The CheckMK management web console versions 1.5.0 to 2.0.0...

CVE-2024-28999

CVE-2024-28999 Exploit for CVE-2024-28999 SolarWinds Platform Race Condition Vulnerability - login page The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console login page Technical Details:...

CVE-2021-40906

CVE-2021-40906 - Reflected XSS in an unauthenticated zone Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 1.5.0p25 Author: Edgar Augusto Loyola Torres. Attack type: Reflected XSS Solution: Update to Software Revision 1.6.0p26 or later Summary: CheckMK Raw Edition...

CVE-2025-26054

CVE-2025-26054 CVE-2025-26054 Author: Rohan Deshpande Stored Cross Site Scripting Summary Stored XSS Cross-Site Scripting is a security vulnerability that occurs when an attacker injects malicious scripts into a web application, which are then stored on the server and served to users. When users...

CVE-2015-3224

CVE-2015-3224 Exploit - Rails Web Console RCE A JavaScript implementation Node.js of the exploit for CVE-2015-3224. This tool targets Ruby on Rails applications running vulnerable versions of the web-console gem, allowing unauthenticated Remote Code Execution RCE. About the Vulnerability...

CVE-2020-1947

CVE-2020-1947 Apache ShardingSphere UI YAML Parsing Remote Code Execution Vulnerability Reproduction and Analysis Overview ShardingSphere is an open-source ecosystem under Apache, a set of distributed database middleware solutions composed of three independent frameworks: Sharding-JDBC,...

CVE-2015-3224-

CVE-2015-3224- just a stupid version for CVE-2015-3224, for web console. need to setup web server for pty.py...

CVE-2026-97891

In Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every request to its built-in authentication endpoints /admin/auth, /admin/login/password, /admin/login/cert before checking the HTTP method, parsing the request, or validating any submitted credentials, and...

EUVD-2026-121404

In Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every request to its built-in authentication endpoints /admin/auth, /admin/login/password, /admin/login/cert before checking the HTTP method, parsing the request, or validating any submitted credentials, and...

CVE-2026-97891

The Eclipse Kura Web Console (versions 5.0.0 to 5.6.2 ) is vulnerable to an unbounded resource consumption flaw. The system allocates a new HTTP session for every request made to built-in authentication endpoints—specifically /admin/auth , /admin/login/password , and /admin/login/cert —before val...

CVE-2026-97891

In Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every request to its built-in authentication endpoints /admin/auth, /admin/login/password, /admin/login/cert before checking the HTTP method, parsing the request, or validating any submitted credentials, and...

CVE-2026-97891

In Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every request to its built-in authentication endpoints /admin/auth, /admin/login/password, /admin/login/cert before checking the HTTP method, parsing the request, or validating any submitted credentials, and...

CVE-2015-3224

Ruby on Rails Web Console Exploit CVE-2015-3224 This repository contains a Python script to exploit an IP whitelist bypass vulnerability in the developer web console of Ruby on Rails 4.0.x and 4.1.x. The script allows for remote code execution on vulnerable servers. ⚠️ Disclaimer This script is...