Identity & Access Management (IAM)

0cool-design/pwntaho

Pentaho Authentication Bypass CVE-2021-31602

randomrobbiebf/cve-2024-12252

SEO LAT Auto Post <= 2.2.1 - Missing Authorization to File Overwrite/Upload (Remote Code Execution)

randomrobbiebf/cve-2024-9933

WatchTowerHQ <= 3.10.1 - Authentication Bypass to Administrator due to Missing Empty Value Check

randomrobbiebf/cve-2024-9890

User Toolkit <= 1.2.3 - Authenticated (Subscriber+) Authentication Bypass

randomrobbiebf/cve-2024-54379

Minterpress <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

randomrobbiebf/cve-2024-50478

1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass via Account Takeover

maanvader/cve-2023-27524-poc

A POC for the all new CVE-2023-27524 which allows for authentication bypass and gaining access to the admin dashboard.

vulnz/cve-2021-40903

CVE-2021-40903

squ1dw3rm/cve-2023-52268

Authentication Bypass for FreeScout End-User Portal

rampantspark/cve-2024-27198

A PoC for CVE-2024-27198 written in Go

pinpinsec/cve-2021-44270

CVE-2021-44270

omnigodz/cve-2022-1388

This repository consists of the python exploit for CVE-2022-1388 (F5's BIG-IP Authentication Bypass to RCE)

mnqazi/cve-2023-4696

https://medium.com/@mnqazi/cve-2023-4696-account-takeover-due-to-improper-handling-of-jwt-tokens-in-memos-v0-13-2-13104e1412f3

missing0x00/cve-2020-26061

CVE-2020-26061 - ClickStudios Passwordstate Password Reset Portal

karlemilnikka/cve-2024-8349-and-cve-2024-8350

Authenticated Privilege Escalation to Admin exploiting Uncanny Groups for LearnDash.

jayngng/bludit-cve-2019-17240

Bypass bludit mitigation login form and upload malicious to call a rev shell