CVE-2026-78499 Dimension SSRF via FTP Server Test Connection

A server-side request forgery SSRF vulnerability WatchGuard Dimension FTP Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

CVE-2026-78614

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature . An authenticated user with report administration permissions can send specially crafted requests to gain arbitrary command execution as the Dimension WebUI process user. The CNA-assigned CVSS ...

CVE-2026-78618 Dimension Business Logic Flaw Allows Chained Backend Object Operations

A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially crafted request...

CVE-2026-78614 Dimension SQL Injection in Audit Report

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

CVE-2026-78499

WatchGuard Dimension is affected by a server-side request forgery (SSRF) vulnerability in its FTP Server Test configuration. An authenticated privileged attacker can exploit this flaw to enumerate exposed network services on adjacent network systems, resulting in low confidentiality impact on sub...

CVE-2026-78008 Fireware OS Authenticated Buffer Overflow in wgagent

A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service DoS condition or potentially execute arbitrary code by sending specially crafted network traffic...

CVE-2026-78008

WatchGuard Fireware OS contains a buffer overflow in the Management Web UI , specifically in the wgagent component. An authenticated administrator with network access can trigger a denial of service or potentially achieve arbitrary code execution by sending specially crafted network traffic. The ...

CVE-2023-20273

CVE-2023-20273 CVE-2023-20273 PoC Exploit Utilizzo root@kitploit: usage: exploit.py -h -t URL -u Username -p Password -c Command | -r -dest Outfile -www | -tcp | -null -ip LocalIP -port LocalPort -fs filesystem -path filepath -operation operationtype -v -q CVE-2023-20273 Exploit PoC options: -h,...

CVE-2026-81851

Fireware OS (WatchGuard) is affected by a heap-based buffer overflow in the iked (IKE daemon) process. An authenticated administrator can crash iked by saving a specially crafted configuration , leading to a denial of service . The CVSS 4.0 score is 6.9 (Medium) , reflecting high availability imp...

CVE-2026-81851 Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service

A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon iked, resulting in a denial of service, by saving a specially crafted configuration...

PoC_CVE-2024-28157

PoC CVE-2024-28157 Übersicht Das Jenkins-GitBucket -Plugin in Version 0.8 und früher bereinigt Gitbucket-URLs in Build-Ansichten nicht, was zu einer gespeicherten Cross-Site-Scripting-XSS -Schwachstelle führt, die von Angreifern ausgenutzt werden kann, die Jobs konfigurieren können...

CVE-2019-19356

Router NETIS WF2419 RCE CVE-2019-19356 Contesto La vulnerabilità è un Remote Code Execution RCE autenticato come root tramite la pagina di gestione Web del router NETIS WF2419. La vulnerabilità è stata trovata nella versione del firmware V1.2.31805 e nell'ultima versione disponibile del firmware...

CVE-2026-54998-exp

DISCLAIMER Questo repository è solo a scopo educativo e di ricerca. L'autore non è responsabile per qualsiasi uso improprio, danno o attività illegale causata dall'uso di questo materiale. Usalo a tuo rischio. Rispetta le leggi applicabili e le linee guida etiche. Panoramica CVE-2026-54998 è una...

CVE-2025-68613

🚀 n8n Authenticated RCE PoC Pocsuite3 CVE ID : CVE-2025-68613 Type : Authenticated Remote Code Execution Framework : Pocsuite3 Dies ist ein auf dem Pocsuite3 -Framework basierendes Skript zur Schwachstellenverifikation und -ausnutzung, das die authentifizierte Remote-Code-Ausführung RCE im...

POC_CVE-2025-14700

CVE-2025-14700 PoC para CVE-2025-14700 , uma vulnerabilidade de Server-Side Template Injection SSTI no Crafty Controller = 4.6.1. Essa vulnerabilidade permite que usuários autenticados alcancem Remote Code Execution RCE ao injetar templates Jinja2 maliciosos na configuração do Webhook. 📦 Instalaç...

exploit-CVE-2019-14530

OpenEMR CVE-2019-14530 एक्सप्लॉइट OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the file to be read Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples: exploit.rb...

exploit-CVE-2018-15139

Exploit di OpenEMR CVE-2018-15139 OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the shell to be uploaded Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples:...

Havoc-C2-SSRF-to-RCE

Havoc-C2-SSRF-to-RCE Dies ist eine modifizierte Version des CVE-2024-41570-SSRF-PoCs von @chebuya, kombiniert mit dem Auth-RCE-Exploit von @hyperreality. Dieser Exploit führt remote Code auf einem Zielsystem aus, bedingt durch mehrere Schwachstellen im Havoc C2 Framework...

CVE-2023-40933-PoC

CVE-2023-40933 Il payload sqlmap per sfruttare CVE-2023-40933 Payload Informazioni richieste: Nome utente e password validi Dominio e percorso dell'istanza ospitata root@kitploit: sqlmap -D nagiosxi -T xiusers -u...

CVE-2026-78037

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface . An authenticated attacker can execute arbitrary operating system commands with elevated privileges, potentially leading to unauthorized access to sensitive information or complete device compromise ...