CVE-2015-10141

CVE-2015-10141 root@kitploit: Exploit Title: xdebug Unauthenticated Command Execution Exploit Author: D3Ext Vendor Homepage: https://xdebug.org/ Sofware Link: https://pecl.php.net/package/xdebug/2.5.5/windows Version: 2.5.5 Tested on: Kali Linux 2025 CVE: CVE-2015-10141 説明 Xdebug...

CVE-2002-0991

CVE-2002-0991 HP CIFS/9000 Client A.01.06 以前の cifslogin コマンドにおけるバッファオーバーフロー Exploit-db 公開: https://www.exploit-db.com/exploits/21577/ Packetstorm 公開: https://packetstormsecurity.com/files/26303/cifslogin.txt.html SecurityFocus 公開: https://www.securityfocus.com/bid/5088 著者 Alex Hernandez 別名 @alt3k...

CVE-2025-68926

PoC 사용 설명 단일 대상 탐지 root@kitploit: python poc.py -H 127.0.0.1 -p 9000 출력에는 vulnerable: True/False와 디코딩된 serverproperties가 포함됩니다. 대량 탐지 1. 파일에 한 줄씩 host:port를 작성합니다. 예: root@kitploit: 10.0.0.1:9000 10.0.0.5:9000 2. 실행: root@kitploit: python poc.py -l targets.txt...

CVE-2023-6019

Python POC derivado del POC del autor Uso python3 CVE-2023-6019.py -t 192.168.191.37 -p 9000 -l 192.168.45.xxx -lp 4444...

CVE-2015-10141

CVE-2015-10141 – XDebug 远程代码执行（RCE） CVE-2015-10141 是一个未经认证的 OS 命令注入 漏洞，影响 Xdebug 2.5.5 及更早版本 。 根本原因： 当 Xdebug 的远程调试功能启用时，该扩展监听 端口 9000 ，并接受调试器协议命令，不进行任何形式的身份验证 。 攻击向量： 攻击者可以通过此接口发送特制的 eval 命令来执行任意 PHP 代码，进而调用 system 或 passthru 等系统级函数，导致 OS 命令注入。 影响： 成功利用可在 Web 服务器用户权限下完全控制目标主机 。 受影响产品 项目| 详情...

Vulnerabilities found in Cisco Nexus 9000 Series, iOS XR Software, and Secure Email

Cisco has identified vulnerabilities in Cisco Nexus 9000 Series switches with Silicon One technology, Cisco IOS XR software, and Cisco Secure Email. The most serious vulnerability affects Nexus 9000 switches: when TCP ports 43210 or 43211 are accessible, an attacker can execute commands without a...

CVE-2026-20212

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 L3 virtual routing and...

EUVD-2026-70201

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 L3 virtual routing and...

CVE-2026-20212 Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 L3 virtual routing and...

PT-2026-84805

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Switches affected versions not specified Description A flaw in the Silicon One integration for specific Cisco Nexus 9000 Series Switches allows an unauthenticated remote attacker to execute code with root privileges. Th...

Cisco Advance Notification for Publication of September 2, 2026, Security Advisories

On September 2, 2026, the Cisco Product Security Incident Response Team PSIRT published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco IOS XR Software Security Hardening Release: September 2026...

CISCO-SA-20161102-N9KAPIC

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:17+00:00| seen| https://t.me/informationsec/1437 2026-08-23 00:00:36+00:00| seen| https://t.me/informationsec/1437...

CVE-2026-66745 Artica Proxy 4.50 Session Fixation via fw.login.php

Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...

CVE-2026-66745

Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...

CVE-2026-66745

Artica Proxy 4.50 (before SP7) is affected by a session-fixation flaw that allows an unauthenticated attacker to hijack an admin session by pre-setting a known PHPSESSID on a victim’s browser prior to login through fw.login.php, gaining a fully authenticated admin session on port 9000. Affected v...

EUVD-2026-49955

Artica Proxy before 4.50.000000 Service Pack 7 fixed in hotfix 20260724-02 contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentication. Attackers can pre-set a controll...

CVE-2026-21653 CCure and Victor Application Server - Server Side Request Forgery

Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery. This issue affects CCure 9000 and victor application server: from 2.9 through 3.0...

CVE-2026-21653

Johnson Controls CCure 9000 and Victor Application Server are affected by a SSRF vulnerability (CVE-2026-21653) impacting versions 2.9 through 3.0. The issue enables Server-Side Request Forgery due to an insecure handling of external requests within the Victor application server. CVSS 4.0 base sc...

Johnson Controls C-CURE 9000 and Victor application server (Update A)

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker with network access to achieve remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. CISA reminds...

PT-2026-64169

Name of the Vulnerable Software and Affected Versions Johnson Controls CCure 9000 and victor application server versions 2.9 through 3.0 Description A Server Side Request Forgery SSRF issue exists in the Victor application server. SSRF is a flaw that allows an attacker to induce the server-side...