172380 matches found
mobileiron-exploit
استغلال Tabshell مع مصادقة Kerberos مقتبس من سلسلة استغلال OWASSRF + TabShell أولاً، قم بتصحيح وحدة pyprsp لتمكين تخفيض إصدار WSManStackVersion، وتثبيت التبعيات root@kitploit: $ git clone https://github.com/jborean93/pypsrp $ patch -p0 pyprsp.patch patching file pypsrp/src/pypsrp/complexobjects.p...
smb-usermap
Samba "username map script" تنفيذ الأوامر تستغل هذه الوحدة ثغرة تنفيذ أوامر في إصدارات Samba من 3.0.20 إلى 3.0.25rc3 عند استخدام خيار الإعدادات غير الافتراضي "username map script". من خلال تحديد اسم مستخدم يحتوي على محارف شل shell meta characters، يمكن للمهاجمين تنفيذ أوامر عشوائية. لا يلزم أي...
EUVD-2026-66769
A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...
EUVD-2026-66760
A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account...
EUVD-2026-66761
Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as root...
CVE-2025-54918-POC
CVE-2025-54918 – Proof of Concept PoC ⚠️ Wichtiger Hinweis WICHTIG: Um CVE-2025-54918 zu testen, müssen Sie einen DNS-Eintrag in der Ziel-Active-Directory-Umgebung erstellen. Konsultieren Sie stets den Kunden und holen Sie ausdrückliche Genehmigung ein, bevor Sie testen, da dies das DNS- und...
CP-PLUS-EZ-P21-CVE-2026-65893-65894
🔐 Security Analysis of the CP PLUS EZ-P21 IP Camera CVE-2026-65893 CVE-2026-65894 Arbitrary Code Execution & Improper Authentication – CP PLUS EZ-P21 IP Camera Overview This repository documents two security vulnerabilities identified in the CP PLUS EZ-P21 IP Camera , an IP-based surveillance...
CVE-2024-0204
CVE-2024-0204: Análise aprofundada da bypass de autenticação do Fortra GoAnywhere MFT Este repositório contém um proof-of-concept de exploit para a vulnerabilidade de bypass de autenticação CVE-2024-0204 descoberta no produto Fortra GoAnywhere MFT. A vulnerabilidade permite que um atacante não...
CVE-2021-40539
CVE-2021-40539 CVE-2021-40539 : Vulnérabilité RCE dans ADSelfService Plus 1 : Description de la vulnérabilité ZOHO ManageEngine ADSelfService Plus est une solution intégrée de gestion de mots de passe en libre-service et d'authentification unique pour Active Directory et les applications cloud de...
RLSA-2026:50778 Important: ruby security, bug fix, and enhancement update
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader CVE-2026-27820 net-imap: Net::IMAP: Arbitrary IMAP command...
CVE-2023-27350
PaperCut NG/MG RCE CVE-2023-27350 CVE-2023-27350 के लिए एक सरल बैश एक्सप्लॉइट। यह स्क्रिप्ट प्रमाणीकरण बाइपास, वातावरण तैयारी, और PaperCut प्रिंटर स्क्रिप्टिंग इंजन के माध्यम से कमांड इंजेक्शन को स्वचालित करता है। दृश्य प्रमाण बुनियादी RCE: रिवर्स शेल ट्रिगर करना: त्वरित आरंभ root@kitploit: Clone...
ZeroPair
ZeroPair Zero-Authentication-Bluetooth-Exploit "Stiehl den Ausdruck, übernimm das System" root@kitploit: ███████╗███████╗██████╗ ██████╗ ╚══███╔╝██╔════╝██╔══██╗██╔═══██╗ ███╔╝ █████╗ ██████╔╝██║ ██║ ███╔╝ ██╔══╝ ██╔══██╗██║ ██║ ███████╗███████╗██║ ██║╚██████╔╝ ╚══════╝╚══════╝╚═╝ ╚═╝ ╚═════╝...
CVE-2025-55182
PoC do React2Shell Este repositório fornece um ambiente mínimo intencionalmente vulnerável para testar scanners de segurança contra a recente vulnerabilidade crítica de RCE React2Shell que afeta React Server Components e Next.js. CVE-2025-55182 : Uma vulnerabilidade de execução remota de código...
Important: Red Hat Security Advisory: iscsi-initiator-utils security, bug fix, and enhancement update
An update for iscsi-initiator-utils is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CVE-2026-79178
Incorrect authorization in Web Authentication Passkeys & Security Key...
PT-2026-82797
Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...
PT-2026-82780
Name of the Vulnerable Software and Affected Versions Ebyte NE2-D11 version FW-9167-0-11 Ebyte NA111-M affected versions not specified Description The web management interface fails to consistently enforce authentication before granting access to administrative functionality. This allows an...
PT-2026-82793
Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthorized interaction with privileged functionality and may lead to...
PT-2026-82778
The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users. An attacker may generate valid authentication requests and bypass authentication to obtain administrative access to the device...