Lucene search
+L

171400 matches found

EUVD
EUVD
added 2026/08/25 11:47 a.m.5 views

EUVD-2026-65438

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges...

9.3CVSS5.8AI score
SaveExploits0References1
CVE
CVE
added 2026/08/25 11:47 a.m.23 views

CVE-2026-57910

CVE-2026-57910 affects the WatchGuard Agent , where an improper authentication flaw allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges . The vulnerability is rated CVSS 4.0: 9.3 (CRITICAL) , with a network attack vector, lo...

9.3CVSS6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 11:41 a.m.2 views

CVE-2023-46805_CVE-2024-21887

CVE-2023-46805CVE-2024-21887 يتحقق السكربت في هذا المستودع من وجود الثغرات CVE-2023-46805 تجاوز المصادقة وCVE-2024-21887 تنفيذ الأوامر عن بُعد في منتج Ivanti Connect Secure ويستغلها. يمكنك الاطلاع على تفاصيل الثغرات عبر هذا الرابط...

9.1CVSS8.8AI score0.99999EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/08/25 11:36 a.m.1 views

CVE-2021-26102

CVE-2021-26102 PoC du contournement d'authentification FortiWAN https://www.fortiguard.com/psirt/FG-IR-21-048...

9.8CVSS8.8AI score0.16761EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 11:33 a.m.1 views

patch-CVE-2026-05890

التصحيح: CVE-2026-05890 تفاصيل الثغرة CVE : CVE-2026-05890 المنتج : Juniper Junos الوصف : مصادقة غير سليمة الخطورة : عالية حالة التصحيح: مُطبَّق...

5.3AI score
SaveExploits0
Cvelist
Cvelist
added 2026/08/25 11:33 a.m.11 views

CVE-2026-79672 Ech0 before 4.4.3 Authentication Bypass via Comment Panel

Ech0 before 4.4.3 fails to enforce scope-based authorization on nine comment panel admin endpoints, allowing access tokens with minimal scopes to perform full comment moderation operations. Attackers with a limited-scope access token can list, approve, reject, delete comments, and modify comment...

7CVSS
SaveExploits0References2
CVE
CVE
added 2026/08/25 11:33 a.m.10 views

CVE-2026-79668

Ech0 versions before 4.7.3 contain an authentication bypass in the PUT /api/echo/like/:id endpoint. The endpoint lacks both identity verification and rate limiting, allowing unauthenticated attackers to repeatedly increment the fav_count field for any known echo identifier. This can arbitrarily i...

6.9CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 11:33 a.m.5 views

EUVD-2026-65446

Ech0 before 4.7.3 contains an authentication bypass vulnerability in the PUT /api/echo/like/:id endpoint that allows unauthenticated attackers to increment engagement metrics without identity verification or rate limiting. Attackers can send repeated requests to arbitrarily inflate the favcount...

6.9CVSS5.5AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/25 11:33 a.m.12 views

CVE-2026-79667 Ech0 before 4.4.3 Authentication Bypass via Scope Enforcement

Ech0 version 4.3.4 and earlier fails to reliably enforce scoped access token least-privilege restrictions on several privileged admin routes. Multiple privileged endpoints e.g., /api/inbox, /api/panel/comments, /api/backup/export omit scope checks and authorize based only on the user's admin role...

7.6CVSS
SaveExploits0References2
CVE
CVE
added 2026/08/25 11:33 a.m.13 views

CVE-2026-79667

Ech0 versions 4.3.4 and earlier fail to enforce scoped access token (least-privilege) restrictions on several privileged admin routes. Endpoints such as /api/inbox, /api/panel/comments, and /api/backup/export authorize based only on the user's admin role, omitting scope checks. The backup export ...

7.6CVSS5.5AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/25 11:31 a.m.31 views

ketshash

Ketshash A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs. The tool was published as part of the "Pass-The-Hash detection" research - more details on "Pass-The-Hash detection" are in the blog post:...

5.5AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/25 11:31 a.m.1 views

patch-CVE-2026-11553

Correctif : CVE-2026-11553 Détails de la vulnérabilité CVE : CVE-2026-11553 Produit : VMware vCenter Description : Contournement de l'authentification Gravité : Critique Statut du correctif : DÉPLOYÉ...

9CVSS8.1AI score0.00477EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 11:26 a.m.2 views

cve-2022-42475-poc

CVE-2022-42475 PoC تنفيذ تعليمات برمجية عن بُعد قبل المصادقة في Fortinet SSL VPN الوصف CVE-2022-42475 هي ثغرة أمنية من نوع تجاوز سعة المخزن المؤقت المستند إلى الكومة heap-based buffer overflow في خدمة SSL VPN الخاصة بـ FortiOS، وتسمح للمهاجمين غير المصادَق عليهم بتنفيذ تعليمات برمجية عشوائية عن...

9.8CVSS9.2AI score0.99474EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/08/25 11:25 a.m.1 views

CVE-2025-0108-PoC

CVE-2025-0108 प्रूफ ऑफ कॉन्सेप्ट PoC इस रिपॉजिटरी में CVE-2025-0108 भेद्यता के लिए एक प्रूफ ऑफ कॉन्सेप्ट PoC शामिल है, जो Palo Alto Networks के PAN-OS सॉफ़्टवेयर में प्रमाणीकरण बायपास authentication bypass समस्या है। यहाँ दिए गए स्क्रिप्ट लक्षित सिस्टम पर एक क्राफ्टेड HTTP अनुरोध भेजकर भेद्यता का...

9.1CVSS8.3AI score0.98455EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/08/25 11:25 a.m.3 views

Patch-the-Path-CVE-2025-55234-Detection-Defense

Patch-the-Path-CVE-2025-55234-Detection-Defense यह प्लेबुक CVE-2025-55234 के लिए पहचान, रोकथाम और सुधार रणनीतियों को रेखांकित करता है, जो एक गंभीर विंडोज SMB विशेषाधिकार वृद्धि दोष है। By Mark Mallia परिचय आज के लगातार बदलते साइबर-जोखिम परिदृश्य में, आंतरिक नेटवर्क पर निम्न-विशेषाधिकार वाले स्थान...

9.8CVSS7.4AI score0.20092EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 11:24 a.m.1 views

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation

कर्नेल-अराजकता-हथियारीकरण-CVE-2025-62215-SYSTEM-विशेषाधिकार-वृद्धि के लिए CVE-2025-62215 का व्यावहारिक विश्लेषण, जो एक विंडोज कर्नेल रेस स्थिति है जिसका जंगली में शोषण किया गया। SYSTEM तक विशेषाधिकार वृद्धि, पहचान स्क्रिप्ट और एंटरप्राइज रक्षकों और रेड टीमर्स के लिए पैच सत्यापन रणनीतियों का...

7CVSS7.3AI score0.05985EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/25 11:24 a.m.1 views

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps

من-موطئ-القدم-إلى-مسؤول-المجال-تسليح-CVE-2025-54918-في-العالم-الحقيقي-DevOps محاكاة استغلال وتخفيف أثر CVE-2025-54918 ثغرة NTLM في Windows. يتضمن سكربتات كشف، وتصحيحًا عبر Ansible، وتقوية لـ CI/CD. يوضح تصعيد الامتيازات من وصول منخفض المستوى إلى SYSTEM في بيئات سحابية هجينة. بقلم Mark Mallia مقدم...

9.8CVSS7.9AI score0.38176EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 11:19 a.m.2 views

Swego

سويكو سكين جيش سويسري لخادم الويب بلغة Golang. يبقى بسيطاً مثل Python SimpleHTTPServer لكن مع العديد من الميزات الاستخدام تشغيل الملف الثنائي إذا كنت لا ترغب في بنائه، تتوفر الملفات الثنائية على https://github.com/nodauf/Swego/releases خلاف ذلك، يجب تثبيت build-essential وتكوين GOPATH:...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/25 11:11 a.m.2 views

lgosp-poc

LG On Screen Phone प्रमाणीकरण बाईपास PoC LG On Screen Phone क्या है? LG का ऑन-स्क्रीन फोन एप्लिकेशन OSP पीसी के माध्यम से LG के Android स्मार्टफोन तक पहुंचना और उन्हें नियंत्रित करना आसान बनाता है। कनेक्शन USB केबल या वायरलेस रूप से Wi-Fi या Bluetooth के माध्यम से स्थापित किया जा सकता है। OSP के...

8.3CVSS5.2AI score0.0451EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 11:07 a.m.1 views

cve-2026-34472-auth-bypass-zte-h188a-router

CVE-2026-34472 تحليل تقني لـ CVE-2026-34472، وهو تجاوز للمصادقة عبر تسريب بيانات اعتماد يؤثر على برنامج ZTE ZXHN H188A V6 الثابت. ملخص في الإصدارات H188A V6 التي تم اختبارها، يمكن للطلبات غير المصادقة إلى المسار الجذر الوصول إلى معالجات ما قبل تسجيل الدخول وكشف بيانات حساسة تشمل: مفاتيح WLAN PSK...

7.1CVSS5.6AI score0.08546EPSS
SaveExploits3References1
Rows per page
Query Builder