sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git root@kitploit: git clone...

CVE-2025-8875-CVE-2025-8876

CVE-2025-8875 & CVE-2025-8876 How does this detection method work? Version detection template - anything running 2025.3.1.9 or older is considered vulnerable to CVE-2025-8875 & CVE-2025-8876 How do I run this script? 1. Download Nuclei from here 2. Copy the template to your local system 3. Run th...

CVE

CVE A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others. CVE-2026-53264 Target: Linux Kernel Version: CentOS 9 kernel version 5.14.0-721 Exploit Written By: Lee Jia Jie CVE-2025-29824 Target: Windows Common Log Fi...

N-able N-central < 2024.2 - Authentication Bypass Detection

N-central server versions prior to 2024.2 contain an authentication bypass in the user interface, letting attackers access restricted areas without proper credentials, exploit requires no specific conditions. id: CVE-2024-28200 info: name: N-able N-central 2024.2 - Authentication Bypass Detection...

N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 id: CVE-2026-86206 info: name: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing author:...

n-able_n-central_xxe_file_read

N-able N-central Unauthenticated XXE Sensitive Information Leak Proof of concept exploit for N-able N-central to chain CVE-2025-9316 and CVE-2025-11700 to read files which contain credentials Blog Post Deep-dive analysis here:...

cov-int

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

CVE-2025-5777-TrendMicro-ApexCentral-RCE

🚨 CVE-2025-5777 – Trend Micro Apex Central Auth Bypass + RCE 🔎 Overview CVE-2025-5777 is a critical authentication bypass and remote code execution RCE vulnerability discovered in Trend Micro Apex Central. It allows unauthenticated attackers to execute arbitrary commands on the system by abusing ...

CVE-2022-23779

CVE-2022-23779: Internal Hostname Disclosure Vulnerability Information Description: Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by reading HTTP redirect responses. Versions Affected: 10.1.2137.7...

CVE-2022-47966

CVE-2022-47966 POC for CVE-2022-47966 affecting the following ManageEngine products: Access Manager Plus Active Directory 360 ADAudit Plus ADManager Plus ADSelfService Plus Analytics Plus Application Control Plus Asset Explorer Browser Security Plus Device Control Plus Endpoint Central Endpoint...

N-able N-central - Authentication Bypass

An authentication bypass in N-central 2026.3 HF 3 leads to authentication bypass in internal-only APIs. id: CVE-2026-86207 info: name: N-able N-central - Authentication Bypass author: rapid7,DhiyaneshDk severity: critical description: | An authentication bypass in N-central 2026.3 HF 3 leads to...

N-able N-central < 2026.3.1.10 - Authentication Bypass

N-able N-central versions through 2026.3.1 contain an authentication bypass that lets a remote unauthenticated attacker take over an administrator account and gain full control of the N-central server. CVE-2026-18577 is a bypass of the incomplete fix for CVE-2026-18556, so the 2026.3.1 Hotfix 1...

D-Link Central WifiManager - Server-Side Request Forgery

D-Link Central WifiManager is susceptible to server-side request forgery. The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, as demonstrated by an...

CVE-2024-50404

CVE-2024-50404 https://www.qnap.com/en/security-advisory/qsa-24-48 https://www.cve.org/CVERecord?id=2024-50404 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 6.8 "A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow...

CVE-2026-86218-N-central-IOC-Toolkit

CVE-2026-86218 — N-able N-central Pre-Authentication RCE | IOC & Detection Toolkit CVSS 10.0 Critical · Pre-Auth Remote Code Execution · Static Code Injection CWE-96 · Actively Exploited · CISA KEV -yellow Maintainer: @jithinkrishnanrs · Repo:...

jetty-line-check

jetty-line-check 你这套 Jetty或 Spring Boot 带进来的 Jetty,中了 2026 年这五条 CVE 的哪几条 —— 而官方叫你升的那一版,在 Maven Central 上到底存不存在? 主打 CVE-2026-2332GHSA-355h-qmc2-wpwf,high / CVSS v3 7.4:jetty-http 的 chunked 请求走私。 最硬的一条事实:9.4 / 10 / 11 这三条 EOL 老线的公开修复版根本不存在 —— 官方安全页对它们逐条写着 see details for availability= 商业支持,而那些版本号在...

CVE-2023-47564

CVE-2023-47564 https://www.qnap.com/en/security-advisory/qsa-24-03 https://vulners.com/cve/CVE-2023-47564 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 8.1 "An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the...

codehaus-plexus__plexus-archiver_CVE-2018-1002200_3-5

Plexus-archiver The current master is now at https://github.com/codehaus-plexus/plexus-archiver Release Notes You can find details about the different releases in the Release Notes. Release 3.4. Release 3.3. Release 3.2...

Big-IP-Next-CVE-2024-26026

CVE-2024-26026 BIG-IP Next Central Manager API UNAUTHENTICATED SQL INJECTION link: https://eclypsium.com/blog/big-vulnerabilities-in-next-gen-big-ip/...

CVE-2026-11748

creationtimestamp| type| source ---|---|--- 2026-09-11 22:37:28+00:00| published-proof-of-concept| https://github.com/line/centraldogma/security/advisories/GHSA-98q5-5qh2-7w75 2026-09-12 04:32:07+00:00| seen| https://gist.github.com/alon710/c05d2b733514467507b538dab5375550...