Lucene search
+L

2681 matches found

Kitploit
Kitploit
added 2026/09/05 11:21 a.m.6 views

CVE-2018-9995

도구 DVR 자격 증명 표시 root@kitploit: Exploit 제목: "DVR 자격 증명 획득" CVE: CVE-2018-9995 CVSS 기본 점수 v3: 7.3 / 10 CVSS 벡터 문자열: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 날짜: 09/04/2018 Exploit 작성자: Fernandez Ezequiel CodeHolic 에서 최적화 익스플로잇: root@kitploit: $ curl "http://:/device.rsp?opt=user&cmd=list" -H...

9.8CVSS8.7AI score0.82608EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/05 11:05 a.m.4 views

CVE-2020-25078

CVE-2020-25078 Mode d'emploi instructions Placer l'URL d'attaque dans le même répertoire que ip.txt The attack IP is placed in the same directory as ip.txt Terminal log root@localhost:/CVE-2020-25078ls CVE-2020-25078.py ip.txt root@localhost:/CVE-2020-25078cat ./ip.txt https://xxx.xxx.xxx.xxx:312...

7.5CVSS7.9AI score0.97901EPSS
SaveExploits4
CVE
CVE
added 2026/09/05 11:01 a.m.5 views

CVE-2026-86175

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses . Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, enabling unauthorized access to e...

7.1CVSS5.3AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/05 10:41 a.m.5 views

mikrotik0dayScanner

Mikrotik 0day Scanner de Divulgation d'Identifiants Description: La vulnérabilité permet à un attaquant distant d'exécuter du code arbitraire sur le système cible. La faiblesse existe en raison d'une authentification inadéquate dans l'interface Winbox exposée par défaut sur le port 8291/TCP. Un...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/05 7:55 a.m.2 views

DVR_Sploit

DVRSploit Простой скрипт на Python3 для автоматизации CVE-2018-9995 Требования: requests pip install requests Использование: root@fuckmachine: python3 dvrsploit.py Введите хост DVR: 192.168.69.69 Введите порт DVR: 88 Список устройств:...

9.8CVSS8.7AI score0.82608EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/05 3:24 a.m.5 views

CVE-2020-15931

CVE-2020-15931 Netwrix Account Lockout Examiner 4.1 Vulnérabilité de divulgation des identifiants du compte administrateur de domaine Aperçu de la vulnérabilité Netwrix Account Lockout Examiner ALE avant la version 5.1 permet à un adversaire distant non authentifié de déclencher une connexion ver...

7.5CVSS7.5AI score0.03726EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.25 views

D-Link DIR-803 - Authentication Bypass

An authentication bypass vulnerability exists in D-Link DIR-803 routers firmware A1 1.04 and earlier. By manipulating the AUTHORIZEDGROUP parameter in /getcfg.php via newline injection, an attacker can retrieve XML configuration containing administrator credentials without authentication. id:...

7.5CVSS6AI score0.03991EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.97 views

Crestron Device - Credentials Disclosure

An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, aj.html sends a JSON document with uname...

10CVSS8.6AI score0.75159EPSS
SaveExploits5References5
Kitploit
Kitploit
added 2026/09/04 10:01 p.m.4 views

CVE-2018-9995_dvr_credentials-dev_tool

Tool DVR 자격 증명 표시 root@kitploit: Exploit Title: "DVR 자격 증명 가져오기" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa Exploit: root@kitploit: $ curl...

9.8CVSS8.7AI score0.82608EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/04 7:59 p.m.8 views

CVE-2018-9995_dvr_credentials

Outil Afficher les identifiants DVR root@kitploit: Titre de l'exploit : "Obtient les identifiants DVR" CVE : CVE-2018-9995 Score de base CVSS v3 : 7.3 / 10 Chaîne vectorielle CVSS : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date : 09/04/2018 Auteur de l'exploit : Fernandez Ezequiel...

9.8CVSS8.7AI score0.82608EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/04 7:01 p.m.3 views

CVE-2018-9995_dvr_credentials

Outil afficher les identifiants DVR root@kitploit: Exploit Title: "Gets DVR Credentials Modify" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Modify 28/04/2024 Exploit Author: Fernandez Ezequiel twitter:@capitanal...

9.8CVSS8.7AI score0.82608EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/04 6:43 p.m.6 views

CVE-2018-9995_dvr_credentials

Outil afficher les identifiants DVR root@kitploit: Exploit Title: "Gets DVR Credentials" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa Exploit : root@kitploi...

9.8CVSS8.7AI score0.82608EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/04 5:57 p.m.4 views

CVE-2021-3019

CVE-2021-3019 LanProxy - Traversée de répertoire Lanproxy est un outil de pénétration intranet qui proxy les ordinateurs personnels et serveurs du réseau local vers le réseau public. Il prend en charge le transfert de trafic TCP ainsi que tout protocole de couche supérieure TCP accès aux sites we...

7.5CVSS7.6AI score0.16622EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/04 5:50 p.m.3 views

CVE-2017-7921

Exploit CVE-2017-7921 Ce script permet d'interagir avec une caméra vulnérable à la CVE-2017-7921 pour effectuer les opérations suivantes : 1. Télécharger et déchiffrer un fichier de configuration contenant le mot de passe administrateur de la caméra. 2. Télécharger en continu des images chaque...

9.8CVSS8.6AI score0.99998EPSS
SaveExploits13
CVE
CVE
added 2026/09/04 4:24 p.m.12 views

CVE-2026-18486

IBM ContextForge MCP Gateway (≤ v1.0.7) is vulnerable to credential disclosure and privilege escalation via improper validation of jq filters . An authenticated user with developer privileges can supply a malicious jq program in the jsonpath_filter field that executes unrestricted built-in functi...

8.8CVSS5.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/04 4:00 p.m.2 views

PhaseHack

PhaseHack Obtenez les informations de connexion du botnet Phase via une injection SQL aveugle...

5.7AI score
SaveExploits0
CVE
CVE
added 2026/09/04 3:49 p.m.6 views

CVE-2026-19283

IBM Instana Agent Operator (part of IBM Observability with Instana, builds 1.0.303 through 1.0.323) is vulnerable to information disclosure caused by missing destination namespace validation when copying etcd mTLS client credentials from the openshift-etcd system namespace into an attacker-contro...

7.7CVSS5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/04 2:17 p.m.5 views

CVE-2023-23397-POC-Powershell

CVE-2023-23397-POC-Powershell ReminderSoundFile 옵션을 사용하여 캘린더 NTLM 누출을 보내거나 저장하는 스크립트 함수들입니다. 스크립트를 실행하여 Powershell에 함수를 로드한 후, 아래 예제를 함수 사용의 시작점으로 활용할 수 있습니다. Outlook COM 개체를 사용하여 이메일을 보내므로 Outlook이 설치된 Windows 머신에서 실행해야 합니다. 현재 함수는 스크립트 실행 시점을 기준으로 회의 시작 시간을 추가하고 지속 시간을 2시간으로 설정합니다. 또한 Outlook에...

9.8CVSS8.7AI score0.97408EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/04 9:55 a.m.3 views

cve-2026-34472-auth-bypass-zte-h188a-router

CVE-2026-34472 Технический разбор CVE-2026-34472, обход аутентификации через утечку учётных данных, затрагивающий прошивку ZTE ZXHN H188A V6. Краткое описание В протестированных сборках H188A V6 неаутентифицированные запросы к корневому пути могут достигать обработчиков мастера предварительного...

7.1CVSS5.4AI score0.08546EPSS
SaveExploits3References1
EUVD
EUVD
added 2026/09/04 6:31 a.m.4 views

EUVD-2026-70919

XING CPTrans-ME-X contains a Use of Hard-coded Password CWE-259. Anyone with the knowledge of the credential may log in to the affected device...

9.8CVSS8.8AI score0.00291EPSS
SaveExploits0References2
Rows per page
Query Builder