Lucene search
+L

2940 matches found

EUVD
EUVD
•added 2026/09/26 2:18 a.m.•4 views

EUVD-2026-87522

OpenClaw npm package 'openclaw' before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a mod...

5.9CVSS5.8AI score
SaveExploits0References2
Nuclei
Nuclei
•added 2026/09/26 2:05 a.m.•26 views

D-Link DIR-803 - Authentication Bypass

An authentication bypass vulnerability exists in D-Link DIR-803 routers firmware A1 1.04 and earlier. By manipulating the AUTHORIZEDGROUP parameter in /getcfg.php via newline injection, an attacker can retrieve XML configuration containing administrator credentials without authentication. id:...

7.5CVSS6.3AI score0.03991EPSS
SaveExploits1References3
Kitploit
Kitploit
•added 2026/09/26 12:00 a.m.•12 views

CVE-2020-15931

CVE-2020-15931 Vulnerabilidad de divulgación de credenciales de cuenta de administrador de dominio en Netwrix Account Lockout Examiner 4.1 Resumen de la vulnerabilidad Netwrix Account Lockout Examiner ALE anterior a la versión 5.1 permite que un adversario remoto no autenticado provoque una...

7.5CVSS7.5AI score0.03726EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/25 11:23 p.m.•8 views

CVE-2023-23397-POC-Powershell

CVE-2023-23397-POC-Powershell Funciones de script para enviar o guardar fuga NTLM de calendario usando la opción ReminderSoundFile. Ejecute el script para cargar las funciones en Powershell, luego puede usar los ejemplos a continuación como punto de partida para usar las funciones. Requiere...

9.8CVSS8.5AI score0.97159EPSS
SaveExploits19
Kitploit
Kitploit
•added 2026/09/25 9:05 p.m.•13 views

CVE-2022-31890

CVE-2022-31890 para osTicket | Sistema de Ticketing de Soporte Apodo: root@kitploit: python nickname.py The output of the first nickname in the table. Contraseña: root@kitploit: python password.py The output of the first password in the table. Salida a archivo: root@kitploit: python dumpFile.py c...

9.8CVSS8.6AI score0.01503EPSS
SaveExploits1
EUVD
EUVD
•added 2026/09/25 8:40 p.m.•4 views

EUVD-2026-87357

When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirect target is a different host, a different port, or a downgrade from HTTPS to HTTP. A server that can steer a redirect therefore...

5.9CVSS5.8AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 5:51 p.m.•8 views

CVE-2017-7921

Exploit para CVE-2017-7921 Este script permite interactuar con una cámara vulnerable a CVE-2017-7921 para realizar las siguientes operaciones: 1. Descargar y descifrar un archivo de configuración que contiene la contraseña del administrador de la cámara. 2. Descargar imágenes continuamente cada...

9.8CVSS8.6AI score0.99998EPSS
SaveExploits14
Kitploit
Kitploit
•added 2026/09/25 5:39 p.m.•11 views

CVE-2021-3019

CVE-2021-3019 Recorrido de Directorios en LanProxy Lanproxy es una herramienta de penetración de intranet que hace de proxy de los ordenadores personales y servidores de la LAN hacia la red pública. Soporta el reenvío de tráfico tcp y cualquier protocolo de capa superior de tcp acceso a sitios we...

7.5CVSS7.6AI score0.16622EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/25 3:02 p.m.•12 views

CVE-2018-9995

Tool show DVR Credentiales root@kitploit: Exploit Title: "Gets DVR Credentials" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel optimized from CodeHolic Exploit: root@kitploit: $...

9.8CVSS8.6AI score0.82322EPSS
SaveExploits15
Kitploit
Kitploit
•added 2026/09/25 1:01 p.m.•18 views

CVE-2018-9995_dvr_credentials

Herramienta Mostrar credenciales DVR root@kitploit: Título del Exploit: "Obtiene credenciales DVR" CVE: CVE-2018-9995 Puntuación Base CVSS v3: 7.3 / 10 Cadena de vector CVSS: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Fecha: 09/04/2018 Autor del Exploit: Fernandez Ezequiel twitter:@capitanalfa...

9.8CVSS8.6AI score0.82322EPSS
SaveExploits15
Kitploit
Kitploit
•added 2026/09/25 9:56 a.m.•8 views

cve-2026-34472-auth-bypass-zte-h188a-router

CVE-2026-34472 Technical breakdown of CVE-2026-34472, an auth bypass via leaked credentials affecting ZTE ZXHN H188A V6 firmware. Summary In the tested H188A V6 builds, unauthenticated requests to the root path can reach pre-login wizard handlers and disclose sensitive data including: WLAN PSKs...

7.1CVSS5.9AI score0.02273EPSS
SaveExploits3References1
Kitploit
Kitploit
•added 2026/09/25 6:50 a.m.•11 views

DVR_Sploit

DVRSploit Script sencillo en python3 para automatizar CVE-2018-9995 Requisitos: requests pip install requests Uso: root@fuckmachine: python3 dvrsploit.py Introduce el host del DVR: 192.168.69.69 Introduce el puerto del DVR: 88 Lista de dispositivos:...

9.8CVSS8.4AI score0.82322EPSS
SaveExploits15
Kitploit
Kitploit
•added 2026/09/25 5:58 a.m.•9 views

MoxaPass

Este es un exploit de ejemplo para CVE-2016-9361. Recupera la cadena de comunidad SNMP y la contraseña 'admin' para muchos tipos de dispositivos Moxa. Utiliza el protocolo de gestión propietario UDP/4800 de Moxa. El protocolo carece de seguridad, y usar el código de función 'unlock' no requiere...

9.8CVSS8.1AI score0.19856EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/25 3:26 a.m.•21 views

mikrotik0dayScanner

Escáner de divulgación de credenciales 0day de Mikrotik Descripción: La vulnerabilidad permite a un atacante remoto ejecutar código arbitrario en el sistema objetivo. La debilidad existe debido a una autenticación incorrecta en la interfaz Winbox expuesta por defecto en el puerto 8291/TCP. Un...

5.7AI score
SaveExploits0
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•21 views

GoAhead Camera - Credential Disclosure

GoAhead camera credential disclosure vulnerability in system.ini. The vulnerability affects certain Wireless IP Camera P2P WIFICAM devices and allows unauthenticated remote attackers to access the system.ini configuration file through a crafted HTTP request. The exposed configuration may contain...

9.8CVSS8.3AI score0.35359EPSS
SaveExploits5References2
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•99 views

Crestron Device - Credentials Disclosure

An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, aj.html sends a JSON document with uname...

10CVSS8.1AI score0.75159EPSS
SaveExploits5References5
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•59 views

Kaseya VSA < 9.5.7 - Credential Disclosure via Windows Agent

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...

10CVSS8.3AI score0.85735EPSS
SaveExploits1References5
OSV
OSV
•added 2026/09/25 1:27 a.m.•6 views

OESA-2026-4012 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

8.4CVSS5.8AI score0.00721EPSS
SaveExploits0References7
Kitploit
Kitploit
•added 2026/09/25 12:50 a.m.•13 views

PhaseHack

PhaseHack Obtén la información de inicio de sesión de la botnet Phase mediante inyección SQL ciega...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 12:15 a.m.•9 views

DVRFaultNET

DVRFaultNET Aplicación de consola .NET que explota la vulnerabilidad CVE-2018-9995 en DVR Uso Una vez lanzado, se le pedirá que ingrese la URL de la cámara DVR. El programa agrega ?opt=user&cmd=list a la URL y envía una solicitud que contiene el encabezado "Cookie:uid=admin", luego el servidor...

9.8CVSS8.4AI score0.82322EPSS
SaveExploits15
Rows per page
Query Builder