2681 matches found
CVE-2018-9995
도구 DVR 자격 증명 표시 root@kitploit: Exploit 제목: "DVR 자격 증명 획득" CVE: CVE-2018-9995 CVSS 기본 점수 v3: 7.3 / 10 CVSS 벡터 문자열: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 날짜: 09/04/2018 Exploit 작성자: Fernandez Ezequiel CodeHolic 에서 최적화 익스플로잇: root@kitploit: $ curl "http://:/device.rsp?opt=user&cmd=list" -H...
CVE-2020-25078
CVE-2020-25078 Mode d'emploi instructions Placer l'URL d'attaque dans le même répertoire que ip.txt The attack IP is placed in the same directory as ip.txt Terminal log root@localhost:/CVE-2020-25078ls CVE-2020-25078.py ip.txt root@localhost:/CVE-2020-25078cat ./ip.txt https://xxx.xxx.xxx.xxx:312...
CVE-2026-86175
NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses . Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, enabling unauthorized access to e...
mikrotik0dayScanner
Mikrotik 0day Scanner de Divulgation d'Identifiants Description: La vulnérabilité permet à un attaquant distant d'exécuter du code arbitraire sur le système cible. La faiblesse existe en raison d'une authentification inadéquate dans l'interface Winbox exposée par défaut sur le port 8291/TCP. Un...
DVR_Sploit
DVRSploit Простой скрипт на Python3 для автоматизации CVE-2018-9995 Требования: requests pip install requests Использование: root@fuckmachine: python3 dvrsploit.py Введите хост DVR: 192.168.69.69 Введите порт DVR: 88 Список устройств:...
CVE-2020-15931
CVE-2020-15931 Netwrix Account Lockout Examiner 4.1 Vulnérabilité de divulgation des identifiants du compte administrateur de domaine Aperçu de la vulnérabilité Netwrix Account Lockout Examiner ALE avant la version 5.1 permet à un adversaire distant non authentifié de déclencher une connexion ver...
D-Link DIR-803 - Authentication Bypass
An authentication bypass vulnerability exists in D-Link DIR-803 routers firmware A1 1.04 and earlier. By manipulating the AUTHORIZEDGROUP parameter in /getcfg.php via newline injection, an attacker can retrieve XML configuration containing administrator credentials without authentication. id:...
Crestron Device - Credentials Disclosure
An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, aj.html sends a JSON document with uname...
CVE-2018-9995_dvr_credentials-dev_tool
Tool DVR 자격 증명 표시 root@kitploit: Exploit Title: "DVR 자격 증명 가져오기" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa Exploit: root@kitploit: $ curl...
CVE-2018-9995_dvr_credentials
Outil Afficher les identifiants DVR root@kitploit: Titre de l'exploit : "Obtient les identifiants DVR" CVE : CVE-2018-9995 Score de base CVSS v3 : 7.3 / 10 Chaîne vectorielle CVSS : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date : 09/04/2018 Auteur de l'exploit : Fernandez Ezequiel...
CVE-2018-9995_dvr_credentials
Outil afficher les identifiants DVR root@kitploit: Exploit Title: "Gets DVR Credentials Modify" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Modify 28/04/2024 Exploit Author: Fernandez Ezequiel twitter:@capitanal...
CVE-2018-9995_dvr_credentials
Outil afficher les identifiants DVR root@kitploit: Exploit Title: "Gets DVR Credentials" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa Exploit : root@kitploi...
CVE-2021-3019
CVE-2021-3019 LanProxy - Traversée de répertoire Lanproxy est un outil de pénétration intranet qui proxy les ordinateurs personnels et serveurs du réseau local vers le réseau public. Il prend en charge le transfert de trafic TCP ainsi que tout protocole de couche supérieure TCP accès aux sites we...
CVE-2017-7921
Exploit CVE-2017-7921 Ce script permet d'interagir avec une caméra vulnérable à la CVE-2017-7921 pour effectuer les opérations suivantes : 1. Télécharger et déchiffrer un fichier de configuration contenant le mot de passe administrateur de la caméra. 2. Télécharger en continu des images chaque...
CVE-2026-18486
IBM ContextForge MCP Gateway (≤ v1.0.7) is vulnerable to credential disclosure and privilege escalation via improper validation of jq filters . An authenticated user with developer privileges can supply a malicious jq program in the jsonpath_filter field that executes unrestricted built-in functi...
PhaseHack
PhaseHack Obtenez les informations de connexion du botnet Phase via une injection SQL aveugle...
CVE-2026-19283
IBM Instana Agent Operator (part of IBM Observability with Instana, builds 1.0.303 through 1.0.323) is vulnerable to information disclosure caused by missing destination namespace validation when copying etcd mTLS client credentials from the openshift-etcd system namespace into an attacker-contro...
CVE-2023-23397-POC-Powershell
CVE-2023-23397-POC-Powershell ReminderSoundFile 옵션을 사용하여 캘린더 NTLM 누출을 보내거나 저장하는 스크립트 함수들입니다. 스크립트를 실행하여 Powershell에 함수를 로드한 후, 아래 예제를 함수 사용의 시작점으로 활용할 수 있습니다. Outlook COM 개체를 사용하여 이메일을 보내므로 Outlook이 설치된 Windows 머신에서 실행해야 합니다. 현재 함수는 스크립트 실행 시점을 기준으로 회의 시작 시간을 추가하고 지속 시간을 2시간으로 설정합니다. 또한 Outlook에...
cve-2026-34472-auth-bypass-zte-h188a-router
CVE-2026-34472 Технический разбор CVE-2026-34472, обход аутентификации через утечку учётных данных, затрагивающий прошивку ZTE ZXHN H188A V6. Краткое описание В протестированных сборках H188A V6 неаутентифицированные запросы к корневому пути могут достигать обработчиков мастера предварительного...
