CVE-2024-5420-XSS

Description Une vulnérabilité a été découverte dans utnserver Pro, utnserver ProMAX et INU-100 version 20.1.22 et antérieures, affectant le paramètre de description de l'appareil dans l'interface web. Cette faille permet un cross-site scripting XSS stocké, permettant aux attaquants d'injecter du...

COMahawk

COMahawk Повышение привилегий: использование CVE-2019-1405 и CVE-2019-1322 Видео-демонстрация https://vimeo.com/373051209 Использование Скомпилируйте или скачайте из релиза https://github.com/apt69/COMahawk/releases 1. Запустите COMahawk.exe 2. ??? 3. Надеемся, профит или 1. COMahawk.exe...

CVE-2026-22005-OAuth-2.0-Device-Code-Phishing-Short-Interval-

CVE-2026-22005 – Фишинг с помощью кода устройства OAuth 2.0 короткий интервал Программный код Python root@kitploit: devicecodeserver.py - Authorization server with too-fast polling import time, secrets codes = @app.route'/device/code' def devicecode: code = secrets.tokenurlsafe16 codescode =...

CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 est une vulnérabilité que j'ai soumise à NVIDIA PSIRT. Personnellement, elle peut entraîner des risques de sécurité élevés dans les clusters HPC multi-locataires, en particulier sur les plates-formes de machine learning dans le cloud. Ce dépôt illustre simplement la...

NetProbe

NetProbe : Sonde réseau NetProbe est un outil que vous pouvez utiliser pour scanner les appareils de votre réseau. Le programme envoie des requêtes ARP à n'importe quelle adresse IP de votre réseau et liste les adresses IP, les adresses MAC, les fabricants et les modèles d'appareils des appareils...

DahuaConsole

Dahua Console Версия: Pre-alpha Баги: Есть TODO: Много всего Установка зависимостей root@kitploit: sudo pip3 install -r requirements.txt Аргументы root@kitploit: -h, --help show this help message and exit --rhost RHOST Remote Target Address IP/FQDN --rport RPORT Remote Target Port --proto...

btlejack

BtleJack : un nouveau canif Bluetooth Low Energy Btlejack fournit tout le nécessaire pour sniffer, brouiller et détourner des appareils Bluetooth Low Energy. Il utilise un ou plusieurs BBC Micro:Bit dotés d'un firmware dédié. Vous pouvez également souhaiter utiliser un Adaptateur Bluefruit LE...

awesome-flipperzero

Flipper Zero 기기를 위한 Awesome 리소스 모음입니다. 👋 Flipper Zero가 처음이신가요? 질문이 있으신가요? FAQ 문서를 확인해보세요❗ | 🚫 Flipper Devices Inc.와 관련이 없습니다. ---|--- 목차 펼치기 가능 데이터베이스 및 덤프 일반 Sub-GHz NFC/RFID 적외선 BadUSB 음악 기타 애플리케이션 및 플러그인 일반 Sub-GHz 적외선 BadUSB GPIO 블루투스 게임 유틸리티/기타 펌웨어 및 트윅 공식 펌웨어 ofw 커스텀 펌웨어 cfw 구형/관리 중단된 펌웨어 그...

WAVLINK - Access Control

Wavlink WN530HG4, WN531G3, WN533A8, and WN551K are susceptible to improper access control via /cgi-bin/ExportAllSettings.sh, where a crafted POST request returns the current configuration of the device, including the administrator password. No authentication is required. The attacker must perform...

Palo Alto Expedition - SQL Injection

An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expeditio...

TOTOLINK EX1200T 4.1.2cu.5215 - Authentication Bypass

TOTOLINK EX1200T 4.1.2cu.5215 is susceptible to authentication bypass. An attacker can bypass login by sending a specific request through formLoginAuth.htm, thus potentially being able to obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-42887 info:...

Emerson Dixell XWEB-500 - Arbitrary File Write

Emerson Dixell XWEB-500 contains an arbitrary file write caused by unauthenticated access to /cgi-bin/logoextraupload.cgi, /cgi-bin/calsave.cgi, and /cgi-bin/loutils.cgi, letting attackers write any file on the system, exploit requires no authentication. id: CVE-2021-45420 info: name: Emerson...

LB-LINK Routers - Unauthenticated Command Injection

LB-LINK X-PRO 1.0.22-20231206 contains a hardcoded credentials vulnerability caused by manipulation of an unknown function in /etc/shadow, letting remote attackers use hardcoded credentials, exploit requires high complexity id: CVE-2026-19900 info: name: LB-LINK Routers - Unauthenticated Command...

AnythingLLM - Information Disclosure

AnythingLLM suffers from an information disclosure vulnerability through the /api/setup-complete API endpoint. By accessing this endpoint, a remote and unauthenticated attacker can access sensitive configuration of the target AnythingLLM instance. This detection is included in the AI and LLM...

LOYTEC LGATE-902 6.3.2 - Local File Inclusion

LOYTEC LGATE-902 6.3.2 is susceptible to local file inclusion which could allow an attacker to manipulate path references and access files and directories including critical system files that are stored outside the root folder of the web application running on the device. This can be used to read...

Brother MFC-L9570CDW - Information Disclosure

An unauthenticated attacker who can access either the HTTP service TCP port 80, the HTTPS service TCP port 443, or the IPP service TCP port 631, can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mntinfo.csv can be accessed via a GET request and no...

Optergy Proton/Enterprise - Unauthenticated RCE via Backdoor Console

Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console. id: CVE-2019-7276 info: name: Optergy Proton/Enterprise - Unauthenticated RCE via Backdoor Console author: daffainfo severity: critical description: | Optergy Proton/Enterprise devices allow Remote Root Cod...

YeaLink DM 3.6.0.20 - Remote Command Injection

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. id: CVE-2021-27561 info: name: YeaLink DM 3.6.0.20 - Remote Command Injection author: shifacyclewala,hackergautam severity: critical description: Yealink...

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198은 Cisco IOS XE 소프트웨어 Web UI 기능의 심각한 취약점으로, 인증되지 않은 원격 공격자가 영향을 받는 시스템에 권한 수준 15의 계정을 생성하여 장치를 완전히 제어할 수 있게 합니다. 해당 취약점은 주로 Web UI 기능의 경로 분석 처리 부적절로 인해 발생합니다. 공격자는 정교하게 조작된 HTTP 요청을 통해 이중 URL 인코딩을 사용하여 Nginx의 경로 필터링 메커니즘을 우회하고, /webuiwsmahttp와 같은 보호된 내부 엔드포인트에 직접...

AutoGadgetFS

Dons Ethereum : 0xA919e40ddB0563918dDc174320D91992e0048477 Table des matières 1. Qu'est-ce qu'AutoGadgetFS ? 2. Prérequis 3. Configuration a. Test de périphérique uniquement b. Configuration minimale agfs au milieu c. Configuration complète agfs au milieu avec support de débogage 4. Support des...