CVE-2026-29988

Milesight IoT devices (multiple models, affected firmware versions) are vulnerable to cleartext transmission of sensitive information through the NFC interface. An unauthenticated attacker with physical proximity can read LoRaWAN ABP NwkSKey , AppSKey , and D2D keys via a simple NFC read operatio...

EUVD-2026-66229

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

EUVD-2026-66228

duplicate record...

Anchor CMS 0.12.3 - Error Log Exposure

Anchor CMS 0.12.3 is susceptible to an error log exposure vulnerability due to an issue in config/error.php. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error such as "Too many connections" has occurred. id: CVE-2018-7251 info: name: Anchor CMS 0.12.3 ...

Gravity SMTP WordPress Plugin - Sensitive Information Exposure

Gravity SMTP WordPress plugin = 2.1.4 contains a sensitive information exposure caused by an unrestricted REST API endpoint at /wp-json/gravitysmtp/v1/tests/mock-data, letting unauthenticated attackers retrieve detailed system configuration data, exploit requires no authentication. id:...

VMware vCenter Server LDAP Broken Access Control

Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller PSC, does not correctly implement access controls. id: CVE-2020-3952 info: name: VMware vCenter Server LDAP Broken Access Control author: 0xAkoko severity: critic...

Jakarta Tomcat 3.1 and 3.0 - Information Disclosure

Jakarta Tomcat 3.1 and 3.0 under Apache contain a vulnerability in the Snoop servlet that reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension, exploit requires remote access. id: CVE-2000-0760 info: name: Jakarta Tomcat 3.1 and 3.0 -...

Palo Alto Networks Expedition - OS Command Injection

An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls...

CVE-2023-35078-Exploit-POC

CVE-2023-35078 Exploit POC La vulnerabilità di accesso API remoto non autenticato CVE-2023-35078 è stata scoperta in Ivanti Endpoint Manager Mobile EPMM, precedentemente noto come MobileIron Core. Questa vulnerabilità interessa tutte le versioni supportate – versione 11.4, release 11.10, 11.9 e...

POC-2020-8558

Visão Geral A CVE-2020-8558 é uma vulnerabilidade do Kubernetes que foi divulgada porque o kube-proxy inesperadamente disponibiliza serviços do host vinculados a localhost para outros na rede. Eu enfatizo o "inesperadamente" porque essa vulnerabilidade é decorrente de uma falha de design descuido...

PT-2026-82338

disconf Distributed Configuration Management Platform 2.6.36 is vulnerable to Incorrect Access Control. The config-fetching APIs /api/config/item, /api/config/file, /api/config/list and /api/config/simple/list are exposed without authentication. The LoginInterceptor explicitly whitelists these fo...

PT-2026-82220

NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service defined in src/webservice/WebService.cpp, whose bind address defaults to all interfaces, and registers routes for reading and writing gflags alongside status and statistics...

CVE-2020-15878

CVE-2020-15878 is a SQL injection vulnerability in LibreNMS 1.65 , specifically in the address parameter of the /ajax_table.php API endpoint. A remote authenticated attacker with normal privileges can exploit this flaw to extract all information from the LibreNMS database. The fix is available in...

PT-2026-82340

A flaw was found in the ipa getkeytab module of the community.general Ansible collection. The module's bind pw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with no log, unlike the sibling password parameter in the same module. As a...

CVE-2026-75329

super-diamond-server versions 1.3.3 and earlier contain an authentication bypass in its Netty-based configuration distribution service, which listens on port 8283 . Because no authentication mechanism is enforced, an unauthenticated attacker can obtain the full configuration of any project —inclu...

CVE-2024-24919-POC

CVE-2024-24919-POC Un semplice strumento per automatizzare CVE-2024-24919 Esposizione di Informazioni Sensibili Caratteristiche Facile da usare. Commenti utili; può testare più domini Uso root@kitploit: git clone https://github.com/SubhankarX01/CVE-2024-24919-POC/ root@kitploit: cd...

CVE-2026-80201 Kimai before 2.53.0 API Token Leakage via Invoice Template

Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowing admins to call getApiToken and getPlainApiToken methods. Attackers with template creation permissions can embed these method calls in invoice templates to leak hashed API tokens in rendered...

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept della vulnerabilità mikrotik CVE-2018-14847 soprattutto su winbox, funziona leggendo la password direttamente da RouterOS sulla porta predefinita 8291. Originale di: https://github.com/BigNerd95/ Requisiti Python 3+ Installazione su Linux root@kitploit:...

CVE-2026-16643

Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions:...

CVE-2026-52776 Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0

Compliance-trestle Trestle is a tooling platform for managing compliance as code. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the URLSecurityValidator that guards trestle's remote-fetch paths against server-side request forgery can be bypassed to reach loopback, link-local,...