ASUS-SmartHome-Exploit

ASUS-SmartHome-Exploit Идентификаторы CVE CVE-2019-11061 : Нарушение контроля доступа в HG100 Затронутые продукты: ASUS SmartHome Gateway HG100, версия прошивки Затронутые продукты: ASUS SmartHome Android APP версия 3.0.45190701 Описание Если злоумышленник находится в одной локальной сети с HG100...

BlueGate

BlueGate PoC для уязвимости Remote Desktop Gateway - CVE-2020-0609 & CVE-2020-0610. Спасибо ollypwn за указание на мою глупую ошибку! Установка Я использую пропатченную версию pydtls, так как оригинальный репозиторий не собирался должным образом. root@kitploit: cd pydtls sudo python setup.py...

CVE-2022-22947

Spring Cloud Gateway 3.0.7 и 3.1.1 Внедрение кода RCE CVE: CVE-2022-22947 CVSS: 10.0 Vmware - https://tanzu.vmware.com/security/cve-2022-22947 Приложения, использующие Spring Cloud Gateway, уязвимы к атаке внедрения кода, когда конечная точка Gateway Actuator включена, доступна и не защищена...

GPON-LOADER

GPON-LOADER Эксплойт-загрузчик для удаленного выполнения кода с полезной нагрузкой на устройствах GPON Home Gateway CVE-2018-10562, написанный на Python. Зависимости requests Использование root@kitploit: python gpon-loader.py...

CVE-2023-4542

poc Шлюз аудита поведения D-LINK-DAR-8000-10 Online имеет уязвимости удаленного выполнения кода RCE Официальный сайт: http://www.dlink.com.cn/ Версия: D-LINK DAR-8000-10 Смотрите страницу входа. Сформируйте URL:...

CVE-2019-19781

CVE-2019-19781 Citrix Application Delivery Controller 및 Citrix Gateway에서의 원격 코드 실행RCE Citrix Application Delivery ControllerADC, 구 NetScaler ADC 및 Citrix Gateway구 NetScaler Gateway에서 취약점이 확인되었습니다. 악용될 경우 인증되지 않은 공격자가 임의 코드 실행을 수행할 수 있습니다. 편집 : Fireeye의 CVE-2019-19781용 침해 지표IoC 스캐너 -...

SpringCloudGatewayRCE

SpringCloudGateway Удаленное выполнение команд RCE Автор: Tas9er 0x00 Обзор рисков Этот инструмент предназначен только для авторизованного тестирования безопасности. Запрещается несанкционированная атака на сайты. 0x01 Использование инструмента java -jar SpringCloudGatewayRCE.jar 0x02 Проблемы с...

CVE-2024-24919-Sniper

CVE-2024-24919-Sniper 개요 CVE-2024-24919 Sniper는 Check Point Security Gateway 정보 노출Information Disclosure 취약점을 스캔하도록 설계된 Python 스크립트입니다. 이 스크립트는 단일 대상 및 대량 스캔을 모두 수행할 수 있으며, 멀티스레딩을 활용하여 스캔 속도를 향상시킵니다. 대상과 스캔 동작을 지정하기 위한 다양한 명령줄 옵션을 지원합니다. 기능 CVE-2024-24919 취약점 스캔 및 악용 단일 대상 및 대량 스캔 지원 향상된 성능을 위한...

CVE-2025-5777

CVE-2025-5777 - Эксплойт утечки памяти Citrix NetScaler 📌 Обзор Этот инструмент демонстрирует CVE-2025-5777 , критическую уязвимость раскрытия памяти в устройствах Citrix NetScaler ADC/Gateway. Эксплойт извлекает чувствительное содержимое памяти через некорректные запросы аутентификации. Ключевые...

CVE-2019-19781

CVE-2019-19781 Citrix ADC Удаленное выполнение кода Использование Python: python CVE-2019-19781.py http://192.168.3.244 0x01 Скачать NSVPX-ESX-13.0-47.22nc64.zip https://www.citrix.com/downloads/citrix-gateway/...

nipe

An engine to make Tor Network your default gateway. Summary The Tor project allows users to surf the Internet, chat and send instant messages anonymously through its own mechanism. It is used by a wide variety of people, companies and organizations, both for lawful activities and for other illici...

Citrix-cve-2025-6543

Citrix CVE-2025-6543 Citrix가 CVE-2025-6543에 취약한지 확인하는 스크립트 citrix-cve-2025-6543-check.py는 2025년 6월 Citrix가 공개한 메모리 오버플로우 CVE-2025-6543에 취약한 NetScaler ADC / Gateway 인스턴스를 식별하는 명령줄 Python 3 스크립트입니다. Oruss 그룹의 침투 테스터 및 대응 팀을 위해 설계되었으며, 사전 승인을 받은 경우에만 프로덕션 또는 실험실 환경을 신속하게 확인할 수 있습니다. 주요 기능 기능 세부 사항 원...

Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection

Alt-n/MDaemon Security Gateway through 8.5.0 is susceptible to XML injection via SecurityGateway.dll?view=login. An attacker can inject an arbitrary XML argument by adding a new parameter in the HTTP request URL. As a result, the XML parser fails the validation process and discloses information...

Spring Cloud Gateway Server Webflux - Broken Access Control

Spring Cloud Gateway Server Webflux contains a vulnerability caused by unsecured and exposed actuator endpoints allowing modification of Spring Environment properties, letting attackers modify configuration, exploit requires unsecured actuator endpoints exposure. id: CVE-2025-41243 info: name:...

Tieline IP Audio Gateway <=2.6.4.8 - Unauthorized Remote Admin Panel Access

Tieline IP Audio Gateway 2.6.4.8 and below is affected by a vulnerability in the web administrative interface that could allow an unauthenticated user to access a sensitive part of the system with a high privileged account. id: CVE-2021-35336 info: name: Tieline IP Audio Gateway =2.6.4.8 -...

Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read

The vulnerability would enable an attacker to remotely obtain sensitive information from a NetScaler appliance configured as a Gateway or AAA virtual server via a very commonly connected Web interface, and without requiring authentication. This bug is nearly identical to the Citrix Bleed...

Payment Gateway for Telcell < 2.0.4 - Open Redirect

The plugin does not validate the apiurl parameter before redirecting the user to its value, leading to an Open Redirect issue id: CVE-2023-6786 info: name: Payment Gateway for Telcell 2.0.4 - Open Redirect author: s4e-io severity: medium description: | The plugin does not validate the apiurl...

Ozeki 10 SMS Gateway 10.3.208 - Arbitrary File Read

An arbitrary file read vulnerability, also known as a "path traversal" or "directory traversal" vulnerability, occurs when an attacker is able to access files on a system that they shouldn't have access to. This vulnerability arises from improper input validation or insufficient access controls i...

Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection

Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30,...

Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Path Traversal

Carel pCOWeb HVAC BACnet Gateway 2.1.0 contains an unauthenticated arbitrary file disclosure caused by improper verification of the 'file' GET parameter in logdownload.cgi, letting attackers disclose sensitive files via directory traversal, exploit requires no authentication. id: CVE-2022-37122...