CVE-2020-17456

説明 2020年8月21日、seown SLC 130 ルーターに認証RCE脆弱性があることが明らかになりました。脆弱性番号はcve-2020-17456です。この脆弱性は、ルーターのWebサービスの診断機能におけるpingコマンドインジェクションに起因します。複数のハードコードされた認証情報と組み合わせることで、認証されていない攻撃者が認証をバイパスし、ルート権限でターゲットデバイス上で任意のコマンドを実行できます。 使用方法 root@kitploit: python CVE-2020-17456.py http://192.168.1.1 id 例: その他...

MikroRoot

MikroRoot CVE-2018-14847 の自動化バージョン。shodan をスクレイピングして脆弱なホストを探し、それらを悪用しようとします。 使い方 このスクリプトは Python2.x では動作しないことに注意してください。Python 3+ のみを使用してください。 MikroRoot: python3 MikroRoot.py -k SHODANKEY -p page count User: ncss Pass: ncss!@2018 IP: 1.2.3.4 引数 -p スクレイピングするページ数 -k Shodan キー エクスプロイトの作者...

git-secrets-scan

Bitbucket Security: Secret Scanner Scans your files for hardcoded secrets, keys, and passwords. Creates a security Code Insights report if found. This Bitbucket Cloud supported Pipe leverages the gitleaks secret pattern registry to provide industry-leading Security Secrets Scanning capabilities t...

FUXA <= 1.2.7 - Hardcoded JWT Secret Authentication Bypass

FUXA v1.2.7 contains a hardcoded credentials vulnerability caused by use of a hard-coded secret key in server/api/jwt-helper.js, letting remote attackers forge admin tokens and bypass authentication, exploit requires no special conditions. id: CVE-2025-69971 info: name: FUXA = 1.2.7 - Hardcoded J...

Crawl4AI < 0.8.7 - Hardcoded JWT Signing Key Authentication Bypass

Crawl4AI Docker API server versions before 0.8.7 ship with a hardcoded default JWT signing key "mysecret" used to sign and verify HS256 authentication tokens. Because the key is identical across every deployment where SECRETKEY has not been overridden, an unauthenticated attacker can forge a vali...

Four-Faith F3x36 - Authentication Bypass

Four-Faith F3x36 router with firmware v2.0.0 contains an authentication bypass caused by hard-coded credentials in the administrative web server, letting attackers with knowledge of credentials gain administrative access via crafted HTTP requests. id: CVE-2024-9643 info: name: Four-Faith F3x36 -...

Sitecore Experience Manager (XM) and Experience Platform (XP) - Hardcoded Credentials

Sitecore Experience Manager XM and Experience Platform XP versions 10.1 to 10.1.4 rev. 011974 PRE, all versions of 10.2, 10.3 to 10.3.3 rev. 011967 PRE, and 10.4 to 10.4.1 rev. 011941 PRE contain a hardcoded user account. Unauthenticated and remote attackers can use this account to access...

NetMRI < 7.6.1 - Authentication Bypass via Hardcoded Credentials

An issue was discovered in Infoblox NETMRI before 7.6.1. Authentication Bypass via a Hardcoded credential can occur. id: CVE-2025-32815 info: name: NetMRI 7.6.1 - Authentication Bypass via Hardcoded Credentials author: iamnoooob,pdresearch severity: medium description: | An issue was discovered i...

LB-LINK Routers - Unauthenticated Command Injection

LB-LINK X-PRO 1.0.22-20231206 contains a hardcoded credentials vulnerability caused by manipulation of an unknown function in /etc/shadow, letting remote attackers use hardcoded credentials, exploit requires high complexity id: CVE-2026-19900 info: name: LB-LINK Routers - Unauthenticated Command...

Fujitsu IP Series - Hardcoded Credentials

Fujitsu Real-time Video Transmission Gear “IP series” use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. The credentials cannot be changed by the end-user and provide administrative...

CVE-2022-26138

CVE-2022-26138 POC 描述 root@kitploit: The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with knowledge of...

juniper-cve-2015-7755

Juniper CVE-2015-7755 & CVE-2015-7756 Questo repository contiene note, binari e informazioni correlate emerse dall'analisi dei problemi CVE-2015-7755 e CVE-2015-7756 all'interno di Juniper ScreenOS. Per maggiori informazioni su questi problemi, consulta gli URL seguenti:...

StaCoAn

StaCoAn Non più mantenuto! Sarà archiviato a breve. StaCoAn è uno strumento cross‑platform che aiuta sviluppatori, bug‑bounty hunters e hacker etici nell'esecuzione di analisi statica del codice su applicazioni mobili. Questo strumento cerca righe interessanti nel codice che possono contenere:...

Atlassian Questions For Confluence - Hardcoded Credentials

Atlassian Questions For Confluence contains a hardcoded credentials vulnerability. When installing versions 2.7.34, 2.7.35, and 3.0.2, a Confluence user account is created in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attack...

CVE-2015-7755-POC

CVE-2015-7755-POC Rilevamento della vulnerabilità CVE-2015-7755 utilizzando ssh per connettersi alle versioni vulnerabili: ScreenOS 6.2.0r15—6.2.0r18，6.3.0r12—6.3.0r20 Juniper Networks utente: root password: %sun='%s' = %u...

Confluence-Question-CVE-2022-26138-

Confluence-Question-CVE-2022-26138 Atlassian Confluence Server e Data Center: CVE-2022-26138 Quando l'app 'Questions for Confluence' è installata e abilitata su Confluence Server o Data Center, crea un account utente Confluence con il nome utente 'disabledsystemuser' e la password...

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

CVE-2026-13714

Realtyna WPL 5.3.0 - Nicht authentifizierter RCE-Exploit Beschreibung Dieser Exploit zielt auf eine kritische Schwachstelle in den Versionen vor 5.3.0 des Plugins Realtyna Organic IDX + WPL Real Estate ab. Das Plugin verwendet fest verdrahtete Zugangsdaten und erlaubt nicht authentifizierte...

Silent-Call

Silent;Call Cisco Unified Communications Manager 15.x पर प्रमाणीकरण-पूर्व रिमोट रूट तीन HTTP अनुरोध। शून्य क्रेडेंशियल। रूट एक्सेस। अब हर कॉल आपकी है। हमला श्रृंखला चरण| घटक| विवरण ---|---|--- 1| Spoofhack| X-Forwarded-For हेडर स्पूफिंग Tomcat Manager पर लोकलहोस्ट प्रतिबंध को बायपास करता है 2|...

CVE-2026-13714

CVE-2026-13714 Plugin Realtyna Organic IDX + WPL Real Estate 5.3.0 - Caricamento arbitrario di file non autenticato che consente l'esecuzione di codice remoto CVE-2026-13714 — RCE non autenticata in WPL Real Estate Plugin Realtyna Organic IDX + WPL Real Estate per WordPress 5.3.0 Caricamento...