Lucene search
+L

6101 matches found

Kitploit
Kitploit
added 2026/09/08 3:11 p.m.208 views

hontel

HonTel HonTel is a Honeypot for Telnet service. Basically, it is a Python v2.x application emulating the service inside the chroot environment. Originally it has been designed to be run inside the Ubuntu/Debian environment, though it could be easily adapted to run inside any Linux environment...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/08 1:31 p.m.4 views

HostHunter

HostHunter v2.0 A tool to efficiently discover and extract hostnames providing a large set of target IPv4 or IPv6 addresses. HostHunter utilises simple OSINT and active reconaissance techniques to map IP targets with virtual hostnames. This is especially useful for discovering the true attack...

5.9AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/09/08 12:18 p.m.3 views

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

9.6CVSS5.8AI score0.00692EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/08 12:08 p.m.4 views

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

9.6CVSS5.8AI score0.00692EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/08 10:56 a.m.4 views

uncle-spufus

█░░█ █▀▀▄ █▀▀ █░░ █▀▀ █▀▀ █▀▀█ █░░█ █▀▀ █░░█ █▀▀ v1.6 █░░█ █░░█ █░░ █░░ █▀▀ ▀▀█ █░░█ █░░█ █▀▀ █░░█ ▀▀█ ░▀▀▀ ▀░░▀ ▀▀▀ ▀▀▀ ▀▀▀ ▀▀▀ █▀▀▀ ░▀▀▀ ▀░░ ░▀▀▀ ▀▀▀ Uncle Spufus v1.6 Una herramienta que automatiza la suplantación de direcciones MAC y nombres de host ¿Qué es Uncle Spufus Mi larga historia...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 10:29 a.m.6 views

CVE-2026-34207

CVE-2026-34207 El filtro SSRF verificaba el texto del nombre de host, pero el destino real se decidía después mediante DNS. Esa brecha permitió que URLs de Webhook controladas por el atacante alcanzaran loopback, metadatos y objetivos de red privada. Introducción Encontré este problema mientras...

7.6CVSS5.9AI score0.00239EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/08 6:05 a.m.7 views

CVE-2018-19518

CVE-2018-19518 último informe aquí: https://gitlab.com/ensimag-security/CVE-2018-19518/-/jobs/artifacts/master/raw/rapport.pdf?job=PDF Uso ejecutar la aplicación root@kitploit: docker-compose up -d ejemplo de uso normal para la aplicación web. imap : webmail.grenoble-inp.org user :...

8.5CVSS6.9AI score0.9523EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/07 11:13 p.m.4 views

CVE-2022-46169_poc

CVE-2022-46169 ejecución remota de código no autenticada Descripción Omisión de autenticación: la comprobación de autorización basada en el nombre de host no se implementa de forma segura para la mayoría de las instalaciones de Cacti Inyección de comandos: la entrada del usuario sin sanitizar se...

9.8CVSS8.8AI score0.99826EPSS
SaveExploits48
NVD
NVD
added 2026/09/07 11:17 a.m.3 views

CVE-2026-86295

A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...

8.3CVSS0.01722EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/07 10:15 a.m.32 views

CVE-2026-86295 D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection

A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...

8.3CVSS0.01722EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/07 10:15 a.m.18 views

CVE-2026-86295

A command injection vulnerability in D-Link DIR-895L (firmware A1_102b07) affects the sendACK function in the udhcpcd/serverpacket.c component. Manipulation of the Hostname argument allows remote, unauthenticated attackers to inject commands, with a CVSS 3.1 base score of 8.3 (HIGH) . A proof-of-...

8.3CVSS0.01722EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/07 10:15 a.m.6 views

EUVD-2026-72334

A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...

8.3CVSS0.01722EPSS
SaveExploits0References6
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.121 views

Cockpit Web Console < 360 - Remote Code Execution

Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH...

9.8CVSS6.8AI score0.1548EPSS
SaveExploits4References3
Kitploit
Kitploit
added 2026/09/06 10:54 p.m.1 views

CVE-2026-78850

Matomo Authenticated SiteContentDetector Blind SSRF Reporter Name: CYBER-SEC Contact: [email protected] Summary Matomo allows an authenticated site administrator to configure a site's mainurl with an internal address. Any authenticated user with view access can later trigger...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/06 2:18 a.m.4 views

cve-2026-54316-lab

CVE-2026-54316 — Laboratorio de exfiltración de Claude Code vía WebFetch y HuggingFace Un laboratorio autocontenido y desechable que reproduce GHSA-fg94-h982-f3mm / CVE-2026-54316: Claude Code preaprobó huggingface.co como un nombre de host simple para la herramienta WebFetch, por lo que cualquie...

9.1CVSS6.2AI score0.00466EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/05 9:44 a.m.6 views

CVE-2025-46408

CVE-2025-46408 Improper Hostname Verification in EagleEyes Lite Android Application 1. Overview Name : EagleEyesLite Version : 2.0.0 Vendor : AVTECH CWE : CWE-297: Improper Validation of Certificate with Host Mismatch CVSS : 9.8 CRITICAL Vector String : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...

9.8CVSS6AI score0.00655EPSS
SaveExploits3References3
Kitploit
Kitploit
added 2026/09/04 5:00 p.m.5 views

TP-Link-Archer-CR-700-XSS-Exploit

TP-Link-Archer-CR-700-XSS-Exploit Exploiting TP-Link Archer CR-700 Router. Responsibly Disclosed to TP-Link Step 1- On you linux machine Kali or Ubuntu type the following command gedit /etc/dhcp/dhclient.conf Comment out the line below send host-name = gethostname; Copy it to the line below it an...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 12:47 a.m.6 views

hide-me

Cambiador aleatorio de MAC y nombre de host hide-me Cada vez que intentaba realizar una Prueba de Penetración de Red, necesitaba seguir algunos pasos para asegurarme de estar oculto: poner mi interfaz hacia abajo, cambiar mi dirección MAC, cambiar mi nombre de host, volver a levantar la interfaz ...

6AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/09/03 6:34 p.m.9 views

io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration

A flaw was found in Netty io.netty:netty-handler. When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping Java 25+, TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a...

8.7CVSS5.8AI score0.00155EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/09/03 6:34 p.m.10 views

org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Server impersonation via improper TLS hostname verification

A flaw was found in the asynchronous version of Apache HttpComponents Client. This improper Transport Layer Security TLS hostname verification vulnerability allows a remote attacker to intercept and modify network traffic. By presenting a valid certificate for a different domain, an attacker can...

9.1CVSS5.9AI score0.00242EPSS
SaveExploits0References5
Rows per page
Query Builder