101 matches found
CVE-2026-27472-and-CVE-2026-27474
CVE-2026-27472 および CVE-2026-27474 CVSS-B 5.3 MEDIUM および CVSS-B 4.8 MEDIUM SPIP 4.4.8 シンジケーション機能における Blind SSRF および格納型 XSS 詳細な説明は私のウェブサイトをご覧ください PoC 1. 管理者としてログインします。 2. サイトコンテンツ 設定で、サイトの参照とシンジケーション が ウェブサイトディレクトリを管理 に設定されていることを確認します。 3. セクションに移動し、サイトを参照 をクリックします。 4. シンジケーション フィールドで シンジケーション...
masscan
MASSCAN: Mass IP 포트 스캐너 이것은 인터넷 규모의 포트 스캐너입니다. 단일 머신에서 초당 1000만 개의 패킷을 전송하며 5분 이내에 전체 인터넷을 스캔할 수 있습니다. 사용법매개변수, 출력은 가장 유명한 포트 스캐너인 nmap과 유사합니다. 확신이 서지 않으면 해당 기능 중 하나를 시도해 보세요. 많은 머신을 광범위하게 스캔하는 기능은 지원되지만, 단일 머신에 대한 심층 스캔 기능은 지원되지 않습니다. 내부적으로는 scanrand, unicornscan, ZMap과 같은 포트 스캐너와 유사하게 비동기 전송을...
CVE-2019-0708-POC
CVE-2019-0708-POC 사용 설명 IP 형식: IP:포트, ip.txt에 저장 root@kitploit: cve-2019-0708.py 100线程...
CVE-2018-9995-2
ツール CVE-2018-9995-2 root@kitploit: CVE: CVE-2018-9995 エクスプロイト作者: Fernandez Ezequiel @capitanalfa 修正者: Kien Quoc バージョン: 2.0 Python3 のインストール root@kitploit: apt-get install git pip3 install requests pip3 install colorama sudo apt update apt-get install python3 クイックスタート root@kitploit: git clone...
CVE-2021-41773-exploit
사용법 파일 ip-ports.txt: root@kitploit: 1.1.1.1:80 root@kitploit: node CVE-2021-41773.js ip-ports.txt...
CVE-2026-24061
CVE-2026-24061 python3 exploit.py...
CVE-2026-51660
Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IP and port filtering rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
EUVD-2026-67874
Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IP and port filtering rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51660
CVE-2026-51660 is an incorrect access control vulnerability in the getIpPortFilterRules function of TOTOLINK T6 firmware version 4.1.5cu.748_B20211015 . An unauthenticated remote attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain the device's IP and port filtering rules , ...
Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Forescout found 22 internet-facing Rockwell Automation programmable logic controllers PLCs in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its August 3 scan counted 4,407 exposed Rockwell controllers worldwide, including 2,844 in the Unit...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: add seqadj extension for natted connections Sequence adjustment may be required for FTP traffic with PASV/EPSV modes. due to need to re-write packet payload IP, port on the ftp control connection. This can requi...
CVE-2026-52921
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: stop hash: range iteration at end The following hash set variants: hash:ip,mark hash:ip,port hash:ip,port,ip hash:ip,port,net iterate IPv4 ranges with a 32-bit iterator. The iterator must stop once the last...
TencentOS Server 4: nginx (TSSA-2025:0724)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0724 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2026-41926
WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation. Attackers can inject arbitrary shell commands through vulnerable parameters like websURLFilter,...
CVE-2026-41926
WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation. Attackers can inject arbitrary shell commands through vulnerable parameters like websURLFilter,...
BIT-NGINX-GATEWAY-2025-23419 TLS Session Resumption Vulnerability
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets...
EUVD-2004-0524
Malware in sbrugna...
EUVD-2020-27077
Malware in sbrugna...