CVE-2021-33044

CVE-2021-33044 Dahua IPC/VTH/VTO 设备认证绕过漏洞利用 关于： 在某些 Dahua 产品的登录过程中发现了身份认证绕过漏洞。攻击者可通过构造恶意数据包绕过设备身份认证。 root@kitploit: use - python3 dahuaexploit.py https://ip:port...

CVE-2025-5777

CVE-2025-5777 （又名 CitrixBleed 2）是 Citrix Gateway 登录过程中的一个越界读取（OOB）。 这是一个利用该越界读取（CVE-2025-5777）的概念验证代码，用于从存在漏洞的 Citrix Gateway 实例中获取内存数据，可能导致 cookies/凭据被盗。 使用方法 我强烈建议在使用脚本时使用 venv 虚拟环境。 root@kitploit: usage: main.py -h -t THREADS -o OUTPUT url positional arguments: url target URL options: -h, --he...

CVE-2017-7921-EXPLOIT

CVE-2017-7921 - 海康威视摄像头系列认证不当漏洞 一个被标识为CVE-2017-7921的安全漏洞，影响多款海康威视摄像头型号。该漏洞存在于DS-2CD2xx2F-I系列（V5.2.0 build 140721至V5.4.0 build 160530）、DS-2CD2xx0F-I系列（V5.2.0 build 140721至V5.4.0 Build 160401）、DS-2CD2xx2FWD系列（V5.3.1 build 150410至V5.4.4 Build 161125）、DS-2CD4x2xFWD系列（V5.2.0 build 140721至V5.4.0 Build...

CVE-2021-43650

CVE-2021-43650 Webrun = 3.6.0.42 SQL注入漏洞 描述 Webrun是一个基于Web的管理应用程序。在3.6.0.42版本中，发现并报告了一个SQL注入漏洞，该漏洞发生在登录过程中，具体来说，我们将在POST参数P1中注入有效载荷。 概念验证（POC） 在登录过程中，将发送以下请求： root@kitploit: POST /webrun/executeRule.do HTTP/1.1 Host: restricted Content-Length: 334 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x...

CVE-2021-33044

CVE-2021-33044 大华 IPC/VTH/VTO 设备认证绕过漏洞利用 简介： 该漏洞存在于部分大华产品的登录过程中，存在身份认证绕过漏洞。攻击者可通过构造恶意数据包绕过设备身份认证。 root@kitploit: python3 dahuaexploit.py --ip IP --port PORT...

CVE-2026-42395

A flaw was found in Dovecot. A remote attacker, if able to send forwarding information from a host configured as a trusted proxy, could send a NUL byte that crashes the login process. This termination of the login process can lead to a denial of service for user logins. Mitigation To mitigate thi...

Linux Distros Unpatched Vulnerability : CVE-2026-42395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The logi...

Linux Distros Unpatched Vulnerability : CVE-2026-52687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that has valid credentials can select a compression algorithm for the IMAP connection whose decompression state requires a large amount of memory, a...

AZL-98265 CVE-2026-42395 affecting package dovecot 2.3.20-1

A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is terminated, which can cause degradation or denial of service for logins. Deployments that do not configure trusted proxies a...

ALPINE-CVE-2026-42395

A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is terminated, which can cause degradation or denial of service for logins. Deployments that do not configure trusted proxies a...

CVE-2026-42395

A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is terminated, which can cause degradation or denial of service for logins. Deployments that do not configure trusted proxies a...

AZL-98259 CVE-2026-33605 affecting package dovecot 2.3.20-1

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...

CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...

ALPINE-CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...

CVE-2026-42395

A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is terminated, which can cause degradation or denial of service for logins. Deployments that do not configure trusted proxies a...

CVE-2026-42395

A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is terminated, which can cause degradation or denial of service for logins. Deployments that do not configure trusted proxies a...

CVE-2026-42395

CVE-2026-42395 affects Dovecot (OX Dovecot by Open-Xchange, per the advisory reference). A host listed as a trusted proxy can send forwarding information containing a NUL byte , which crashes the login process on the next login attempt, causing degradation or denial of service for logins. Deploym...

EUVD-2026-67677

A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is terminated, which can cause degradation or denial of service for logins. Deployments that do not configure trusted proxies a...

CVE-2026-42391

An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by...

CVE-2026-42391

Open-Xchange Dovecot is vulnerable to a denial-of-service attack in its imap-login process. An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before authentication, causing disproportionate memory and CPU consumption . The resulting out-of-memory termi...