CVE-2026-73276

A flaw was found in the Erlang/OTP inets httpd server. This vulnerability allows a remote attacker to perform HTTP Request Smuggling due to the server silently dropping HTTP headers that contain whitespace between the header field-name and the colon. When deployed behind a reverse proxy that...

CVE-2025-4094

CVE-2025-4094 – WordPress Digits Plugin This method...

CVE-2025-63700

CVE-2025-63700 Omisión de Autenticación OAuth en Clerk-js 5.88.0 Producto Afectado Proveedor : Clerk Inc. clerk.dev / clerk.com Producto : Clerk-js @clerk/clerk-js Versión Afectada : 5.88.0 Impacto : Omisión de Autenticación OAuth CWE-290 : Omisión de Autenticación por Suplantación Autor del Erro...

CVE-2025-32433

CVE-2025-32433 Introduction This document presents a study of the vulnerability CVE-2025-32433 , affecting the built-in SSH server implementation in the Erlang/OTP platform. This vulnerability is a Remote Code Execution RCE opportunity without authentication and affects several Erlang/OTP branche...

CVE-2025-10658

Exploit: Fuerza Bruta OTP de Invitado de SupportCandy → Toma de Control de Cuenta 1 Iniciar el flujo de inicio de sesión con OTP navegador Abrir: root@kitploit: /support/ Seleccionar inicio de sesión como invitado / OTP Ingresar el correo electrónico objetivo ej. [email protected] Enviar 2...

SocialEngineering

SOCIAL ENGINEER 🎯🕵️‍♂️ A powerful social engineering toolkit that automates phishing, OTP/email bombing, fake mail and more — built with ❤️ by @karthithehacker ⚠️ For educational use only. Do not use this tool against anyone without explicit permission. 📌 Features 🎯 Phishing Attacks – Simulate fake...

erl_mouse

erlmouse versión 1.1 Bien, he mejorado varias cosas para aumentar las posibilidades de encontrar un dispositivo o red vulnerable. La mayoría no están expuestos públicamente, han sido parcheados, o son tan oscuros que puede ser difícil encontrar un objetivo. No obstante, perseveramos. Ahora puedes...

CVE-2025-32433

CVE-2025-32433 Erlang/OTP SSH RCE EXP Descripción Se ha identificado una vulnerabilidad grave en el servidor SSH de Erlang/OTP que puede permitir a un atacante realizar ejecución remota de código RCE sin autenticación. Al explotar una falla en el manejo de mensajes del protocolo SSH, un actor...

CVE-2026-11387

CVE-2026-11387 — SMS Alert ≤ 3.9.5 ☆ Unauthenticated Privilege Escalation via Arbitrary Password Reset ☆ === Beelze === 📋 Vulnerability Info Field| Details ---|--- CVE ID| CVE-2026-11387 CVSS Score| 9.8 Critical CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Type| Missing Authenticatio...

cve-2025-32433

Construcción root@kitploit: » git clone https://github.com/0xPThree/cve-2025-32433.git && cd cve-2025-32433 » docker build -t erlang-ssh . » docker run -d --name erlang-ssh -p 2222:2222 erlang-ssh POC root@kitploit: kdev :: /erlang/CVE-2025-32433 ‹main› » python3 cve-2025-32433.py -h usage:...

CVE-2026-76578

A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An unauthenticated LDAP client can exploit this, combined with a related flaw in the underlying directory server's ACI...

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC The vulnerability allows an attacker with network access to an Erlang/OTP SSH server to execute arbitrary code without prior authentication. Description A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to...

CVE-2026-6223 OTP Bypass in Bahçelievler Muncipality's BiHayat App

Improper restriction of excessive authentication attempts vulnerability in Bahçelievler Muncipality BiHayat App allows Authentication Bypass. This issue affects BiHayat App: from 2.1.7 through 07092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-6223

CVE-2026-6223 is a CRITICAL (CVSS 9.4) improper restriction of excessive authentication attempts vulnerability in the Bahçelievler Municipality BiHayat App (versions 2.1.7 through 07092026), allowing an OTP bypass that leads to full authentication bypass. The vector is network-based with no privi...

CVE-2026-76578

A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An unauthenticated LDAP client can exploit this, combined with a related flaw in the underlying directory server's ACI...

cve-2025-32433

CVE-2025-32433 - Pre-Auth RCE in Erlang/OTP SSH Server Link to detailed write-up All considered vulnerable versions using Docker: Erlang/OTP-25.3.2 Erlang/OTP-26.2.5.11 Erlang/OTP-27.3.2...

Erlang-OTP-PoC_CVE-2025-32433

Confusión de canales previo a la autenticación en Erlang/OTP SSH 📺 Video de Prueba de Concepto Descripción: Una demostración de la vulnerabilidad de Confusión de canales previo a la autenticación en Erlang/OTP SSH. Haga clic aquí para ver la demostración completa en YouTube Resumen ¿De qué trata...

PT-2026-86757

A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An unauthenticated LDAP client can exploit this, combined with a related flaw in the underlying directory server's ACI...

CVE-2025-32433

🚨 CVE-2025-32433: RCE no autenticado en el servidor SSH de Erlang/OTP Vulnerabilidad crítica de ejecución remota de código sin autenticación previa Una falla grave en el demonio SSH incorporado de Erlang/OTP permite que atacantes remotos no autenticados logren ejecución remota de código RCE...

cve-2025-32433_rce_exploit

Erlang/OTP SSH – CVE-2025-32433 Laboratorio TryHackMe ⚠️ Solo para uso educativo Este proyecto es estrictamente para aprendizaje y práctica en el laboratorio de la sala oficial de TryHackMe: https://tryhackme.com/room/erlangotpsshcve202532433 No uses esta herramienta contra sistemas que no poseas ...