Identificador-CVE-2018-11759

다른 언어 git - pt-BR 인스턴스가 CVE 2018-11759에 노출되어 있는지 확인하세요 main 파일은 익스플로잇을 위한 bash 스크립트입니다. URL은 프로토콜과 전체 주소를 사용해야 합니다. 예: https://test.site.com.br 한 번의 조회로 여러 URL을 처리하려면 here-document를 사용할 수 있습니다. 예: root@kitploit: Call the bash, no request permission for exec bash main EOF https://vulpagepagevul.co...

CVE-2014-3120

LAB 10-CVE-2014-3120 I. システム分析 Docker環境から攻撃対象領域を特定する まず、環境内で実行されているものを確認します。アクティブなコンテナをすべてリストアップします: root@kitploit: docker ps 結果: コンテナ p1/lab10:latest が実行されており、2つのポート を外部に公開しています: ポートマッピング| プロトコル ---|--- 0.0.0.0:9200 → 9200/tcp| HTTP 要確認 0.0.0.0:9300 → 9300/tcp| 不明 初期観察: ポート 9200 と 9300...

ES-File-Explorer-Open-Port-Vulnerability---CVE-2019-6447

이 저장소에는 README가 없습니다...

CVE-2026-20212 Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 L3 virtual routing and...

CYBERDUDEBIVASH-Cisco-AsyncOS-CVE-2025-20393-Scanner

CYBERDUDEBIVASH Cisco AsyncOS CVE-2025-20393 스캐너 Copyright © 2026 CYBERDUDEBIVASH ECOSYSTEM – All Rights Reserved CYBERDUDEBIVASH AUTHORITY 하에 승인됨 – CVE-2025-20393 Cisco Secure Email Gateway / SMA의 인증되지 않은 원격 코드 실행을 위한 윤리적 탐지 도구입니다. 이 도구는 TCP/6025 포트 노출, 반응형 Spam Quarantine 인터페이스 및 알려진 사후 악용 IOC를...

CVE-2026-73296

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, createmobiledatacollectionserver and createmobileactionserver in ufo/client/mcp/httpservers/mobilemcpserver.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without...

EUVD-2026-51042

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack...

CVE-2026-47873

The Boots Dashboard Docker integration in Spring Tools exposes container control ports on all host interfaces (0.0.0.0) instead of restricting to loopback, affecting Spring Tools for Eclipse (version 5.2.0 and earlier). The CVE-2026-47873 entry indicates a high-severity issue with CVSS 3.1: AV Ad...

cve-2026-47873 - HIGH - CVE-2026-47873: Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces 0.0.0.0 rather than restricting them to loopback...

CVE-2026-57028

CVE-2026-57028 affects Juniper Networks Junos OS Evolved. An incorrectly initialized process meant to communicate only internally can be reached over the network via an open port, enabling an unauthenticated, network-based attacker to gain unauthorized access to license management. Affected scope...

CVE-2026-33803 Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...

CVE-2026-33803

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...

CVE-2026-54061 Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import

Dgraph is an open source distributed GraphQL database. Prior to version 25.3.5, Dgraph Alpha exposes the RPCs used for external snapshot import on the public gRPC port :9080 without authentication or authorization. As a result, an unauthenticated network client can open StreamExtSnapshot and send...

PYSEC-2026-1971 TorchServe gRPC Port Exposure

Impact The two gRPC ports 7070 and 7071, are not bound to localhost by default, so when TorchServe is launched, these two interfaces are bound to all interfaces. Customers using PyTorch inference Deep Learning Containers DLC through Amazon SageMaker and EKS are not affected. Patches This issue in...

iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter

Exploit Title: iOS Bluetooth PAN - Zero-Cost Ethernet Gateway USB Port 62078 Date: 2026-06-23 Exploit Author: Fares Dahoumane Silent Killer Vendor Homepage: https://www.apple.com/ Software Link: https://www.apple.com/ios/ Version: iOS 17 and later Tested on: iPhone 14 Pro iOS 17.5.1, macOS Ventur...

PT-2026-55880

Name of the Vulnerable Software and Affected Versions Apache IoTDB versions 1.3.3 through 2.0.7 Description The internal RPC interface of the Apache IoTDB DataNode used for creating Trigger instances fails to sufficiently validate the name of the uploaded Trigger JAR when constructing a file path...

GHSA-PR7J-96CJ-549H Fluentd is Vulnerable to Exposure of Sensitive Information via Monitor Agent API

Fluentd's Monitor Agent plugin inmonitoragent exposes internal metrics and plugin information via a REST API. It was discovered that the API response /api/plugins.json and related endpoints unintentionally includes internal instance variables of loaded plugins. If any plugins store sensitive...

Fluentd is Vulnerable to Exposure of Sensitive Information via Monitor Agent API

Fluentd's Monitor Agent plugin inmonitoragent exposes internal metrics and plugin information via a REST API. It was discovered that the API response /api/plugins.json and related endpoints unintentionally includes internal instance variables of loaded plugins. If any plugins store sensitive...

netty-resolver-dns: Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs

A flaw was found in Netty's DNS resolver component. This vulnerability arises from the use of a predictable pseudo-random number generator PRNG for DNS transaction IDs and a static User Datagram Protocol UDP source port. This combination significantly reduces the randomness of DNS queries, making...

Vulnerabilities found in Cisco Catalyst SD-WAN Controllers and Managers

Cisco has identified vulnerabilities in the Catalyst SD-WAN Controller and Manager products. Cisco has uncovered four vulnerabilities in these products. These vulnerabilities involve XXE injection, privilege escalation, and authentication bypass. The authentication bypass vulnerability resides in...