CVE-2018-5951

CVE-2018-5951: Vulnerabilidad de Denegación de Servicio en MikroTik RouterOS Resumen de la Vulnerabilidad Una vulnerabilidad en MikroTik RouterOS permite a un atacante remoto no autenticado forzar el reinicio de un router. Esto se logra enviando un paquete de 1 byte a la dirección IPv6 de RouterO...

CVE-2021-22205

CVE-2021-22205 基于 mr-r3bot/Gitlab-CVE-2021-22205 的Fork 简介 CVE-2021-22205: Gitlab 未授权远程代码执行漏洞 EXP 移除了对djvumake & djvulibre的依赖，直接内部生成payload，可在win平台执行。 使用方法 root@kitploit: 需要授权 python3 exploit.py -u -p -t -c 未授权 python3 exploit.py -t -c...

CVE-2023-34960

CVE-2023-34960 大量未授权命令注入（Chamilo） 截图 要求 Python3.7+ 支持的操作系统 Linuxer Wingays 开始使用 root@kitploit: $ git clone https://github.com/Pari-Malam/CVE-2023-34960 $ cd CVE-2023-34960 $ pip/pip3 install -r requirements.txt $ python/python3 exploit.py 免责声明...

PoC-for-CVE-2021-38540-

CVE-2021-38540 概念验证 关键组件缺少身份验证，即 CVE-2021-38540 关于此漏洞： Airflow =2.0.0, =2.0.0, variables List Variables 下创建一个名为 kafkacaptainhookuser 的变量。 PoC 源码： root@kitploit: POST /variable/varimport HTTP/2 Host: airflow.example.com User-Agent: Mozilla/5.0 X11; Linux x8664; rv:91.0 Gecko/20100101 Firefox/91.0...

WordPress Frontend Admin by DynamiApps plugin <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag vulnerability

Unauthenticated Arbitrary File Deletion via Path Traversal via customdirectoryname Merge Tag vulnerability discovered by nudien in WordPress Plugin Frontend Admin by DynamiApps versions = 3.29.12...

WordPress Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin <= 5.8.1 - Unauthenticated Stored Cross-Site Scripting via 'lsd[displ][style]' Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via 'lsddisplstyle' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Listdom versions = 5.8.1...

CVE-2026-18366

CVE-2026-18366 Events Manager 7.4.1 - Escalada de Privilegios No Autenticada a Administrador 🔗 Mantente Actualizado Para los últimos zero-days, exploits e investigación de seguridad 📋 Resumen de la Vulnerabilidad 🔍 Descripción Técnica Análisis de la Causa Raíz La vulnerabilidad existe en...

WordPress Affiliate Super Assistent plugin <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via ‘doCommentShortcode’ function vulnerability

Unauthenticated Stored Cross-Site Scripting via ‘doCommentShortcode’ function vulnerability discovered by theviper17y in WordPress Plugin Affiliate Super Assistent versions = 1.10.2...

CVE-2026-43637-cornac

CVE-2026-43637: Path Traversal Tar Slip en Cornac mediante extractarchive Gravedad: Alta, CVSS 4.0 8.8 , Crítica, CVSS 3.1 9.1asignada por VulnCheck, la CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N Vector v4.0: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H...

CVE-2026-32941

Una vulnerabilidad en todo el framework de Sliver C2 permite una Denegación de Servicio remota no autenticada al provocar Asignación de Memoria No Controlada CWE-789 / CWE-400, lo que lleva a un fallo de Agotamiento de Memoria OOM en todo el proceso. Referencias: Tenable Pasos de reproducción: 1...

lab-cve-2016-15042

CVE-2016-15042 – WordPress Frontend File Manager & N‑Media Post Front‑end Form Unauthenticated File Upload PoC Lab Fully reproducible, Dockerized lab to validate and demonstrate CVE-2016-15042: Frontend File Manager nmedia-user-file-uploader v3.7 vulnerable 4.0 N‑Media Post Front‑end Form...

CVE-2022-22965

CVE-2022-22965 Spring4Shell CVE-2022-22965 Uso 1. mostrar información root@kitploit: ❯ go run main.go -s INF VulnInfo: "Name": "CVE-2022-22965", "VulID": "nil", "Version": "1.0", "Author": "", "VulDate": "2022-03-30", "References": "https://nosec.org/home/detail/4983.html" , "AppName": "Spring...

CVE-2023-32315

CVE-2023-32315 La consola administrativa de Openfire la Admin Console, una aplicación web, resultó vulnerable a un ataque de path traversal a través del entorno de configuración. Esto permitió que un usuario no autenticado usara el entorno de configuración de Openfire no autenticado en un entorno...

CVE-2021-40870

Explotación de CVE-2021-40870 Se descubrió un problema en Aviatrix Controller 6.x anterior a 6.5-1804.1922. Es posible la carga sin restricciones de un archivo con un tipo peligroso, lo que permite a un usuario no autenticado ejecutar código arbitrario mediante un ataque de recorrido de directori...

CVE-2026-77975

The affected Ebyte product exports administrative credentials and other sensitive configuration information without adequate protection. An unauthenticated attacker on the adjacent network who can obtain an exported configuration file could recover valid credentials and use them to access the...

CVE-2026-75133

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

CVE-2026-73819

The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials,...

WordPress Cozy Blocks plugin <= 2.2.17 - Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' Parameter vulnerability

Unauthenticated Unpublished Product Information Disclosure via 'wishlistData' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Cozy Blocks versions = 2.2.17...

CVE-2026-51719

Incorrect access control in the delUrlFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove URL filtering rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51709

Incorrect access control in the setWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reconfigure primary Wi-Fi settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...