CISA-KEV

CISA-KEV Executive Summary This repository provides automated tracking and analysis of both CISA's KEV and VulnCheck KEV catalogs, cross-referenced with Nuclei security templates and public proof-of-concept exploits. By integrating VulnCheck KEV, coverage expands from 1,557 to 4,720 total unique...

vulncheck_CVE-2024-50602

vulncheckCVE-2024-50602...

CVE-2026-20079

CVE-2026-20079 Cisco Secure FMC PoC Python proof of concept for the publicly documented Cisco Secure Firewall Management Center authentication-bypass-to-root-RCE chain in CVE-2026-20079. This is not a new vulnerability or independently developed exploit chain. It is a clean-room implementation of...

cve-2025-55182

CVE-2025-55182: Exploitation Artifacts An export of a small subset of the VulnCheck Initial Access Intelligence artifacts for the CVE-2025-55182 React2Shell vulnerability. Some of the teams observations on these artifacts can be read in the blog post. Index ./inmem-webshell - An in-memory webshel...

CVE-2022-44877

usa el módulo go-exploit cuando el modo de módulo está desactivado root@kitploit: go get github.com/vulncheck-oss/go-exploit cuando el modo de módulo está activado root@kitploit: go mod init example.com/myapp go get github.com/vulncheck-oss/go-exploit construcción root@kitploit: go build -o...

VulnCheck KEV: CVE-2026-5430

WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution...

VulnCheck KEV: CVE-2026-66582

Unauthenticated Cross Site Scripting XSS in TranslatePress = 3.3.2 versions...

GO-2026-6125 grepai Uses a Broken or Risky Cryptographic Algorithm in github.com/yoanbernabeu/grepai

grepai Uses a Broken or Risky Cryptographic Algorithm in github.com/yoanbernabeu/grepai...

VulnCheck KEV: CVE-2026-66629

Unauthenticated Cross Site Scripting XSS in Kirki = 6.2.3 versions...

VulnCheck KEV: CVE-2026-73343

Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...

VulnCheck KEV: CVE-2026-66443

Unauthenticated Sensitive Data Exposure in REST API Log = 1.7.1 versions...

VulnCheck KEV: CVE-2026-66441

Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...

Incorrect Implementation of Authentication Algorithm

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm via the webhook process. An attacker can trigger scheduled jobs without authentication by...

VulnCheck KEV: CVE-2026-18556

N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass...

VulnCheck KEV: CVE-2026-57624

Unauthenticated Remote Code Execution RCE in Blocksy Companion Pro = 2.1.46 versions...

VulnCheck KEV: CVE-2026-10735

ShapedPlugin Pro was compromised by adversaries to supply a backdoored version of the WordPress plugin...

VulnCheck KEV: CVE-2026-49060

Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege Escalation. This issue affects Hippoo Mobile App for WooCommerce: from n/a through 1.9.4...

RondoDox Botnet Exploits Critical 2018 Vulnerability to Hijack ASUS Routers

Cybersecurity firm VulnCheck reveals hackers are using a critical 2018 vulnerability to bypass authentication and hack over a million ASUS routers...

VulnCheck KEV: CVE-2026-42208

BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized access to the proxy and the credentials it manages...

VulnCheck KEV: CVE-2026-4047

A vulnerability is present in Qinglong due to improperly matching case sensitive paths used by middleware authenticaion but the underlying Express.js framework treats paths case insensitively...