Lucene search
+L

4276 matches found

Nuclei
Nuclei
added 2026/09/22 2:05 a.m.130 views

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

10CVSS8.5AI score0.17667EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.61 views

Cisco SD-WAN vManage Software - Local File Inclusion

Cisco SD-WAN vManage Software in the application data endpoints is vulnerable to local file inclusion which could allow an unauthenticated, remote attacker to gain access to sensitive information. id: CVE-2020-26073 info: name: Cisco SD-WAN vManage Software - Local File Inclusion author: madrobot...

7.5CVSS7.3AI score0.12583EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.115 views

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the addModifyZTDProxy function in NmsController. The function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerability by...

10CVSS8.4AI score0.20371EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.111 views

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the apply action in StorageMgmtController. The callStoragePerl function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerabili...

10CVSS8.5AI score0.20371EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.95 views

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...

10CVSS8.4AI score0.18662EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.33 views

VMware NSX SD-WAN Edge - Command Injection

VMware NSX SD-WAN Edge formerly VeloCloud Edge before 3.1.2 contains an unauthenticated command injection in the local web UI diagnostic tools Ping/Traceroute. This template detects it reliably by injecting 'id', 'whoami', and a random marker. id: CVE-2018-6961 info: name: VMware NSX SD-WAN Edge ...

8.1CVSS7.5AI score0.86252EPSS
SaveExploits6References3
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.32 views

Citrix SD-WAN and NetScaler SD-WAN - SQL Injection

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 contain an SQL injection vulnerability. An unauthenticated attacker can exploit improper validation of input in specific components, which could allow for execution of arbitrary SQL queries against the backend database...

9.8CVSS8.1AI score0.94131EPSS
SaveExploits5References4
Kitploit
Kitploit
added 2026/09/22 1:52 a.m.11 views

CVE-2026-20245

🚨 CVE-2026-20245 - Cisco Catalyst SD-WAN Manager 权限提升 通过构造文件上传实现的已认证权限提升 一个影响 Cisco Catalyst SD-WAN Manager 的漏洞,允许已认证的攻击者利用管理权限以 root 身份执行任意命令。 📖 概述 CVE-2026-20245 是一个影响 Cisco Catalyst SD-WAN Manager 的高危权限提升漏洞。该漏洞源于管理平台对上传文件的验证不充分。 拥有 netadmin 权限的已认证攻击者可以上传特制文件,从而导致在底层操作系统上以 root 权限执行任意命令。 🎯 漏洞信息...

7.8CVSS8.3AI score0.25323EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/22 1:37 a.m.12 views

CVE-2025-54322

CVE-2025-54322 - XSpeeder SXZOS 预认证 RCE 扫描器 一个针对 CVE-2025-54322 的多线程漏洞扫描器,该漏洞是 XSpeeder SXZOS 固件中的未认证远程代码执行漏洞,影响全球约 70,000+ 台主机。 📋 目录 关于漏洞 功能特性 安装 使用方法 输出 免责声明 致谢 作者 🔍 关于漏洞 CVE-2025-54322 是 XSpeeder SXZOS 固件中发现的一个严重预认证远程代码执行漏洞,该固件用于 SD-WAN 设备、路由器和边缘网络设备。 漏洞详情 CVE ID :CVE-2025-54322 供应商...

10CVSS6.9AI score0.1536EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/22 1:17 a.m.14 views

CVE-2026-20182

CVE-2026-20182 — Bypass de Autenticación en Cisco Catalyst SD-WAN Controller / Manager Un exploit de prueba de concepto para CVE-2026-20182 , un bypass de autenticación crítico CVSS 10.0 en el servicio vdaemon DTLS UDP/12346 en Cisco Catalyst SD-WAN Controller vSmart y Manager vManage. Divulgado:...

10CVSS8.5AI score0.91522EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/21 9:00 p.m.12 views

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-Day CVE-2026-20127 explotado desde 2023 para acceso administrativo. Este repositorio contiene un exploit de prueba de concepto funcional para CVE-2026-20127, una vulnerabilidad crítica de pre-autenticación en Cisco Catalyst SD-WAN...

10CVSS8.2AI score0.88243EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/21 8:02 p.m.16 views

neurax

一个帮助创建自传播软件的框架 概述 借助 Neurax,Golang 二进制文件无需使用任何外部服务器即可在局域网/广域网上传播。 多样化的配置选项和命令启动器允许在各种无线环境中快速传播。 示例代码 root@kitploit: package main import . "github.com/redcode-labs/Neurax" func main //指定服务端口和使用的启动器 Nrx.Config.Port = 5555 Nrx.Config.Stager = "wget" //在后台启动一个服务器,暴露当前二进制文件 go NeuraxServer...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 3:22 p.m.12 views

CVE-2018-6961

CVE-2018-6961 Python3 利用程序 VMware NSX SD-WAN Edge by VeloCloud 在 3.1.0 版本之前存在一个命令注入漏洞,位于本地 Web UI 组件中。该组件默认禁用,不应在不受信任的网络上启用。VMware 的 VeloCloud 将在未来版本中从产品中移除该服务。成功利用此问题可能导致远程代码执行。 链接 CVE 详情 https://nvd.nist.gov/vuln/detail/CVE-2018-6961 原始 Python2 利用程序 https://www.exploit-db.com/exploits/44959/...

8.1CVSS7.8AI score0.86252EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/21 2:42 p.m.14 views

CVE-2026-20127

CVE-2026-20127 — Bypass de Autenticación en Cisco SD-WAN CVSS 10.0 Tabla de Contenidos...

10CVSS8.6AI score0.88243EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/21 1:31 p.m.11 views

CVE-2022-39073

CVE-2022-39073 Detalles del firmware: root@kitploit: wainnerversion: BDPOSTEMF286RMODULEV1.0.0B12 crversion: CRITPOSTEMF286RV1.0.0B10 Requisitos previos requests pip install requests Inyección de comandos La vulnerabilidad es una inyección de comandos compartida entre el binario ztenetlinkdetect ...

9.8CVSS8.7AI score0.0334EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/21 9:51 a.m.8 views

CVE-2026-75616

CVE-2026-75616 Inyección autenticada de comandos del sistema operativo en la interfaz de administración web del TP-Link Archer C20 v6. Los valores de configuración BPA WAN se pasan a system sin una neutralización adecuada, lo que permite a un administrador autenticado en la red adyacente ejecutar...

8.5CVSS6.3AI score0.03119EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/21 7:39 a.m.11 views

CVE-2021-24006

CVE-2021-24006 – FortiManager 不当访问控制利用(PoC) PoC(概念验证)- 仅用于教育目的 在 FortiManager 中滥用对 SD-WAN Orchestrator 的访问的利用程序,利用了访问控制缺陷(CWE-284)。 描述 漏洞 CVE-2021-24006 影响 FortiManager(版本 6.4.0 至 6.4.3),允许具有受限配置文件的已认证用户 直接访问 SD-WAN Orchestrator 面板的 URL,即使没有通过接口获得明确权限。 直接访问有漏洞的 URL:...

8.8CVSS7.4AI score0.00958EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 7:30 a.m.14 views

CVE-2026-20127_EXP

CVE-2026-20127EXP Exploit EXP para la vulnerabilidad de omisión de autenticación en Cisco Catalyst SD-WAN CVE-2026-20127 Uso básico python scan.py -f targets.txt Mostrar información detallada python scan.py -f targets.txt -v Ajustar el número de hilos y guardar resultados python scan.py -f...

10CVSS8.6AI score0.88243EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/21 7:24 a.m.10 views

sdwan-harvester

SD-WAN Harvester 🌐 Framework de censo de Internet SD-WAN Descargo de responsabilidad Este proyecto ya no se mantiene. Es estable y todavía puedes usarlo para escaneos SD-WAN, pero actualmente, una forma más recomendable y precisa de escanear diferentes cosas en Internet no solo soluciones SD-WAN ...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/21 6:57 a.m.7 views

CVE-2021-24006-Fortimanager-Exploit

CVE-2021-24006 – FortiManager Improper Access Control Exploit PoC PoC Proof of Concept - Educational Use Only Exploit for improper access to SD-WAN Orchestrator in FortiManager, exploiting access control flaw CWE-284. Description The CVE-2021-24006 vulnerability affects FortiManager versions 6.4....

8.8CVSS7.4AI score0.00958EPSS
SaveExploits0
Rows per page
Query Builder