29 matches found
watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882
watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Generatore di artefatti di rilevamento per Oracle E-Business Suite CVE-2025-61882 Consulta il nostro post sul blog per i dettagli tecnici Rilevamento in azione root@kitploit: python3 watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882.py --comma...
Mitel-MiCollab-Auth-Bypass_CVE-2024-41713
CVE-2024-41713 Mitel MiCollab Authentifizierungsumgehung zu beliebigem Dateilesen Siehe unseren Blogbeitrag für technische Details root@kitploit: / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / / watchtowr-vs-MiCollab2024-12-05.py...
watchTowr-vs-FortiWeb-CVE-2025-25257
watchTowr-vs-FortiWeb-CVE-2025-25257 Erkennungs-Artefakt-Generator für FortiWeb CVE-2025-25257 Weitere technische Details finden Sie in unserem Blogbeitrag https://github.com/user-attachments/assets/e59f2b3b-2b9b-469f-b4a8-2b7df2ede194 Erkennung in Aktion root@kitploit: python...
CVE-2024-24919
CVE-2024-24919 Template Nuclei per scoprire CVE-2024-24919. Una vulnerabilità di path traversal in CheckPoint SSLVPN. Comunque. Ottimo articolo, è stata la mia ispirazione per scrivere questo semplice template alle 2:00 AM. Risorsa:...
CVE-2024-27130
CVE-2024-27130 Una Proof of Concept sviluppata da @watchTowr per sfruttare una vulnerabilità di stack overflow e ottenere RCE su un dispositivo QNAP vulnerabile. Segui il Labs Team di watchTowr per le nostre ricerche sulla sicurezza https://labs.watchtowr.com/ https://twitter.com/watchtowrcyber...
Citrix-Virtual-Apps-XEN-Exploit
CVE-2024-xxxx Citrix Virtual Apps and Desktops XEN Esecuzione di codice remoto non autenticata Consulta il nostro post sul blog per i dettagli tecnici https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 PoC in azione root@kitploit: python exploit-citrix-xen.py --target...
Ivanti Connect Secure - XXE
Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. id: CVE-2024-22024 info: name: Ivanti Connect Secure - XXE author: watchTowr severity: high description: | Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. impact: | Successful exploitation of this...
watchTowr-vs-Fortiweb-AuthBypass
watchTowr-vs-Fortiweb-AuthBypass Erkennungsartefakt-Generator für FortiWeb Authentifizierungsumgehung Siehe unseren Blogbeitrag für technische Details Erkennung in Aktion root@kitploit: python watchTowr-vs-Fortiweb-AuthBypass.py 192.168.1.99 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / |...
watchTowr-vs-Check-Point-CVE-2026-50751
CVE-2026-50751 Un Generatore di Artefatti di Rilevamento per il bypass dell'autenticazione tramite certificato IKEv1 di Check Point Remote Access VPN. https://github.com/user-attachments/assets/1280c545-364e-42d1-94ac-5b2cd850d14e Vedi il nostro post sul blog per i dettagli tecnici. Rilevamento i...
CVE-2024-55591
FortiGate CVE-2024-55591 1Scan नवीनतम संस्करण https://github.com/0x7556/1Scan प्रभावित संस्करण root@kitploit: FortiOS 7.0.0 through 7.0.16 FortiProxy 7.0.0 through 7.0.19 FortiProxy 7.2.0 through 7.2.12 POC एकल जांच root@kitploit: ./poc 10.10.1.1 ./poc http://10.10.1.1 1Scan बैच root@kitploit:...
watchtowr-vs-telnetd-CVE-2026-32746
watchtowr-vs-telnetd-CVE-2026-32746 telnetd CVE-2026-32746 के लिए डिटेक्शन आर्टिफैक्ट जनरेटर। तकनीकी विवरण के लिए हमारा ब्लॉग पोस्ट देखें। कार्रवाई में डिटेक्शन root@kitploit: python watchtowr-vs-telnetd-CVE-2026-32746.py --rhost 127.0.0.1 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | |...
SmarterMail Auth Bypass Exploited in the Wild Two Days After Patch Release
A new security flaw in SmarterTools SmarterMail email software has come under active exploitation in the wild, two days after the release of a patch. The vulnerability, which currently does not have a CVE identifier, is tracked by watchTowr Labs as WT-2026-0001. It was patched by SmarterTools on...
PT-2025-35314
Name of the Vulnerable Software and Affected Versions: Sitecore Experience Manager XM versions 9.0 through 9.3, 10.0 through 10.4 Sitecore Experience Platform XP versions 9.0 through 9.3, 10.0 through 10.4 Description: This issue involves the use of externally-controlled input to select classes o...
Exploit for Unrestricted Upload of File with Dangerous Type in Cleo Harmony
CVE-2024-50623 Cleo Unrestricted file upload and download PoC...
Exploit for Path Traversal in Mitel Micollab
CVE-2024-41713 Mitel MiCollab Authentication Bypass to Arbitr...
About Remote Code Execution – FortiManager “FortiJump” (CVE-2024-47575) vulnerability
About Remote Code Execution - FortiManager "FortiJump" CVE-2024-47575 vulnerability. FortiManager is a centralized solution for configuring, enforcing policies, updating, and monitoring Fortinet network devices. The vulnerability was released on October 23. A missing authentication for critical...
Exploit for Deserialization of Untrusted Data in Veeam Veeam_Backup_\&_Replication
CVE-2024-40711 Exploit for Veeam backup and Replication Pre-A...
Exploit for OS Command Injection in Php
CVE-2024-4577 A Proof of Concept developed by @watchTowrhtt...