Lucene search
+L

9 matches found

Kitploit
Kitploit
added 2026/08/26 10:51 p.m.3 views

CVE-2026-39636-vulnerability-exp

1. यहाँ चलाने से पहले burp suite खोलना अनिवार्य है !! और डिफ़ॉल्ट burp suite पोर्ट 8080 होना चाहिए, यदि कोई अन्य है तो आप स्वयं बदल सकते हैं 2. आवश्यक लाइब्रेरी डाउनलोड करें root@kitploit: pip install websockets==16.0 -i https://pypi.tuna.tsinghua.edu.cn/simple 3. सीधे चलाएँ CVE-2026-39363 एकल...

8.2CVSS4.4AI score0.03396EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2026/05/14 12:00 a.m.107 views

📄 ePati Antikor NGFW 2.0.1301 Authentication Bypass

ePati Antikor NGFW version 2.0.1301 suffers from an authentication bypass vulnerability. Exploit Title: ePati Antikor NGFW 2.0.1301 - Authentication Bypass Date: 2026-04-13 Exploit Author: SADIK ERTÜRK Vendor Homepage: https://www.epati.com.tr/ Software Link: https://www.epati.com.tr/antikor-ngfw...

9.8CVSS5.8AI score0.02194EPSS
SaveExploits2
Snyk
Snyk
added 2025/08/12 12:13 a.m.4 views

Missing Origin Validation in WebSockets

Overview Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets via the CheckOrigin function in the api/terminal.go file. An attacker can execute arbitrary commands on the target system by tricking an authenticated user into visiting a malicious web page that...

8.8CVSS7.5AI score0.00553EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/05/26 11:57 a.m.343 views

Exploit for Authentication Bypass Using an Alternate Path or Channel in Fortinet Fortiproxy

--port 443 --ssl Then use the prompt: FortiOS get sys...

9.8CVSS9.8AI score0.98259EPSS
SaveExploits9
RedhatCVE
RedhatCVE
added 2025/05/22 5:01 p.m.25 views

CVE-2020-25094

LogRhythm Platform Manager 7.4.9 allows Command Injection. To exploit this, an attacker can inject arbitrary program names and arguments into a WebSocket. These are forwarded to any remote server with a LogRhythm Smart Response agent installed. By default, the commands are run with LocalSystem...

10CVSS7.3AI score0.03112EPSS
SaveExploits1
Packet Storm
Packet Storm
added 2025/05/19 12:00 a.m.97 views

📄 Remote Keyboard Desktop 1.0.1 Remote Code Execution

Remote Keyboard Desktop version 1.0.1 suffers from a remote code execution vulnerability. Exploit Title: Remote Keyboard Desktop 1.0.1 Remote Code Execution Date: 05/17/2025 Exploit Author: Chokri Hammedi Vendor Homepage: https://remotecontrolio.web.app/ Software Link:...

8.3AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
added 2025/02/07 12:00 a.m.353 views

ABB Cylon FLXeon 9.3.4 (wsConnect.js) WebSocket Command Spawning PoC

Summary BACnet® Smart Building Controllers. ABB's BACnet portfolio features a series of BACnet® IP and BACnet MS/TP field controllers for ASPECT® and INTEGRA™ building management solutions. ABB BACnet controllers are designed for intelligent control of HVAC equipment such as central plant, boiler...

9.4CVSS7.4AI score0.00922EPSS
SaveExploits4
GithubExploit
GithubExploit
added 2025/01/21 9:41 a.m.796 views

Exploit for Server-Side Request Forgery in Havocframework Havoc

CVE-2024-41570 | Havoc C2 SSRF with RCE | Automated Reverse Sh...

9.8CVSS7.1AI score0.02909EPSS
SaveExploits6
GithubExploit
GithubExploit
added 2020/01/07 11:31 a.m.12 views

Fast8690-exploit

Sagemcom Fast 3890 exploit This exploit uses the Cable Haunt...

7.3AI score
SaveExploits0
Rows per page
Query Builder