CVE-2024-40617

CVE-2024-40617 PoC di sfruttamento per CVE-2024-40617 Descrizione Vedi la pubblicazione Medium per una descrizione dettagliata Fujitsu M2M GW1500 : From M2M to M2M2P0wn Utilizzo root@kitploit: | / | \ | | \ / \ | |/| | | ' \ | | | | | \ \ /\ / / ' \ | | | |/ /| | | | | |/ /| /| || |\ V V /| | |...

CVE-2019-9053-port-py3

Exploit CVE-2019-9053 - Python 3 Questa è una porta in Python 3 dell'exploit per CVE-2019-9053, che colpisce CMS Made Simple CMSMS versioni precedenti alla 2.2.10. La vulnerabilità consente l'iniezione SQL tramite l'interfaccia del modulo News. Esempio di output Testato sulla TryHackMe Simple CTF...

CVE-2024-48887-Exploit

CVE-2024-48887-Cambio di Password non Verificato CWE-620 Panoramica Una vulnerabilità di cambio password non verificato nell'interfaccia GUI di Fortinet FortiSwitch che consente a un attaccante remoto non autenticato di modificare le password degli amministratori tramite una richiesta appositamen...

CVE-2020-2733

CVE-2020-2733 - senha de administrador do JD Edwards EnterpriseOne Tools não adequadamente protegida Pic 1: Descriptografar a string Pic 2: Descriptografar fornecendo a URL CVE-2020-2733 Aplicação: JD Edwards EnterpriseOne Tools Versões Afetadas: JD Edwards EnterpriseOne Tools 9.2 URL do...

CVE-2024-57429

CVE-2024-57429 Uma vulnerabilidade de cross-site request forgery CSRF na função pjActionUpdate do PHPJabbers Cinema Booking System v2.0 permite que atacantes remotos elevem privilégios ao enganar um administrador autenticado para submeter uma requisição não autorizada. Impacto: A exploração desta...

CVE-2017-7921

CVE-2017-7921 CVE-2017-7921-EXP Hikvision Kamera Dieses Tool richtet sich an autorisierte Sicherheitspersonal für Penetrationstests sowie an Website-Administratoren für routinemäßige Operationen. Niemand darf es für illegale Zwecke oder Gewinnerzielung verwenden, andernfalls trägt der Nutzer die...

CVE-2020-11444

CVE-2020-11444 Script di exploit per la vulnerabilità di autorizzazione impropria di Nexus 3 Per altri script, vedere: https://github.com/zhzyker/exphub Readme root@kitploit: +-----------------------------------------------------------------------------------------------+ + DES: by zhzyker as...

CVE-2024-5009

CVE-2024-5009 Progress WhatsUp Gold SetAdminPassword विशेषाधिकार वृद्धि CVE-2024-5009 के लिए PoC इस भेद्यता का मूल कारण विश्लेषण मेरे ब्लॉग पर पाया जा सकता है: https://summoning.team/blog/progress-whatsup-gold-privesc-setadminpassword-cve-2024-5009/ उपयोग root@kitploit: python3 CVE-2024-5009.py...

Exploit_CVE-2021-24762

exploitcve-2021-24762 Dieses Repository zeigt einen Exploit für CVE-2021-24762. Es handelt sich um einen Blind-SQLi-Exploit, der in der Standardkonfiguration das Admin-Passwort ausliest. Während ich ein Labor auf Basis von WordPress mit dem PerfectSurvey-Plugin durchführte, blieb ich bei einer...

CVE-2021-22911

استغلال محدّث لـ CVE-2021-22911 Rocket.Chat 3.12.1 - حقن NoSQL إلى RCE بدون مصادقة الإسناد الأصلي إلى : https://www.exploit-db.com/exploits/50108 الإعداد أنشئ بيئة بايثون الافتراضية وقم بتثبيت التبعيات root@kitploit: $ python -m venv venv $ source venv/bin/activate $ pip install requests oathtool...

CVE-2017-13872-Patch

CVE-2017-13872-Patch Scarica questo software ed eseguilo, poi ti chiederà una nuova password per l'utente root. La password potrebbe essere diversa, ma penso che, nell'opzione predefinita, sia uguale alla password di Admin. Aggiornamento Puoi correggere il bug aggiornando il tuo sistema operativo...

cve-2026-34472-auth-bypass-zte-h188a-router

CVE-2026-34472 Technische Analyse von CVE-2026-34472, einem Auth-Bypass durch durchgesickerte Anmeldedaten, die die Firmware ZTE ZXHN H188A V6 betreffen. Zusammenfassung In den getesteten H188A V6-Builds können nicht authentifizierte Anfragen an den Stammpfad auf Pre-Login-Wizard-Handler zugreife...

Tautulli <= 2.16.1 - Path Traversal

Tautulli is a monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /newsletter/image/images endpoint joins user-controlled path segments onto the newsletter image directory without containment validation. Authentication is not required for this endpoint, allowing...

Payara Server - Cross-Site Scripting

Payara Server versions 4.1.2.191.54, 5.83.0, 6.34.0, and 7.2026.1 contain a stored XSS vulnerability caused by improper input sanitization in the REST Management Interface. This allows attackers to mislead administrators into changing the admin password via a URL payload; however, the exploit...

CVE-2023-44811

CVE-2023-44811 mooSocial v3.1.8 è vulnerabile a Cross Site Request Forgery CSRF che consente a un attaccante di cambiare la password dell'amministratore quando un utente amministratore autenticato fa clic sulla pagina HTML dannosa appositamente creata. Fornisco 2 pagine HTML che, quando viene fat...

Exploit-CSRF-on-SCOPIA-XT-Desktop-version-8.3.915.4

Exploit CSRF su SCOPIA XT Desktop versione 8.3.915.4 Questo PoC descriverà come sfruttare la Cross-Site Request Forgery CSRF su SCOPIA XT Desktop versione 8.3.915.4 Informazioni su SCOPIA sito web: https://support.avaya.com/products/P1421/scopia-desktop/8.2.1 Informazioni sulla Cross-Site Request...

tplink-CVE-2017-11519

tplink-CVE-2017-11519 POC per TP-Link Archer C9 - Reset della password amministratore e RCE CVE-2017-11519 Vedi il writeup su https://devcraft.io/posts/2017/07/21/tp-link-archer-c9-admin-password-reset.html...

CVE-2026-6017

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

CVE-2026-6017 Missing Authentication for Critical Function in KAON PG5298

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

f609-brute

f609-brute f609-brute é uma ferramenta simples de força bruta para roteadores ZTE F609 da Telkom Indonesia. Como a Telkom Indonesia implementa TR-069 nos modems ZTE F609, eles atualizam rotineiramente a senha de administrador. f609-brute é executado no Python 2.7. Uso usage: python f609.py Exempl...