CVE-2017-8225-EXPLOIT

CVE-2017-8225 - Утечка GoAhead System.ini Эта уязвимость затрагивает беспроводные IP-камеры P2P WIFICAM. Она возникает из-за ошибки в корректной проверке .ini файлов, которые хранят критически важные учетные данные. Опытный злоумышленник может воспользоваться этим, передав пустые значения для...

CVE-2017-14262

SamsungNVRvul CVE-2017-14262 xfuturesec Co., Ltd أولاً، احصل على تجزئة MD5 لكلمة مرور حساب 'admin'. أرسل: GET http://192.168.1.14/cgi-bin/main-cgi?json="cmd":201,"szUserNameQry":"admin","szUserName":"","u32UserLoginHandle":0 HTTP/1.1 Host: 192.168.1.14 User-Agent: Mozilla/5.0 Windows NT 6.3; WOW6...

CVE-2020-8193-Citrix-Scanner

CVE-2020-8193-Citrix-Scanner CVE-2020-8193 के लिए स्कैनिंग - प्रमाणीकरण बाईपास जाँच https://vulners.com/cve/CVE-2020-8193 सहायक दस्तावेज़: https://research.nccgroup.com/2020/07/10/rift-citrix-adc-vulnerabilities-cve-2020-8193-cve-2020-8195-and-cve-2020-8196-intelligence/...

FortiWeb-CVE-2025-52970-Authentication-Bypass

🚨 تجاوز المصادقة في FortiWeb → تنفيذ الأوامر عن بُعد 📌 نظرة عامة يوضح هذا المستودع تجاوز المصادقة في FortiWeb والذي يمكن ربطه لتحقيق تنفيذ الأوامر عن بُعد RCE. يستغل الثغرة نقطة نهاية ضعيفة لحقن حمولات SQL، تحميل ويب شيل، وتنفيذ الأوامر عبر رؤوس HTTP. ⚠️ إخلاء مسؤولية : هذا المشروع لأغراض تعليمية...

CVE-2018-9995-EXPLOIT

CVE-2018-9995 - DVR प्रमाणीकरण बायपास यह रिपॉजिटरी CVE-2018-9995 के रूप में पहचानी गई सुरक्षा भेद्यता को संबोधित करती है, जो विभिन्न DVR उपकरणों को प्रभावित करती है, जिनमें TBK DVR4104, DVR4216, Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, और MDVR Login शामिल...

CVE-2025-49113

CVE-2025-49113 – Roundcube Webmail RCE एक्सप्लॉइट Python PoC CVE ID: CVE-2025-49113 एक्सप्लॉइट प्रकार: दूरस्थ कोड निष्पादन PHP ऑब्जेक्ट इंजेक्शन के माध्यम से एप्लिकेशन: Roundcube Webmail ≤ 1.5.9 और ≤ 1.6.10 एक्सप्लॉइट भाषा: Python लेखक: 00xCanelo स्थिति: संवेदनशील Roundcube इंस्टॉलेशन पर परीक्षित...

CVE-2026-82694

A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web UI. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly available and might be...

CVE-2026-82695

A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. The attack can be launched remotely. The exploit has been released to the public and may b...

CVE-2026-82693

A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function TendaTelnet of the file /goform/telnet of the component Web UI. Executing a manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been...

CVE-2017-11427-DEMO

CVE-2017-11427-DEMO मूल वातावरण root@kitploit: $ sudo apt-get install libxml2-dev libxslt1-dev $ sudo apt-get install libxml2-dev libxmlsec1-dev libxmlsec1-openssl DEMO: root@kitploit: $ git clone https://github.com/CHYbeta/CVE-2017-11427-DEMO.git $ cd CVE-2017-11427-DEMO $ source venv/bin/active...

FreeRDP: FreeRDP: Authentication bypass via incorrect RDSTLS PDU handling

A vulnerability in FreeRDP's server-side RDSTLS allows remote, unauthenticated attackers to bypass authentication. By sending a crafted capabilities PDU instead of the expected authentication request, an attacker can gain an authenticated session without valid credentials...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

nextjs-CVE-2025-29927

nextjs-CVE-2025-29927 एक Nuclei टेम्पलेट जो CVE-2025-29927, Next.js प्रमाणीकरण बाइपास भेद्यता का पता लगाता है। यदि आप यह समझना चाहते हैं कि यह भेद्यता वास्तव में कैसे काम करती है, तो आप मूल शोधकर्ताओं का उत्कृष्ट लेख यहाँ पढ़ सकते हैं। यह टेम्पलेट काफी सीधा है। यह दो काम करता है: पहला, यह पहचानता...

CVE-2026-82695 Tenda AC18 Telnet telnet missing authentication

A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. The attack can be launched remotely. The exploit has been released to the public and may b...

CVE-2026-82695

A missing authentication flaw affects the Telnet Handler component (file /goform/telnet) in Tenda AC18 firmware version 15.03.05.19 , allowing a remote attacker to access the device without credentials. The flaw is rated CVSS 4.0 base score 10.0 (CRITICAL) with low attack complexity, no privilege...

EUVD-2026-68509

A security flaw has been discovered in Tenda AC18 15.03.05.19. Impacted is an unknown function of the file /goform/telnet of the component Telnet Handler. The manipulation results in missing authentication. The attack can be launched remotely. The exploit has been released to the public and may b...

CVE-2026-82694

Tenda AC1206 (firmware 15.03.06.23) is affected by a missing authentication vulnerability in the Web UI component. The vulnerable function is R7WebsSecurityHandler in the file /goform/ate , allowing a remote, unauthenticated attacker to manipulate it. The CVSS 3.1 score is 10.0 (Critical) with ch...

CVE-2026-82694 Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication

A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web UI. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly available and might be...

EUVD-2026-68507

A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web UI. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly available and might be...

CVE-2017-7921-EXPLOIT

CVE-2017-7921 - Hikvision कैमरा श्रृंखला में अनुचित प्रमाणीकरण भेद्यता Sécurité की कमी जिसे CVE-2017-7921 के रूप में पहचाना गया है, जो Hikvision कैमरों के विभिन्न मॉडलों को प्रभावित करता है। यह भेद्यता DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0...