CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN

CVE-2026-0073 — Android ADBD TLS Authentication Bypass EVPPKEYcmp Type Confusion → Unauthorized ADB Shell 🔥 Overview A critical authentication bypass vulnerability exists in Android's ADB daemon adbd that allows any attacker on the local network to obtain full shell access on a target device...

CVE-2024-44812-PoC

Vendor SourceCodester Affected Product Link https://www.sourcecodester.com/php/14717/online-complaint-site-using-phpmysqli-full-source-code.html CVE ID: CVE-2024-44812 Description: SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the...

nextjs-cve-2025-29927

Next.js CVE-2025-29927 Middleware Vulnerability This repository is a monorepo project that allows you to compare the CVE-2025-29927 middleware vulnerability between Next.js versions 15.2.3 and 15.1.7. Vulnerability Description CVE-2025-29927 is a security vulnerability discovered in Next.js...

CVE-2019-20933

ЛАБОРАТОРНАЯ РАБОТА 5 – CVE-2019-20933 I. АНАЛИЗ СИСТЕМЫ Определение поверхности атаки Начнём с того, что запущено в среде. Я выведу список всех активных контейнеров: root@kitploit: docker ps Жертва предоставляет доступ к одному порту:8086. В настоящее время у меня нет подробной информации о цели...

CVE-2023-51764

CVE-2023-51764 Postfix SMTP Smuggling - Expect Script POC send an email that is legitimate, but inside the email there is many others emails different senders, recipients, subjet, etc. The initial email is check for SPF/DKIM/DMARC, the others inside are not ! usage: ./cve-2023-51764.sh mx.fqdn po...

CVE-2025-24071

Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as CVE-2025-24071. This vulnerabilit...

cve-2024-1708-connectwise_rce_reproduction

CVE-2024-1708 / CVE-2024-1709 — ConnectWise ScreenConnect Authentication Bypass & Remote Code Execution CVSS Score: 8.4 CVE-2024-1708 – 10.0 CVE-2024-1709 CWE: CWE-22 Path Traversal, CWE-288 Authentication Bypass Using an Alternate Path Affected Software: ConnectWise ScreenConnect formerly...

CVE-2026-41940_exploit

CVE-2026-41940 - Эксплойт обхода аутентификации cPanel & WHM Уязвимость: Манипуляция файлом сессии через CRLF-инъекцию в обработчике HTTP Basic аутентификации cpsrvd CVE: CVE-2026-41940 CVSS: 9.8 Критический CWE: CWE-93 CRLF-инъекция / CWE-306 Отсутствие аутентификации Затронуты: Версии cPanel &...

acltoolkit

acltoolkit acltoolkit is an ACL abuse swiss-army knife. It implements multiple ACL abuses. Table of Contents acltoolkit Table of Contents Installation Usage Commands get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Installation root@kitploit: pip install...

CVE-2026-20182

CVE-2026-20182 — Cisco Catalyst SD-WAN Controller / Manager Authentication Bypass A proof-of-concept exploit for CVE-2026-20182 , a critical CVSS 10.0 authentication bypass in the vdaemon DTLS service UDP/12346 on Cisco Catalyst SD-WAN Controller vSmart and Manager vManage. Disclosed: May 14, 202...

CVE-2026-0257

CVE-2026-0257: GlobalProtect Authentication Bypass Overview This exploit achieves unauthenticated VPN access to a Palo Alto GlobalProtect gateway/portal by forging an authentication cookie using only the server's publicly available TLS certificate. The Core Vulnerability Why It Works GlobalProtec...

CVE-2025-11171

CVE-2025-11171: Отсутствие аутентификации в плагине Chartify для WordPress Ключевые слова: CVE-2025-11171, уязвимость Chartify WordPress, отсутствие аутентификации, безопасность WordPress, неавторизованная эксплуатация AJAX, уязвимость плагина WordPress, CWE-306, безопасность плагина графиков...

CVE-2024-4040-SSTI-LFI-PoC

CVE-2024-4040 SSTI & LFI PoC - Exploitation | CrushFTP This is a proof of concept for a Server Side Template Injection SSTI & Local File Inclusion LFI vulnerability in CrushFTP. Features Taking leverage of Critical Severity Vulnerabilities in CrushFTP servers through Server Side Template Injectio...

Tritium

Tritium Una herramienta para enumerar y realizar spraying de cuentas válidas de Active Directory mediante la Pre-Autenticación de Kerberos. Antecedentes Aunque actualmente existen muchas herramientas de spraying de contraseñas Kerberos en el mercado, me resultaba difícil encontrar herramientas co...

CVE-2026-20127-Exploit-Extension

경영진 요약 CVE-2026-20127 방어적 컴패니언은 사전 예방적 위협 인텔리전스 및 방어 분석을 위해 설계된 프리미어급 엔터프라이즈 브라우저 확장 프로그램입니다. 이 도구는 Cisco Catalyst SD-WAN ControllervSmart의 인증 우회 취약점에 대한 권위 있는 기술 연구를 포함합니다. 오프라인, 완전히 지역화된 인텔리전스 레이어를 제공함으로써 보안 운영 센터SOC 및 방어 연구원이 활성 조사 데이터를 외부 네트워크에 노출하지 않고 패킷 구조를 신속하게 분석하고 인증 흐름을 추적하며 침해 지표IOC를 즉...

cve-2025-29927-lab

Лаборатория CVE-2025-29927 Минимальная лаборатория воспроизведения для CVE-2025-29927 — обход авторизации промежуточного слоя Next.js CVSS 9.1. Сопутствующая статья: N-Day анализ на Medium Что это такое Приложение Next.js 15.2.2 уязвимое с маршрутом /dashboard, защищённым cookie. Проверку...

CVE-2025-39247

CVE-2025-39247 Цель: HikCentral Professional HCMP, центральный сервер VMS CVE: CVE-2025-39247 — Уязвимость контроля доступа CVSS 3.1: 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Затрагиваемые версии: V2.3.1 – V2.6.2 и V3.0.0 Исправлено в: V2.6.3 / V3.0.1 / Fix-Pack CVE-2025-39247 Раскрыто: 2025-08-28...

CVE-2025-54309__Enhanced_exploit

CVE-2025-54309Enhancedexploit This is a enhanced version of the exploit POC originally created by watchtowrlabs : https://github.com/watchtowrlabs/watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309 massive shoutout to them!! This exploit is meant for research and education purposes and th...

CVE-2025-29927

CVE-2025-29927 Reproduction and fix of the CVE-2025-29927 vulnerability. root@kitploit: git clone [email protected]:Bongni/CVE-2025-29927.git cd CVE-2025-29927 In vulnerable/ there is a version of the application that is vulnerable to the attack. In fixed/ there is a version of the applicati...

CVE-2026-24061

CVE-2026-24061 GNU inetutils-telnetd - 원격 인증 우회 CVE-2026-24061 취약점을 악용하기 위한 보안 연구 도구입니다. 이는 GNU inetutils-telnetd의 치명적인 원격 인증 우회 취약점으로, 인증 없이 즉시 루트 셸에 접근할 수 있습니다. 목차 취약점 요약 영향받는 버전 기술 분석 사전 요구 사항 설치 사용법 출력 참조 익스플로잇 방법론 완화 및 수정 침해 지표 법적 고지 참고 자료 크레딧 취약점 요약 필드| 값 ---|--- CVE 식별자| CVE-2026-24061 CVS...