CVE-2019-5420-PoC

CVE-2019-5420-PoC Lo escribí para PentesterLab Si eres de PentesterLab, no hagas trampa, es mucho mejor aprender. Espero que le sea útil a alguien, si no a mí en el futuro : Buen material de argparse, no es un mal PoC Uso root@kitploit: usage: script.py -h --appname APPNAME --cookie COOKIE --modi...

laravel_cookie_killer

Laravel cookie killer Una herramienta utilizada para cifrar/descifrar cookies de Laravel basada en python3 Requisitos previos Para usar la herramienta, necesitas extraer el valor base64 de APPKEY contenido en el archivo .env que se encuentra en la raíz del proyecto Laravel. La sesión también debe...

CVE-2026-40854

WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism improperly validates the sessionid cookie by checking for the existence of a corresponding file in /tmp/loginuser. An attacker can bypass authentication b...

CVE-2025-63441

CVE-2025-63441 Título: XSS reflejado a través de arbitrarily supplied URL parameter param en el endpoint u/administrator/friends Resumen: Se identificó una vulnerabilidad de Cross-Site Scripting XSS reflejado en el endpoint u/administrator/friends de la aplicación OSSN. Esta vulnerabilidad permit...

EUVD-2026-80669

WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism improperly validates the sessionid cookie by checking for the existence of a corresponding file in /tmp/loginuser. An attacker can bypass authentication b...

CVE-2026-40854 Session auth bypass via cookie value in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism improperly validates the sessionid cookie by checking for the existence of a corresponding file in /tmp/loginuser. An attacker can bypass authentication b...

CVE-2026-40854

CVE-2026-40854 affects the WNC T-Mobile 5G Box IDU router . The vulnerability resides in the portal.cgi component, where the session verification mechanism validates the sessionid cookie by checking for the existence of a corresponding file in /tmp/login_user . Because this check does not properl...

CVE-2022-26937

PoC de Caída del Sistema de Archivos de Red de Windows CVE-2022-26937 root@kitploit: nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a...

cve-2022-23131

cve-2022-23131 使用方式：python3 zabbix.py target Admin target为目标地址 Admin固定为管理员用户名 将生成的zbxsignedsession替换到当前目标的cookie中 点击登陆页面的sign in with Single Sign-On SAML方式登陆，即可直接进入管理界面...

CVE-2024-40509

CVE-2024-40509 Vulnerabilidad de Cross Site Scripting en openPetra v.2023.02 mediante la función serverMFinDev.asmx. Descripción : Un usuario no autenticado puede robar cookies de un usuario autenticado explotando una XSS en openPetra v.2023.02 mediante la función serverMFinDev.asmx. Versión del...

CVE-2024-40508

CVE-2024-40508 Vulnerabilidad de Cross Site Scripting en openPetra v.2023.02 a través de la función serverMConference.asmx. Descripción : Un usuario no autenticado puede robar cookies de usuarios autenticados explotando un XSS en openPetra v.2023.02 a través de la función serverMConference.asmx...

CVE-2024-40506

CVE-2024-40506 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMHospitality.asmx function. Descripción : Un usuario no autenticado puede robar cookies de un usuario autenticado explotando un XSS en openPetra v.2023.02 a través de la función serverMHospitality.asmx. Versión...

CVE-2024-40510

CVE-2024-40510 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMCommon.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMCommon.asmx function. Vulnerable Product Version...

CVE-2025-26244

CVE-2025-26244-POC 利用此漏洞的代码见'spoof.go'。它模拟为C2服务器的代理。要利用此漏洞，我们需要知道： 1. 监听器的IP地址和端口 2. 监听器的公钥。 3. 监听器的首次回连URL。 我们可以通过逆向分析操作员之前生成的二进制文件来获取这些信息。 目前，'spoof.go'仅在监听器和代理都使用HTTPS协议时有效，但经过适配后，很可能也能支持DeimosC2支持的其他协议。 利用步骤 1）你需要获取操作员之前生成的HTTPS二进制文件。 2）从二进制文件中提取监听器的IP地址、端口、公钥以及首次回连URL。Trend Micro 提供了相关脚本协助此过...

POC-CVE-2014-0166

POC&EXP of CVE-2014-0166 WordPress 3.8.2 cookie forgery vulnerability Details of this vulnerability can be found athere There are three files: wpzerocookiegenerator.php POC to verify this vulnerability. It won't send any requests, just a local brute-forcer. Redefine variables to supply info and i...

CVE-2026-82311

Apache Airflow FAB provider: resetting a user's password does not delete that user's existing database-backed sessions, despite documented behaviour that it does. The cleanup compares the string identifier Flask-Login stores in the session against the user's integer database identifier, so the...

CVE-2026-82311

In apache-airflow-providers-fab , the FAB password-reset command fails to invalidate existing database-backed sessions because it compares the string _user_id stored by Flask-Login against the user's integer database identifier—a comparison that always evaluates to false. An attacker holding a st...

CVE-2026-27555

A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/getioddportinfo endpoint using a valid user cookie allowing execution of arbitrary PHP code on the device...

CVE-2026-27556

A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/saveioddparameters endpoint using a valid operator cookie allowing execution of arbitrary PHP code on the device...

CVE-2026-27553

A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnosticstab/ajaxdiagtablerows endpoint using a valid user cookie allowing disclosure of all user password hashes...