CVE-2026-23550

root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ███████╗ ███████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ╚════██╗╚════██╗██╔════╝ ██╔════╝██╔═████╗ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ █████╔╝ █████╔╝███████╗...

CVE-2022-28113

=============== Fantec MWiD25-DS Writeup for CVE-2022-28113 by @code-byter ========================== This is a writeup of exploiting the Fantec MWiD25-DS Travel Router Firmware version: 2.000.030. This vulnerability allows any unauthorized user to execute arbitrary commands as root user. A...

Contact Form 7 Math Captcha <= 2.0.1 - Cross-site Scripting

The Contact Form 7 Math Captcha WordPress plugin through 2.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users. id: CVE-2024-6517 info: name: Contact Form 7 Math Captcha =...

DS-Wireless-Communication-Remote-Code-Execution

Esecuzione di codice remoto tramite comunicazione wireless DS Inietta codice arbitrario nel gioco di un client. Prerequisiti Python 3.10 pip pydivert Utilizzo root@kitploit: pip install -r requirements.txt python dswirelesscommunicationremotecodeexecution.py ID CVE CVE-2023-45887 Licenza GNU...

CVE-2022-0918

CVE-2022-0918 Pagina CVE di Red Hat: https://access.redhat.com/security/cve/cve-2022-0918 Issue GitHub con patch collegate: https://github.com/389ds/389-ds-base/issues/5242 PoC L'applicazione PoC accetta un singolo IP, sia IPv4 che IPv6 funzioneranno. Di default invia il messaggio alla porta 389;...

CVE-2017-7921-EXPLOIT

CVE-2017-7921 - Vulnerabilidade de Autenticação Incorreta em Série de Câmeras Hikvision Uma falha de segurança identificada como CVE-2017-7921, que afeta diversos modelos de câmeras Hikvision. A vulnerabilidade foi descoberta nos dispositivos das séries DS-2CD2xx2F-I V5.2.0 build 140721 a V5.4.0...

ds-cve-plugin

Benvenuto in ds-cve-plugin Un plugin per DataSurgeon che estrae i numeri CVE dal testo es: CVE-2021-56789 Inizia subito con la gestione dei plugin Aggiungere un nuovo plugin Rimuovere un plugin Elencare tutti i plugin Vai direttamente alla creazione Trova il tuo file plugin Creare il tuo plugin...

Katana

Katana-ds Katana-ds ds per dork scan è un semplice strumento python che automatizza il Google Hacking/Dorking e supporta Tor. Diventa ancora più potente in combinazione con GHDB Nota 25/09/2021 : Questo repository è nuovo, ma lo script in sé è vecchio, risalente a quando il Google dorking aveva...

Mass-CVE-2026-23550-Exploit

🔥 CVE-2026-23550 Scanner Modulare DS Scanner Python multi-thread per CVE-2026-23550 CVSS 10.0 vulnerabilità del plugin WordPress Modular DS ≤2.5.1 che colpisce oltre 40.000 siti. Rileva il takeover admin non autenticato tramite bypass di getLogin con verifica completa dell'accesso a wp-admin...

CYBERDUDEBIVASH-Modular-DS-CVE-2026-23550-Detector

CYBERDUDEBIVASH Modular DS CVE-2026-23550 Detector Überblick Dies ist ein autorisiertes CYBERDUDEBIVASH ECOSYSTEM-Tool zur Erkennung von CVE-2026-23550 im WordPress Modular DS Plugin. Es prüft nicht-destruktiv auf verwundbare Versionen = 2.5.1, indem es die readme.txt des Plugins analysiert. Idea...

CVE-2026-23550-PoC

CVE-2026-23550-PoC CVE-2026-23550 - Modular DS WordPress Plugin Unauthentifizierter Admin-Zugriff Proof-of-Concept PoC , das CVE-2026-23550 demonstriert – kritische Übernahme von Admin-Konten ohne Authentifizierung im Modular DS WordPress-Plugin Versionen ≤2.5.1. Wird aktiv in freier Wildbahn...

CVE-2026-23550

CVE-2026-23550 Modular DS header'User-Agent'; $userAgentMatches = $userAgent && Str::is'ModularConnector/ Linux', $userAgent; $originQuery = $request-has'origin' && $request-get'origin' === 'mo'; $isFromQuery = $originQuery || $userAgentMatches && $request-has'type'; // When is wp-load.php reques...

EpSiLoNPoInT-

!/usr/bin/env python3 """ TSAR-EXEC v7.1 + EpSiLoNPoInTFuCK v5.1 - README.md Vollständig und Kopierbereit CVE-2026-23550 | Framework für Massen-Exploitation Modular DS Auth Bypass Autor: EpSiLoNPoInT | Version: 7.1-GOD | Android 24h Coding | 08/02/2026 """...

CVE-2026-78701

A flaw was found in 389-ds-base. A remote, authenticated attacker coul...

MiracleLinux 8 : 389-ds:1.4 (AXSA:2026-1661:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1661:01 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereferen...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2026:3687-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3687-1 advisory. - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. -...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2026:3686-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3686-1 advisory. - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. -...

CVE-2026-78701

A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of...

AZL-98045 CVE-2026-78701 affecting package 389-ds-base 3.1.1-11

A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of...

EUVD-2026-65312

A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of...