CVE-2026-51621

Incorrect access control in the getInitCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain sensitive device configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51625

Incorrect access control in the getWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain sensitive information such as SSIDs and Wi-Fi keys, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51626

Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WPS configuration, including the current PIN, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51624

Incorrect access control in the getStationMacByIp function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain a client MAC address via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51627

Incorrect access control in the getIptvCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IPTV and IGMP configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51618

Incorrect access control in the getWizardCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain setup wizard and onboarding configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51616

Incorrect access control in the getWanIeCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain LAN addressing and DHCP configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51614

Incorrect access control in the getAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain access-device policy and client state information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51610

Incorrect access control in the RebootSystem function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to arbitrarily force an immediate reboot via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51615

Incorrect access control in the getLanCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain LAN addressing and DHCP configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51617

Incorrect access control in the getSysStatusCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain sensitive information such as operation mode, firmware version, serial number, WAN/LAN IP addresses, WiFi SSID, encryption keys, and connected client statistics...

CVE-2026-51613

Incorrect access control in the getDeviceInfo function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain device identification details via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2023-43208-PoC

CVE-2023-43208 - Mirth Connect Nicht authentifizierte RCE Voraussetzungen Python 3.11 oder höher getestet auf 3.11, 3.12, 3.13 Einrichtung root@kitploit: Create a clean virtual environment python3 -m venv .venv source .venv/bin/activate Install pinned dependencies pip install -r requirements.txt...

DirtyPipe-Android

DirtyPipe per Android Dirty Pipe CVE-2022-0847 PoC di root temporanea per Android. Target Attualmente funziona solo su Pixel 6 con livello di patch di sicurezza dal 2022-02-05 al 2022-04-05. Non usare su altri dispositivi o altre versioni. Causerà un crash riavvio. Dirty Pipe è stato finalmente...

blind-ssrf-chains

Einführung Was ist Server Side Request Forgery SSRF? Server Side Request Forgery tritt auf, wenn du einen Server dazu bringen kannst, in deinem Namen beliebige Anfragen auszuführen. Da die Anfragen vom Server gestellt werden, ist es möglicherweise möglich, auf interne Ressourcen zuzugreifen, je...

CVE-2006-3392

CVE-2006-3392 Descrizione Webmin precedente alla versione 1.290 e Usermin precedente alla versione 1.220 chiamano la funzione simplifypath prima di decodificare l'HTML, consentendo ad attaccanti remoti di leggere file arbitrari, come dimostrato utilizzando sequenze "..%01", che bypassano la...

Exploits + Shellcode + GHDB

Repository Git di Exploit Database Questo è un repository ufficiale di The Exploit Database, un progetto sponsorizzato da Offensive Security. I nostri repository sono: Exploit e Shellcode: gitlab.com/exploit-database/exploitdb Exploit binari: gitlab.com/exploit-database/exploitdb-bin-sploits Pape...

SecGen

LO SVILUPPO È STATO SPOSTATO SU http://github.com/cliffe/SecGen/, QUESTA REPO NON È PIÙ MANTENUTA E PROBABILMENTE NON FUNZIONERÀ! Security Scenario Generator SecGen Riepilogo SecGen crea macchine virtuali vulnerabili così gli studenti possono imparare le tecniche di penetration testing. Box come...

zettelforge

ZettelForge O único sistema de memória agêntica construído para inteligência de ameaças cibernéticas. Quando um analista sênior sai, dois ou três anos de contexto vão junto com ele — ambientes de clientes, investigações anteriores, TTPs de atores, padrões de falso positivo, cada "espera, já vimos...

auditd

root@kitploit: / | / // / / /| |/ / / / / / / / / / // / // / / // // / // |,/,///,/ Best Practice Auditd Konfiguration Idee Die Idee dieser Auditd-Konfiguration ist es, eine Best-Practice-Basislinie bereitzustellen, die out-of-the-box auf den wichtigsten Linux-Distributionen funktioniert eine...