CVE-2024-40617

CVE-2024-40617 Exploit PoC para CVE-2024-40617 Descripción Consulte la publicación de Medium para obtener una descripción detallada Fujitsu M2M GW1500 : From M2M to M2M2P0wn Uso root@kitploit: | / | \ | | \ / \ | |/| | | ' \ | | | | | \ \ /\ / / ' \ | | | |/ /| | | | | |/ /| /| || |\ V V /| | |...

CVE-2023-3519-BackdoorCheck

cve-2023-3519-citrix-scanner This script is a basic Citrix Scanner for CVE-2023-3519. We try to identify vulnerable Citrix Gateways/ADCs by looking at the HTTP headers. How it works During our analysis of this vulnerability, we and our friends at CERT-Verbund noticed, that our patched systems had...

CVE-2024-24919-CHECKPOINT

CVE-2024-24919 Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available. FIRST: I AM NOT RESPONSIB...

CVE-2024-24919

CVE-2024-24919 Herramienta de explotación para validar la vulnerabilidad CVE-2024-24919 en firewalls VPN de Checkpoint Esta herramienta crea una carpeta de salida que contiene un archivo "Target-IP.txt". Este archivo incluye el contenido del archivo /etc/passwd del objetivo afectado, determinando...

Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.

Summary Multiple vulnerabilities were identified in third-party components used by CICS Transaction Gateway for Multiplatforms, including IBM WebSphere Application Server, IBM WebSphere Application Server Liberty, Apache Tomcat Embed, Logback, Log4j, Jackson Databind, and various operating system...

CVE-2024-3400

CVE-2024-3400: Vulnerabilidad de inyección de comandos del sistema operativo en GlobalProtect Gateway Severidad: CRÍTICA 10/10 ⚠️...

CVE-2024-24919---Poc

CVE-2024-24919 PoC una Prueba de Concepto de CVE-2024-24919 Lea sobre ello - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 La vulnerabilidad permite a un atacante remoto no autenticado leer el contenido de un archivo arbitrario ubicado en el dispositivo afectado. Descripción Potencialmente...

nmap-scripts

nmap-scripts cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 취약점을 위한 nmap 스크립트 CVE-2020-0796 Microsoft Server Message Block 3.1.1SMBv3 프로토콜이 특정 요청을 처리하는 방식에 원격 코드 실행 취약점이 존재하며, 일명 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'라고 합니다. CVE-2019-7238 Sonatype Nexus...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...

CVE-2026-3055-Scanner---Herramienta-de-Detecci-n

🔍 CVE-2026-3055 Scanner - NetScaler Memory Overread Detection Tool ⚠️ WARNING This tool is for educational purposes and authorized testing only. Do not use on systems without explicit permission from the owner. 📋 Description Detection tool for CVE-2026-3055 that identifies Citrix NetScaler ADC and...

CVE-2026-25253-research

CVE-2026-25253 Proof of Concept One-click RCE on OpenClaw via Cross-Site WebSocket Hijacking. DISCLAIMER: This code is provided for authorized security research and educational purposes only. Use of this code against systems without explicit written permission is illegal and unethical. The author...

Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

Análisis de Alerta SOC: Lectura Arbitraria de Archivos en Checkpoint Security Gateway CVE-2024-24919 Introducción CVE-2024-24919 es una vulnerabilidad crítica de día cero en Check Point Security Gateways que permite a atacantes remotos no autenticados leer archivos arbitrarios de los sistemas...

CVE-2023-0214

SWG Exploit Generator root@kitploit: ██████╗ ██████╗ ████████╗███████╗ ██╔═████╗██╔══██╗╚══██╔══╝██╔════╝ ██║██╔██║██████╔╝ ██║ ███████╗ ████╔╝██║██╔═══╝ ██║ ╚════██║ ╚██████╔╝██║ ██║ ███████║ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ by 0PTS Proof of Concept for the HTTP Response Splitting vulnerability in Skyhi...

CVE-2026-42208

✦ CVE-2026-42208 - Inyección SQL Crítica en LiteLLM 🧭 Resumen CVE-2026-42208 es una vulnerabilidad crítica de inyección SQL sin autenticación que afecta a la puerta de enlace de IA LiteLLM. Permite a los atacantes explotar consultas de base de datos del backend sin autenticación , exponiendo...

aegis-latent-core

Aegis Latent Core AI Governance and Cryptographic Evidence Gateway Aegis sits between your application and your model provider. For every governed call it applies policy, forwards the request, and commits a signed, hash-linked evidence record before the response reaches your caller — together wit...

CVE-2019-0232

Entorno de vulnerabilidad root@kitploit: Tomcat 8.5.39 Jdk 8u121 Editar el archivo web.xml root@kitploit: cgi org.apache.catalina.servlets.CGIServlet debug 0 cgiPathPrefix WEB-INF/cgi-bin executable 5 cgi /cgi-bin/ Editar el archivo...

openclaw-hardening-check

This script only reads. It fixes nothing and does not guarantee that you are safe. Green output means only that the checks listed below passed—and nothing more. OpenClaw hardening check openclaw-hardening-check.mjs is a small, dependency-free, offline review of an OpenClaw installation. It reads...

HG532d-RCE-Exploit

HG532d RCE Exploit Overview A Remote Code Execution RCE exploit based on CVE-2017-17215 vulnerability. Modded from original PoC code from exploit-db.com to work on Huawei HG532d Home Gateway Routers. Description This RCE exploit is based on CVE-2017-17215 which exploits vulnerabilities in the UPn...

CVE-2022-22947-Spring-Cloud-Gateway

Vulnerabilidad de ejecución remota de código en Spring Cloud Gateway Esta vulnerabilidad presenta un alto riesgo para los servicios en línea; no realice escaneos no autorizados. Instrucciones de uso root@kitploit: ╰─ ./CVE-2022-22947 -h ─╯ Ejecutar comando: ./CVE-2022-22947 -u http://127.0.0.1:80...

PT-2026-88979

CRITICAL SECURITY ALERT | CHECK POINT CVE-2026-85102 A critical Check Point VPN vulnerability CVSS 9.8 may allow unauthenticated remote code execution on affected Security Gateways. Apply security updates ASAP. Help:[email protected] CyberSecurity CheckPoint CVE...