Lucene search
+L

2246 matches found

Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

CVE-2024-5009

CVE-2024-5009 : WhatsUp Gold SetAdminPassword Escalação de Privilégios Ferramenta CVEHunter para detecção e exploração de vulnerabilidades para CVE-2024-5009 com desempenho assíncrono. Instalação root@kitploit: git clone https://github.com/th3gokul/CVE-2024-5009.git cd CVE-2024-5009 pip install -...

8.4CVSS8.2AI score0.1503EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/26 7:12 a.m.2 views

CVE-2024-4885

CVE-2024-4885 PoC für CVE-2024-4885 Progress WhatsUp Gold GetFileWithoutZip Unauthentifizierte Remote-Codeausführung CVE-2024-4885 Technische Analyse Eine Root-Cause-Analyse der Schwachstelle finden Sie auf meinem Blog: https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/ Verwendu...

9.8CVSS9.3AI score0.99288EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 7:12 a.m.1 views

CVE-2024-4883

CVE-2024-4883 PoC para CVE-2024-4883 Progress WhatsUp Gold WriteDatafile Execução Remota de Código Não Autenticada CVE-2024-4883 Análise Técnica Uma análise de causa raiz da vulnerabilidade pode ser encontrada no meu blog:...

9.8CVSS9.1AI score0.64779EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 7:12 a.m.2 views

CVE-2024-5009

CVE-2024-5009 Progress WhatsUp Gold SetAdminPassword विशेषाधिकार वृद्धि CVE-2024-5009 के लिए PoC इस भेद्यता का मूल कारण विश्लेषण मेरे ब्लॉग पर पाया जा सकता है: https://summoning.team/blog/progress-whatsup-gold-privesc-setadminpassword-cve-2024-5009/ उपयोग root@kitploit: python3 CVE-2024-5009.py...

8.4CVSS8.6AI score0.1503EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 11:22 p.m.2 views

CVE-2024-6670

CVE-2024-6670 PoC für die Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Schwachstelle CVE-2024-6670 Eine Root-Cause-Analyse der Schwachstelle finden Sie in meinem Blog: https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/ Verwendung root@kitploit:...

9.8CVSS9.5AI score0.93EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 8:48 p.m.2 views

golddigger

Gold Digger Cerca file per oro Gold Digger è un semplice strumento utilizzato per aiutare a scoprire rapidamente informazioni sensibili nei file in modo ricorsivo. Originariamente scritto per assistere nella ricerca rapida di file ottenuti durante un penetration test. Installazione Gold Digger...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 4:51 p.m.122 views

batea

Batea A batea is a large shallow pan of wood or iron traditionally used by gold prospectors for washing sand and gravel to recover gold nuggets. Batea is a context-driven network device ranking framework based on the anomaly detection family of machine learning algorithms. The goal of Batea is to...

5.7AI score
SaveExploits0
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.83 views

WhatsUp Gold HasErrors SQL Injection - Authentication Bypass

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. id: CVE-2024-6670 info: name: WhatsUp Gold HasErrors SQL Injection - Authentication Bypass author: DhiyaneshDK,princechaddha severity:...

9.8CVSS9.4AI score0.93EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.86 views

Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of GetFileWithoutZip method. The issue results from th...

9.8CVSS9.4AI score0.99288EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.12 views

WhatsUp Gold GetStatisticalMonitorList SQL Injection - Authentication Bypass

In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. id: CVE-2024-6671 info: name: WhatsUp Gold GetStatisticalMonitorList SQL Injectio...

9.8CVSS9.4AI score0.18988EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/12 4:17 p.m.9 views

CVE-2026-65941

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

8.8CVSS0.00437EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/12 4:17 p.m.9 views

CVE-2026-65937

In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent script content...

8CVSS0.00242EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/12 4:17 p.m.10 views

CVE-2026-65938

In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions...

4.3CVSS0.00161EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/12 4:17 p.m.10 views

CVE-2026-65939

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root...

6.8CVSS0.00238EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/12 4:17 p.m.11 views

CVE-2026-65940

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server...

6.8CVSS0.00211EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/12 3:23 p.m.44 views

CVE-2026-65941 WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

8.8CVSS0.00437EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/12 3:23 p.m.62 views

CVE-2026-65941

CVE-2026-65941 affects WhatsUp Gold releases prior to 2026.0.2. An unauthenticated remote attacker with network access to the affected IIS-backed service can execute arbitrary code in the context of the IIS application service account. The CVE is documented by NVD and CVE records, with a high imp...

8.8CVSS5.8AI score0.00437EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/12 3:23 p.m.8 views

CVE-2026-65941

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

8.8CVSS5.7AI score0.00437EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/12 3:23 p.m.8 views

EUVD-2026-57267

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

8.8CVSS5.8AI score0.00437EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/12 3:23 p.m.8 views

EUVD-2026-57266

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server...

6.8CVSS5.4AI score0.00211EPSS
SaveExploits0References3
Rows per page
Query Builder