cve-2015-3306

cve-2015-3306 Docker 镜像 hackarada/cve-2015-3306 仅供个人使用 root@kitploit: docker build -t hackarada/cve-2015-3306 docker run --rm -it -p 21:21 -p 80:80 hackarada/cve-2015-3306...

CVE-2025-31161

CVE-2025-31161 使用Go编写了针对影响crushFTP的CVE-2025-31161的漏洞利用程序。 使用方法 root@kitploit: ./exploit -target http://localhost:8085 -user crushadmin -action create-admin -new-admin-user username -new-admin-pass pass...

sccm_sql_backdoor

sccmsqlbackdoor Una herramienta de prueba de concepto que implanta un backdoor controlado en un procedimiento almacenado de Management Point, permitiendo la ejecución indirecta de SQL a través de un servicio HTTP legítimo de MP. Instalación Puedes instalarlo clonando el repositorio e instalando l...

CVE-2025-32375

漏洞版本设置 启动漏洞容器： root@kitploit: docker compose up 创建一个监听器（例如 ncat）： root@kitploit: ncat -klnv 1337 运行漏洞利用程序： root@kitploit: python3 exploit.py 如果一切正常，你应该会在 ncat 窗口中收到一个 HTTP 请求，其中包含 OS 命令（默认情况下为 id）的执行结果。 致谢 漏洞发现者：SeaW1nd 基于 VickyTheViking 的测试环境设置...

CVE-1999-0678

CVE-1999-0678：检测与修复项目 作者： Pham Huu Minh 日期： 2025年12月 项目概述 本项目展示了漏洞评估的完整生命周期，特别针对 Apache Web 服务器上的遗留目录遍历漏洞 CVE-1999-0678 。目标是模拟攻击、使用 IDS 检测并永久修复该安全漏洞。 技术栈 攻击者： Kali Linux Curl, Firefox, GVM 受害者： Ubuntu Server Apache2, Snort IDS 工具： Greenbone Vulnerability Manager, Snort, Iptables 阶段 1：发现与利用...

EUVD-2026-63168

An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference. A remote attacker on an adjacent network can send ...

CVE-2026-8619

The HTTP service in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0, and Archer MR600 v2 crashes via NULL pointer dereference when an adjacent-network attacker sends a specially crafted HTTP request, temporarily disabling the web management interface. CVSS 4.0 base score is 7.1 (HIGH). TP-Li...

CVE-2026-8619 Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600

An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference. A remote attacker on an adjacent network can send ...

CVE-2026-69119

Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the services/auth HTTP service that allows any authenticated user to read or permanently delete another tenant's project by supplying an arbitrary project ID to the GET and DELETE /projects/id endpoints. The GitHubTokenHTTPAuth...

CVE-2026-48135 HTTP service can incorrectly process malformed HTTP requests

A Check Point HTTP-based service can incorrectly handle malformed HTTP requests. The issue is related to HTTP request parsing and validation...

ctf-writeups-Doli1

🛡️ Doli 1 — CTF Writeup VulnHub VAPT Report For...

CVE-2026-34124 Denial of Service via Path Expansion Overflow in HTTP Service in TP-Link Tapo C520WS

A denial-of-service vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP request path parsing logic. The implementation enforces length restrictions on the raw request path but does not account for path expansion performed during normalization. An attacker on the adjacent...

CVE-2026-34124

TP-Link Tapo C520WS v2.6 contains a DoS in HTTP path parsing: the raw request path length is restricted but path expansion during normalization is not accounted for, enabling adjacent-network attackers to craft requests that may cause buffer overflow and memory corruption, potentially interruptin...

EUVD-2025-208321

A denial-of-service DoS vulnerability was identified in Omada EAP610 v3. An attacker with adjacent network access can send crafted requests to cause the device’s HTTP service to crash. This results in temporary service unavailability until the device is rebooted. This issue affects Omada EAP610...

CVE-2025-7375

A denial-of-service DoS vulnerability was identified in Omada EAP610 v3. An attacker with adjacent network access can send crafted requests to cause the device’s HTTP service to crash. This results in temporary service unavailability until the device is rebooted. This issue affects Omada EAP610...

CVE-2025-7375

Omada EAP610 (v3) is affected by an unauthenticated DoS that can be triggered by crafting HTTP requests from an adjacent network, causing the device’s HTTP service to crash and resulting in temporary unavailability until reboot. Affected firmware versions are prior to 1.6.0. The CVSS 4.0 base met...

CVE-2026-0918

CVE-2026-0918 affects TP-Link Tapo C220 v1 and C520WS v2 cameras. The HTTP service mishandles POST requests with an excessively large Content-Length header, causing a failed memory allocation and a NULL pointer dereference that crashes the main process. This allows an unauthenticated attacker to ...

CVE-2023-31728

Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface...

CVE-2025-66723

inMusic Brands Engine DJ before 4.3.4 suffers from Insecure Permissions due to exposed HTTP service in the Remote Library, which allows attackers to access all files and network paths...

PT-2025-54227

Name of the Vulnerable Software and Affected Versions inMusic Brands Engine DJ version 4.3.0 Description Engine DJ version 4.3.0 is affected by an issue with insecure permissions. An exposed HTTP service within the Remote Library feature allows attackers to access all files and network paths...