101 matches found
CVE-2019-0708-POC
CVE-2019-0708-POC Usage Instructions IP format: IP:port, save to ip.txt root@kitploit: cve-2019-0708.py 100线程...
CVE-2018-9995-2
Herramienta CVE-2018-9995-2 root@kitploit: CVE: CVE-2018-9995 Autor del exploit: Fernandez Ezequiel @capitanalfa Modificado por: Kien Quoc Versión: 2.0 Instalar Python3 root@kitploit: apt-get install git pip3 install requests pip3 install colorama sudo apt update apt-get install python3 Inicio...
masscan
MASSCAN: Escáner de puertos IP masivo Este es un escáner de puertos a escala de Internet. Puede escanear todo Internet en menos de 5 minutos, transmitiendo 10 millones de paquetes por segundo, desde una sola máquina. Su uso parámetros, salida es similar a nmap, el escáner de puertos más famoso. E...
CVE-2021-41773-exploit
Usage file ip-ports.txt: root@kitploit: 1.1.1.1:80 root@kitploit: node CVE-2021-41773.js ip-ports.txt...
CVE-2026-24061
CVE-2026-24061 python3 exploit.py...
CVE-2026-27472-and-CVE-2026-27474
CVE-2026-27472 and CVE-2026-27474 CVSS-B 5.3 MEDIUM and CVSS-B 4.8 MEDIUM Blind SSRF in SPIP 4.4.8 Syndication Feature and stored XSS Explanations and more on my website PoC 1. Log in as an administrator. 2. Make sure that in the Site content configuration, Sites referencing and syndication is on...
CVE-2026-51660
Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IP and port filtering rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
EUVD-2026-67874
Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IP and port filtering rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51660
CVE-2026-51660 is an incorrect access control vulnerability in the getIpPortFilterRules function of TOTOLINK T6 firmware version 4.1.5cu.748_B20211015 . An unauthenticated remote attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain the device's IP and port filtering rules , ...
Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Forescout found 22 internet-facing Rockwell Automation programmable logic controllers PLCs in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its August 3 scan counted 4,407 exposed Rockwell controllers worldwide, including 2,844 in the Unit...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: add seqadj extension for natted connections Sequence adjustment may be required for FTP traffic with PASV/EPSV modes. due to need to re-write packet payload IP, port on the ftp control connection. This can requi...
CVE-2026-52921
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: stop hash: range iteration at end The following hash set variants: hash:ip,mark hash:ip,port hash:ip,port,ip hash:ip,port,net iterate IPv4 ranges with a 32-bit iterator. The iterator must stop once the last...
TencentOS Server 4: nginx (TSSA-2025:0724)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0724 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2026-41926
WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation. Attackers can inject arbitrary shell commands through vulnerable parameters like websURLFilter,...
CVE-2026-41926
WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation. Attackers can inject arbitrary shell commands through vulnerable parameters like websURLFilter,...
BIT-NGINX-GATEWAY-2025-23419 TLS Session Resumption Vulnerability
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets...
EUVD-2020-27077
Malware in sbrugna...
EUVD-2004-0524
Malware in sbrugna...