CVE-2026-94036 D-Link DIR-X1860/DIR-X1860Z routerd ubus access control

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwdset results in improper access controls. The attack must originate from...

CVE-2026-94036

D-Link DIR-X1860 and DIR-X1860Z routers (up to version 1.0.2.220120.165402) are affected by an improper access control flaw in the /ubus file of the routerd component. Manipulation of the passwd_set argument allows an attacker on the local network to bypass access controls, with no authentication...

CVE-2026-94036 D-Link DIR-X1860/DIR-X1860Z routerd ubus access control

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwdset results in improper access controls. The attack must originate from...

EUVD-2026-83752

A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwdset results in improper access controls. The attack must originate from...

CVE-2023-2598

CVE-2023-2598 Referencias: https://anatomic.rip/cve-2023-2598/ https://github.com/ysanatomic/iouringLPE-CVE-2023-2598 https://bsauce.github.io/2024/07/30/CVE-2023-2598/ Compilación: root@kitploit: apt install -y liburing-dev gcc CVE-2023-2598.c -o CVE-2023-2598 -luring Prueba de concepto:...

CVE-2025-50675-GPMAW-Permissions

CVE-2025-50675 – Insecure Permissions in GPMAW 14.2 Summary CVE-2025-50675 affects GPMAW 14.2, a bioinformatics software developed by Lighthouse Data. The installer creates the folder C:\Program Files\gpmaw with full control granted to the 'Everyone' group , allowing any local user to modify file...

CVE-2025-1738

CVE-2025-1738 - Trivision Camera NC227WF PoC 📋 Overview Following responsible disclosure, two official CVEs were assigned. CVE| CVSS v3.1| Score| CWE| Type ---|---|---|---|--- CVE-2025-1738| AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N| 6.2| CWE-598| Cleartext Password Exposure 🔍 CVE-2025-1738 — Cleartext...

CVE-2023-4911

CVE-2023-4911 Usage root@kitploit: docker build -t CVE-2023-4911 -f Dockerfile . docker run -it CVE-2023-4911 ./exp References https://github.com/leesh3288/CVE-2023-4911 https://github.com/Green-Avocado/CVE-2023-4911...

OverlayFS-PrivEsc-CVE-2022-0944

CVE-2022-0944: Vulnerabilidad de escalada de privilegios en OverlayFS 🛡️ Aviso de seguridad y guía de mitigación para la vulnerabilidad de escalada de privilegios del kernel de Linux en OverlayFS. 📜 Resumen CVE-2022-0944 es una vulnerabilidad de seguridad en el subsistema OverlayFS del kernel de...

CVE-2021-4034

Proof of Concept PoC: CVE-2021-4034 PwnKit Note: This repository and its content are part of a Final Degree Project FDP, created solely for educational purposes and academic research. Description This repository contains a proof of concept PoC for the CVE-2021-4034 vulnerability, also known as...

Exploit-CVE-2025-24801

CVE-2025-24801 This exploit uses CVE-2025-24801 to get Remote Code Execution RCE via Local File Inclusion LFI at GLPI 10.0.17. Proof of Concept PoC of this CVE with explaination to this vulnerability in GLPI. Observation Some applications expose the /glpi/ endpoint e.g.,...

CVE-2024-23334-PoC

CVE-2024-23334-PoC This repository is a proof of concept POC for CVE-2024-23334, demonstrating an attempt to replicate the bug in aiohttp that leads to Local File Inclusion LFI. !CAUTION Disclaimer: This POC is for educational purposes only. DO NOT use it in real-world scenarios. Install 1. Clone...

CVE-2020-24089

CVE-2020-24089 Windows Privilege Escalation An issue was discovered in ImfHpRegFilter.sys in IOBit Malware Fighter version 8.0.2, allows local attackers to cause a denial of service DoS. CVE Link - https://vulners.com/cve/CVE-2020-24089...

CVE-2015-4495

CVE-2015-4495 Exploit for CVE-2015-4495 / mfsa2015-78 How to use Add your logic in the parsedirectorylisting function. Usage root@kitploit: $ git clone https://github.com/vincd/CVE-2015-4495.git $ cd CVE-2015-4495 $ python -m SimpleHTTPServer Then open an unpatch Firefox version 39.0.3. A popup...

CVE-2018-7422

CVE-2018-7422 Exploit para CVE-2018-7422: Inclusión de archivos locales en el plugin Site Editor 1.1.1 de WordPress T1574.008 Sintaxis root@kitploit: ruby Entorno de Laboratorio OffSec Proving Grounds - Readys Uso...

CVE-2024-5633

PoC para CVE-2024-5633 Las cámaras Longse modelo LBH30FE200W, así como los productos basados en este dispositivo, proporcionan un acceso sin restricciones a un atacante situado en la misma red local a un servicio binario no documentado llamado CoolView en uno de los puertos. Un atacante con...

CVE-2024-12209

CVE-2024-12209 WP Umbrella: Update Backup Restore & Monitoring = 2.17.0 - Vulnerabilidad de inclusión de archivos locales no autenticada Descripción El plugin WP Umbrella: Update Backup Restore & Monitoring para WordPress es vulnerable a Inclusión de Archivos Locales en todas las versiones hasta ...

CVE-2024-27674

CVE-2024-27674 Macro Expert icacls "C:\Program Files x86\GrassSoft\Macro Expert" C:\Program Files x86\GrassSoft\Macro Expert BUILTIN\Users:OICIM NT SERVICE\TrustedInstaller:IF NT SERVICE\TrustedInstaller:ICIIOF NT AUTHORITY\SYSTEM:IF NT AUTHORITY\SYSTEM:IOICIIOF BUILTIN\Administrators:IF...

FreeBSD-9.0-9.1-Privilege-Escalation

FreeBSD-9.0-9.1 - Escalada de Privilegios CVE-2013-2171 Por [email protected] ¡Cómo explotarlo! 1° Verifica la versión del kernel root@kitploit: uname -a FreeBSD freebsd 9.0-RELEASE FreeBSD 9.0-RELEASE 0: Tue Jan 3 07:46:30 UTC 2012 2° Transfiere este archivo al objetivo root@kitploit:...

cve-2021-4034

CVE-2021-4034 - PwnKit Escalada Local de Privilegios en Polkit Resumen Este repositorio contiene una Prueba de Concepto para CVE-2021-4034 , también conocido como PwnKit. Fue desarrollado únicamente con fines de formación personal y educativos. Úselo solo en entornos que le pertenezcan o en los q...