Lucene search
+L

6994 matches found

Cvelist
Cvelist
added 2026/09/22 1:49 p.m.34 views

CVE-2026-95675 D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface

D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...

9.8CVSS0.0391EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/22 3:41 a.m.8 views

fortios-auth-bypass-check-CVE-2024-55591

CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Vulnerable Behaviour Detection Detection in Action root@kitploit: python CVE-2024-55591-check.py --target 192.168.1.10 --port 443 / | | |\ \ \ / / \ \ / | | \| | / \ / / \ \ \ / / | | \ \| Y | | \ / | | \ // || \\ ||| | \ / \//...

9.8CVSS8.7AI score0.98259EPSS
SaveExploits10
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.263 views

Progress Kemp LoadMaster - Command Injection

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution. id: CVE-2024-1212 info: name: Progress Kemp LoadMaster - Command Injection author: DhiyaneshDK severity: critical description: | Unauthenticated remote...

10CVSS8.5AI score0.95388EPSS
SaveExploits9References5
NVD
NVD
added 2026/09/21 9:17 p.m.4 views

CVE-2026-79317

A session invalidation flaw exists in x-ui 0.3.2. The full user object is stored in a client-side signed cookie, and authentication only checks that a user object can be retrieved from the cookie without re-validating against the database or any session version. When an administrator changes the...

4.8CVSS0.00222EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/21 5:40 p.m.8 views

CVE-2024-0012

CVE-2024-0012 CVE-2024-0012 an authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit...

9.8CVSS8.3AI score0.99718EPSS
SaveExploits15
CVE
CVE
added 2026/09/21 12:00 a.m.9 views

CVE-2026-79317

x-ui 0.3.2 has a session invalidation flaw where the full user object is stored in a client-side signed cookie . Authentication only verifies that a user object can be retrieved from the cookie, without re-validating against the database or checking a session version. As a result, when an adminis...

5.8AI score0.00222EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/20 10:59 p.m.5 views

CVE-2024-7593

CVE-2024-7593 Description: CVE-2024-7593 is a critical vulnerability affecting multiple Pulse Secure products, including Pulse Secure VPN. This vulnerability allows an authenticated attacker with access to the management interface to execute arbitrary commands on the affected server. This can lea...

9.8CVSS8.8AI score0.9999EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/20 4:41 p.m.9 views

CVE-2024-7593

CVE-2024-7593 Description: CVE-2024-7593 is a critical vulnerability affecting multiple Pulse Secure products, including Pulse Secure VPN. This vulnerability allows an authenticated attacker with access to the management interface to execute arbitrary commands on the affected server. This can lea...

9.8CVSS8.9AI score0.9999EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/20 3:15 p.m.11 views

CVE-2024-20404

Description A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected system. This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are sent ...

7.2CVSS7.3AI score0.22644EPSS
SaveExploits1
NVD
NVD
added 2026/09/20 12:17 p.m.10 views

CVE-2026-94003

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function getcsspathfromuri of the file /cgi-bin/mbox-config of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been...

10CVSS0.00606EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/20 11:30 a.m.8 views

EUVD-2026-83730

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function getcsspathfromuri of the file /cgi-bin/mbox-config of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been...

10CVSS8.5AI score0.00606EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/20 4:51 a.m.11 views

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect The Pan-OS Checker is to determine the Palo Alto PAN-OS software version of a remote GlobalProtect portal or management interface. Before run the script, need to make sure version-table.txt in the same...

10CVSS8.8AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/09/19 3:39 p.m.8 views

CVE-2026-19745

Introduction Hi everyone, back in May I found decent vulnerablities in my router, today I can finally show everyone! Both vulnerablities in this repo are authenticated Denial of Service vulnerablities! I do not know the exact techial details of how or why these vulnerablities work, we never got a...

5.3CVSS5AI score0.00345EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/19 3:32 a.m.14 views

CVE-2023-31853

CVE-2023-31853 Reflected cross-site scripting XSS attack exists in web-based management interface of Cudy LT400. The page /cgi-bin/luci/admin/network/bandwidth has reflected XSS via the icon parameter. The methods of exploitation would involve sending a specially crafted request to the victim tha...

6.1CVSS6.4AI score0.00499EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/19 3:14 a.m.6 views

cve-2024-0012_9474-panos_authbypass_reproduction

CVE-2024-0012 / CVE-2024-9474 — PAN-OS Authentication Bypass → Privilege Escalation Chain CVE| Description| CVSS ---|---|--- CVE-2024-0012| PAN-OS Management Interface Authentication Bypass| 9.3 CVE-2024-9474| PAN-OS Privilege Escalation| 6.9 When chained, these vulnerabilities allow...

9.8CVSS8.6AI score0.99718EPSS
SaveExploits18
NVD
NVD
added 2026/09/18 8:17 p.m.3 views

CVE-2026-82967

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface...

9.8CVSS0.00426EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/18 7:33 p.m.8 views

EUVD-2026-83412

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface...

9.8CVSS5.9AI score0.00426EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 7:33 p.m.19 views

CVE-2026-82967

IBM Guardium Data Protection 12.2 is affected by an authentication bypass vulnerability that allows an unauthenticated remote attacker to bypass IP-based access controls and gain access to the Guardium management interface. The flaw effectively nullifies the IP-restriction layer that would otherw...

9.8CVSS5.9AI score0.00426EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/18 7:33 p.m.39 views

CVE-2026-82967 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface...

9.8CVSS0.00426EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.4 views

Cisco Identity Services Engine (cisco-sa-ise-rce-se7bYU57)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit...

9.9CVSS6.5AI score0.00954EPSS
SaveExploits0References5
Rows per page
Query Builder