Lucene search
+L

6970 matches found

Cvelist
Cvelist
added 2026/09/22 1:49 p.m.28 views

CVE-2026-95675 D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface

D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...

9.8CVSS0.0391EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/22 3:41 a.m.8 views

fortios-auth-bypass-check-CVE-2024-55591

CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Vulnerable Behaviour Detection Detection in Action root@kitploit: python CVE-2024-55591-check.py --target 192.168.1.10 --port 443 / | | |\ \ \ / / \ \ / | | \| | / \ / / \ \ \ / / | | \ \| Y | | \ / | | \ // || \\ ||| | \ / \//...

9.8CVSS8.7AI score0.98259EPSS
SaveExploits10
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.263 views

Progress Kemp LoadMaster - Command Injection

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution. id: CVE-2024-1212 info: name: Progress Kemp LoadMaster - Command Injection author: DhiyaneshDK severity: critical description: | Unauthenticated remote...

10CVSS8.5AI score0.95388EPSS
SaveExploits9References5
NVD
NVD
added 2026/09/21 9:17 p.m.4 views

CVE-2026-79317

A session invalidation flaw exists in x-ui 0.3.2. The full user object is stored in a client-side signed cookie, and authentication only checks that a user object can be retrieved from the cookie without re-validating against the database or any session version. When an administrator changes the...

4.8CVSS0.00222EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/21 5:40 p.m.8 views

CVE-2024-0012

CVE-2024-0012 CVE-2024-0012 an authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit...

9.8CVSS8.3AI score0.99718EPSS
SaveExploits15
CVE
CVE
added 2026/09/21 12:00 a.m.9 views

CVE-2026-79317

x-ui 0.3.2 has a session invalidation flaw where the full user object is stored in a client-side signed cookie . Authentication only verifies that a user object can be retrieved from the cookie, without re-validating against the database or checking a session version. As a result, when an adminis...

5.8AI score0.00222EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/20 10:59 p.m.4 views

CVE-2024-7593

CVE-2024-7593 描述: CVE-2024-7593 是一个影响多个 Pulse Secure 产品(包括 Pulse Secure VPN)的严重漏洞。该漏洞允许具有管理界面访问权限的已认证攻击者在受影响的服务器上执行任意命令。这可能导致恶意代码的执行,从而破坏系统的完整性和可用性。 技术详情 类型:远程代码执行(RCE)。 严重性:严重(CVSS:9.8)。 受影响版本:特定版本的 Pulse Secure VPN 受到影响;请查阅 Pulse Secure 的安全公告以获取详细信息。 潜在影响 利用此漏洞的攻击者可能: 完全控制受影响的服务器。 重定向流量或操纵数据。...

9.8CVSS8.6AI score0.9999EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/20 4:41 p.m.9 views

CVE-2024-7593

CVE-2024-7593 Description: CVE-2024-7593 is a critical vulnerability affecting multiple Pulse Secure products, including Pulse Secure VPN. This vulnerability allows an authenticated attacker with access to the management interface to execute arbitrary commands on the affected server. This can lea...

9.8CVSS8.9AI score0.9999EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/20 3:15 p.m.11 views

CVE-2024-20404

Description A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected system. This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are sent ...

7.2CVSS7.3AI score0.22644EPSS
SaveExploits1
NVD
NVD
added 2026/09/20 12:17 p.m.10 views

CVE-2026-94003

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function getcsspathfromuri of the file /cgi-bin/mbox-config of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been...

10CVSS0.00606EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/20 11:30 a.m.8 views

EUVD-2026-83730

A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function getcsspathfromuri of the file /cgi-bin/mbox-config of the component Web Management Interface. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been...

10CVSS8.5AI score0.00606EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/20 4:51 a.m.11 views

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect The Pan-OS Checker is to determine the Palo Alto PAN-OS software version of a remote GlobalProtect portal or management interface. Before run the script, need to make sure version-table.txt in the same...

10CVSS8.8AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/09/19 3:39 p.m.8 views

CVE-2026-19745

简介 大家好,今年五月我在自己的路由器上发现了一些不错的漏洞,今天终于可以展示给大家了! 本仓库中的两个漏洞都是经过身份验证的拒绝服务(Denial of Service)漏洞! 我并不清楚这些漏洞具体是如何以及为何产生的技术细节,我们从未收到 Calix(此处的厂商)的回复,所以……耶!真有趣! 这也是我人生中第一个和第二个 CVE,买一送一,不客气。 CVE-2026-19745 CVE-2026-19745 是一个影响我路由器的资源关闭或释放不当(Improper Resource Shutdown or Release)导致的拒绝服务漏洞 :...

5.3CVSS5.5AI score0.00345EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/19 3:32 a.m.14 views

CVE-2023-31853

CVE-2023-31853 Reflected cross-site scripting XSS attack exists in web-based management interface of Cudy LT400. The page /cgi-bin/luci/admin/network/bandwidth has reflected XSS via the icon parameter. The methods of exploitation would involve sending a specially crafted request to the victim tha...

6.1CVSS6.4AI score0.00499EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/19 3:14 a.m.6 views

cve-2024-0012_9474-panos_authbypass_reproduction

CVE-2024-0012 / CVE-2024-9474 — PAN-OS Authentication Bypass → Privilege Escalation Chain CVE| Description| CVSS ---|---|--- CVE-2024-0012| PAN-OS Management Interface Authentication Bypass| 9.3 CVE-2024-9474| PAN-OS Privilege Escalation| 6.9 When chained, these vulnerabilities allow...

9.8CVSS8.6AI score0.99718EPSS
SaveExploits18
NVD
NVD
added 2026/09/18 8:17 p.m.3 views

CVE-2026-82967

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface...

9.8CVSS0.00426EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/18 7:33 p.m.8 views

EUVD-2026-83412

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface...

9.8CVSS5.9AI score0.00426EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 7:33 p.m.19 views

CVE-2026-82967

IBM Guardium Data Protection 12.2 is affected by an authentication bypass vulnerability that allows an unauthenticated remote attacker to bypass IP-based access controls and gain access to the Guardium management interface. The flaw effectively nullifies the IP-restriction layer that would otherw...

9.8CVSS5.9AI score0.00426EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/18 7:33 p.m.39 views

CVE-2026-82967 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to bypass IP-based access controls and access the Guardium management interface...

9.8CVSS0.00426EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.4 views

Cisco Identity Services Engine (cisco-sa-ise-rce-se7bYU57)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit...

9.9CVSS6.5AI score0.00954EPSS
SaveExploits0References5
Rows per page
Query Builder