Lucene search
+L

575 matches found

Kitploit
Kitploit
added 2026/09/13 5:46 p.m.9 views

winboxPOC

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos de contraseñas en texto plano. Requisitos Python 3+ Este script NO se ejecutará con Python 2.x o inferior. Cómo Usar El script se usa de manera simple c...

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/13 5:22 p.m.11 views

Mikrotik-router-hack

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos con contraseñas en texto plano. La vulnerabilidad ya fue corregida hace tiempo, por lo que este proyecto ha terminado y ya no recibirá soporte ni...

9.1CVSS8.2AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/13 4:57 p.m.8 views

FOISted

root@kitploit: | / \ |/ | | | | | | | | | || | | | | | | | || | | || | \ | / / | | | | || || | | || / | | || /|/ \|,| FOISted: a MikroTik remote jailbreak Description FOISted is an exploit for two post-authentication vulnerabilities in MikroTik's RouterOS. It can be used to remotely jailbreak...

6.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 4:20 p.m.6 views

routeros-CVE-2018-14847-bytheway

By the Way By the Way es un exploit que permite obtener una shell de root en dispositivos Mikrotik que ejecutan versiones de RouterOS: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 El exploit aprovecha la vulnerabilidad de path traversal CVE-2018-14847 para extraer la...

9.1CVSS8.3AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/13 11:09 a.m.4 views

CVE-2024-54772

CVE-2024-54772 Enumeración de nombres de usuario en MikroTik-RouterOS Este repositorio contiene el exploit para CVE-2024-54772 que permite enumerar nombres de usuario válidos usando un wordlist en routers Mikrotik que ejecutan versiones stable de RouterOS v6.43 a v7.17.2. El parche está disponibl...

5.4CVSS6AI score0.00792EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/13 10:06 a.m.6 views

CVE-2020-11881

CVE-2020-11881 MikroTik SMB Remote Denial of Service DoS This report describes CVE-2020-11881, an unauthenticated remote DoS for MikroTik's SMB service running on RouterOs. The vulnerability allows an attacker to crash the running SMB service and was responsible disclosed to securitymikrotik.com ...

7.5CVSS7.4AI score0.03775EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 5:08 a.m.5 views

CVE-2018-14847

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos de contraseñas en texto plano. Publicación del blog https://n0p.me/winbox-bug-dissection/ Requisitos Python 3+ Este script NO se ejecutará con Python 2....

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/13 3:13 a.m.6 views

CVE-2024-27686

Vulnerabilidad de Denegación de Servicio en MikroTik RouterOS 📌 Descripción Este documento describe una vulnerabilidad de Denegación de Servicio DoS encontrada en ciertas versiones de MikroTik RouterOS. La vulnerabilidad se debe a un manejo insuficiente de solicitudes SMB manipuladas. Un atacante...

7.5CVSS7.8AI score0.00591EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/12 8:26 p.m.7 views

MikrotikExploit

Mikrotik Exploit Scan and Export RouterOS Password allow you to scan subnet of IPv4 in loop with different port. Installation install python3 Ubuntu/Debian: root@kitploit: $ apt-get install python3 install python3 Python package manager Ubuntu/Debian: root@kitploit: $ apt-get install python3-pip...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 12:28 p.m.7 views

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept de la vulnerabilidad de Mikrotik CVE-2018-14847 principalmente en Winbox, que funciona leyendo la contraseña directamente desde RouterOS en el puerto predeterminado 8291. Original de: https://github.com/BigNerd95/ Requisitos Python 3+ Instalación en Lin...

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/09/12 9:31 a.m.8 views

CVE-2018-14847-EXPLOIT

CVE-2018-14847 - MikroTik WinBox Lectura de Archivos 💥 MikroTik RouterOS hasta la versión 6.42 está afectado por una vulnerabilidad de recorrido de directorios en la interfaz WinBox, que permite a atacantes remotos no autenticados leer archivos arbitrarios y a atacantes remotos autenticados...

9.1CVSS8.3AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/11 1:14 p.m.8 views

CVE-2025-6563

MikroTik Hotspot Login Page Reflected XSS Vulnerability Advisory Overview A reflected Cross-Site Scripting XSS vulnerability was discovered in the MikroTik RouterOS Hotspot login page. The vulnerability is triggered via the dst URL parameter, which improperly sanitizes input, allowing malicious...

4.8CVSS5.7AI score0.00674EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/11 11:53 a.m.8 views

pocs_slides

Sharing my advisory, poc, slides and scripts to IoT / protocol security. You can find me at: Medium: https://medium.com/@cq674350529 Blog: https://cq674350529.github.io/ Mail: [email protected] Twitter: @cq674350529 Slides OffByOne2025: Patch Diffing, You Are My Sword! A Deep Dive into Two...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/10 8:10 p.m.6 views

CVE-2018-14847

🐞 MikroTik CVE-2018-14847 Recorrido de ruta no autenticado en el protocolo Winbox de MikroTik que filtra credenciales de administrador de /flash/rw/store/user.dat 📑 Tabla de Contenidos Resumen Versiones Afectadas Vulnerabilidad 📂 Protocolo Winbox Recorrido de Ruta Descifrado de Contraseñas Puerta...

9.1CVSS8.3AI score0.96087EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/09/10 3:29 p.m.8 views

cve-2026-86060

CVE-2026-86060 — MikroTik RouterOS SSH Pre-Authentication Privilege Escalation to Full Administrative Control Field| Value ---|--- CVE| CVE-2026-86060 Product| MikroTik RouterOS SSH service Affected versions| RouterOS 6.x and 7.0.0 – 7.23.3 inclusive Fixed versions| RouterOS 7.23.4 and later...

9.8CVSS0.0102EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 4:15 a.m.7 views

MikroTik-RouterOS-6.49.18-Exploit-Kit

MikroTik-RouterOS-6.49.18-Exploit-Kit 📋 Project Summary of MikroTik RouterOS 6.49.18 Exploit Kit 🎯 Overview A professional and comprehensive project was created to exploit MikroTik RouterOS 6.49.18 devices, including all required components with a complete Arabic interface and detailed...

9.1CVSS8.1AI score0.01379EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2026/09/10 3:19 a.m.16 views

Exploit for CVE-2026-86060

CVE-2026-86060 — MikroTik RouterOS SSH Pre-Authentication Priv...

9.2CVSS0.0102EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2026/09/10 12:00 a.m.8 views

MikroTik RouterOS 7.20 < 7.23.4 / 7.24.x < 7.24.2 WebFig Unauthenticated File Read (CVE-2026-67281)

According to its self-reported version, the remote networking device is running a version of MikroTik RouterOS 7.20 prior to 7.23.4, or 7.24.x prior to 7.24.2. It is, therefore, affected by an information disclosure vulnerability. RouterOS WebFig contains an unauthenticated file-read vulnerabilit...

8.7CVSS0.0045EPSS
SaveExploits0References4
CISA KEV Catalog
CISA KEV Catalog
added 2026/09/10 12:00 a.m.10 views

MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacked to change the trusted RouterOS policy mask, leading to privilege escalation...

9.8CVSS0.0102EPSS
SaveIn wildExploits2
Tenable Nessus
Tenable Nessus
added 2026/09/10 12:00 a.m.9 views

MikroTik RouterOS 6.x < 6.49.21 / 7.0.x < 7.23.4 / 7.24.x < 7.24.2 Multiple Vulnerabilities

According to its self-reported version, the remote networking device is running a version of MikroTik RouterOS 6.x prior to 6.49.21, or 7.0.x prior to 7.23.4, or 7.24.x prior to 7.24.2. It is, therefore, affected by multiple vulnerabilities : - RouterOS accepts a 'related' btest connection before...

9.8CVSS0.0102EPSS
SaveExploits3References6
Rows per page
Query Builder