Lucene search
+L

575 matches found

Kitploit
Kitploit
โ€ขadded 2026/09/13 5:08 a.m.โ€ข5 views

CVE-2018-14847

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crรญtica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos de contraseรฑas en texto plano. Publicaciรณn del blog https://n0p.me/winbox-bug-dissection/ Requisitos Python 3+ Este script NO se ejecutarรก con Python 2....

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
โ€ขadded 2026/09/13 3:13 a.m.โ€ข6 views

CVE-2024-27686

MikroTik RouterOS Denial of Service Vulnerability ๐Ÿ“Œ Description This document describes a Denial of Service DoS vulnerability found in certain versions of MikroTik RouterOS. The vulnerability is due to insufficient handling of crafted SMB requests. A remote attacker could exploit this issue by...

7.5CVSS7.8AI score0.00591EPSS
SaveExploits7
Kitploit
Kitploit
โ€ขadded 2026/09/12 8:26 p.m.โ€ข7 views

MikrotikExploit

Mikrotik Exploit Scan and Export RouterOS Password allow you to scan subnet of IPv4 in loop with different port. Installation install python3 Ubuntu/Debian: root@kitploit: $ apt-get install python3 install python3 Python package manager Ubuntu/Debian: root@kitploit: $ apt-get install python3-pip...

6AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/12 7:20 p.m.โ€ข11 views

Mikrotik-router-hack

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crรญtica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos con contraseรฑas en texto plano. La vulnerabilidad ya fue corregida hace tiempo, por lo que este proyecto ha terminado y ya no recibirรก soporte ni...

9.1CVSS8.2AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
โ€ขadded 2026/09/12 5:52 p.m.โ€ข6 views

routeros-CVE-2018-14847-bytheway

By the Way By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 The exploit leverages the path traversal vulnerability CVE-2018-14847 to extract the admin password and create an...

9.1CVSS8.3AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
โ€ขadded 2026/09/12 12:28 p.m.โ€ข7 views

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept de la vulnerabilidad de Mikrotik CVE-2018-14847 principalmente en Winbox, que funciona leyendo la contraseรฑa directamente desde RouterOS en el puerto predeterminado 8291. Original de: https://github.com/BigNerd95/ Requisitos Python 3+ Instalaciรณn en Lin...

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24References1
Kitploit
Kitploit
โ€ขadded 2026/09/12 12:24 p.m.โ€ข6 views

CVE-2020-11881

CVE-2020-11881 Denegaciรณn de servicio remota de MikroTik SMB DoS Este informe describe CVE-2020-11881, una denegaciรณn de servicio DoS remota no autenticada para el servicio SMB de MikroTik que se ejecuta en RouterOs. La vulnerabilidad permite a un atacante bloquear el servicio SMB en ejecuciรณn y...

7.5CVSS7.4AI score0.03775EPSS
SaveExploits2
Kitploit
Kitploit
โ€ขadded 2026/09/12 12:00 p.m.โ€ข4 views

CVE-2024-54772

CVE-2024-54772 Enumeraciรณn de nombres de usuario en MikroTik-RouterOS Este repositorio contiene el exploit para CVE-2024-54772 que permite enumerar nombres de usuario vรกlidos usando un wordlist en routers Mikrotik que ejecutan versiones stable de RouterOS v6.43 a v7.17.2. El parche estรก disponibl...

5.4CVSS6AI score0.00792EPSS
SaveExploits2References2
Kitploit
Kitploit
โ€ขadded 2026/09/12 9:31 a.m.โ€ข8 views

CVE-2018-14847-EXPLOIT

CVE-2018-14847 - MikroTik WinBox Lectura de Archivos ๐Ÿ’ฅ MikroTik RouterOS hasta la versiรณn 6.42 estรก afectado por una vulnerabilidad de recorrido de directorios en la interfaz WinBox, que permite a atacantes remotos no autenticados leer archivos arbitrarios y a atacantes remotos autenticados...

9.1CVSS8.3AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
โ€ขadded 2026/09/11 6:09 p.m.โ€ข9 views

winboxPOC

WinboxExploit ์ด๊ฒƒ์€ ์ž„์˜ ํŒŒ์ผ ์ฝ๊ธฐ๋ฅผ ํ†ตํ•ด ์ผ๋ฐ˜ ํ…์ŠคํŠธ ๋น„๋ฐ€๋ฒˆํ˜ธ๋ฅผ ํƒˆ์ทจํ•  ์ˆ˜ ์žˆ๋Š” ์ค‘์š”ํ•œ WinBox ์ทจ์•ฝ์ CVE-2018-14847์˜ ๊ฐœ๋… ์ฆ๋ช…์ž…๋‹ˆ๋‹ค. ์š”๊ตฌ ์‚ฌํ•ญ Python 3+ ์ด ์Šคํฌ๋ฆฝํŠธ๋Š” Python 2.x ์ดํ•˜์—์„œ๋Š” ์‹คํ–‰๋˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค. ์‚ฌ์šฉ ๋ฐฉ๋ฒ• ์Šคํฌ๋ฆฝํŠธ๋Š” ๋ช…๋ น์ค„์—์„œ ๊ฐ„๋‹จํ•œ ์ธ์ˆ˜๋กœ ๊ฐ„๋‹จํ•˜๊ฒŒ ์‚ฌ์šฉ๋ฉ๋‹ˆ๋‹ค. WinBox TCP/IP ์ทจ์•ฝ์ ์„ ์•…์šฉํ•˜์—ฌ ๋น„๋ฐ€๋ฒˆํ˜ธ๋ฅผ ์ฝ์Šต๋‹ˆ๋‹ค. root@kitploit: python3 WinboxExploit.py PORT ์˜ˆ์‹œ: root@kitploit: $ python3...

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
โ€ขadded 2026/09/11 1:14 p.m.โ€ข7 views

CVE-2025-6563

MikroTik ํ•ซ์ŠคํŒŸ ๋กœ๊ทธ์ธ ํŽ˜์ด์ง€ ๋ฐ˜์‚ฌํ˜• XSS ์ทจ์•ฝ์  ๊ถŒ๊ณ  ๊ฐœ์š” MikroTik RouterOS ํ•ซ์ŠคํŒŸ ๋กœ๊ทธ์ธ ํŽ˜์ด์ง€์—์„œ ๋ฐ˜์‚ฌํ˜• XSSCross-Site Scripting ์ทจ์•ฝ์ ์ด ๋ฐœ๊ฒฌ๋˜์—ˆ์Šต๋‹ˆ๋‹ค. ์ด ์ทจ์•ฝ์ ์€ dst URL ๋งค๊ฐœ๋ณ€์ˆ˜๋ฅผ ํ†ตํ•ด ํŠธ๋ฆฌ๊ฑฐ๋˜๋ฉฐ, ์ž…๋ ฅ๊ฐ’์ด ์ œ๋Œ€๋กœ ์‚ญ์ œsanitize๋˜์ง€ ์•Š์•„ ํ”ผํ•ด์ž ๋ธŒ๋ผ์šฐ์ €์—์„œ ์•…์„ฑ JavaScript ์ฝ”๋“œ๊ฐ€ ์‹คํ–‰๋  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์˜ํ–ฅ์„ ๋ฐ›๋Š” ์ œํ’ˆ MikroTik RouterOS ํ•ซ์ŠคํŒŸ ๋กœ๊ทธ์ธ ํŽ˜์ด์ง€ 7.20 ๋ฏธ๋งŒ ๋ฒ„์ „ ์ทจ์•ฝ์  ์„ธ๋ถ€ ์ •๋ณด ๊ณต๊ฒฉ์ž๊ฐ€ ๋‹ค์Œ๊ณผ ๊ฐ™์€ URL์„ ์กฐ์ž‘ํ•˜๋ฉด ์ทจ์•ฝ์ ์ด...

4.8CVSS5.7AI score0.00674EPSS
SaveExploits2
Kitploit
Kitploit
โ€ขadded 2026/09/11 11:53 a.m.โ€ข8 views

pocs_slides

Sharing my advisory, poc, slides and scripts to IoT / protocol security. You can find me at: Medium: https://medium.com/@cq674350529 Blog: https://cq674350529.github.io/ Mail: [email protected] Twitter: @cq674350529 Slides OffByOne2025: Patch Diffing, You Are My Sword! A Deep Dive into Two...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
โ€ขadded 2026/09/10 8:10 p.m.โ€ข6 views

CVE-2018-14847

๐Ÿž MikroTik CVE-2018-14847 Unauthenticated path traversal in MikroTik's Winbox protocol leaking admin credentials from /flash/rw/store/user.dat ๐Ÿ“‘ Table of Contents Overview Affected Versions Vulnerability ๐Ÿ“‚ Winbox Protocol Path Traversal Password Decryption Developer Backdoor Exploit References ๐Ÿ“‹...

9.1CVSS8.3AI score0.96087EPSS
SaveExploits24References1
Kitploit
Kitploit
โ€ขadded 2026/09/10 3:29 p.m.โ€ข5 views

cve-2026-86060

CVE-2026-86060 โ€” MikroTik RouterOS SSH Pre-Authentication Privilege Escalation to Full Administrative Control Field| Value ---|--- CVE| CVE-2026-86060 Product| MikroTik RouterOS SSH service Affected versions| RouterOS 6.x and 7.0.0 โ€“ 7.23.3 inclusive Fixed versions| RouterOS 7.23.4 and later...

9.8CVSS0.0102EPSS
SaveExploits2
Kitploit
Kitploit
โ€ขadded 2026/09/10 4:15 a.m.โ€ข7 views

MikroTik-RouterOS-6.49.18-Exploit-Kit

MikroTik-RouterOS-6.49.18-Exploit-Kit ๐Ÿ“‹ Resumen del proyecto MikroTik RouterOS 6.49.18 Exploit Kit ๐ŸŽฏ Visiรณn general Se ha creado un proyecto profesional y completo para explotar dispositivos MikroTik RouterOS 6.49.18 que incluye todos los componentes necesarios con una interfaz completamente en...

9.1CVSS8.1AI score0.01379EPSS
SaveExploits0
GithubExploit
GithubExploit
โ€ขadded 2026/09/10 3:19 a.m.โ€ข16 views

Exploit for CVE-2026-86060

CVE-2026-86060 โ€” MikroTik RouterOS SSH Pre-Authentication Priv...

9.2CVSS0.0102EPSS
SaveExploits2
CISA KEV Catalog
CISA KEV Catalog
โ€ขadded 2026/09/10 12:00 a.m.โ€ข10 views

MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacked to change the trusted RouterOS policy mask, leading to privilege escalation...

9.8CVSS0.0102EPSS
SaveIn wildExploits2
Tenable Nessus
Tenable Nessus
โ€ขadded 2026/09/10 12:00 a.m.โ€ข7 views

MikroTik RouterOS 7.20 < 7.23.4 / 7.24.x < 7.24.2 WebFig Unauthenticated File Read (CVE-2026-67281)

According to its self-reported version, the remote networking device is running a version of MikroTik RouterOS 7.20 prior to 7.23.4, or 7.24.x prior to 7.24.2. It is, therefore, affected by an information disclosure vulnerability. RouterOS WebFig contains an unauthenticated file-read vulnerabilit...

8.7CVSS0.0045EPSS
SaveExploits0References4
CISA KEV Catalog
CISA KEV Catalog
โ€ขadded 2026/09/10 12:00 a.m.โ€ข9 views

MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

MikroTik RouterOS contains a missing authenticaion for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service...

8.8CVSS0.00856EPSS
SaveIn wildExploits1
Tenable Nessus
Tenable Nessus
โ€ขadded 2026/09/10 12:00 a.m.โ€ข7 views

MikroTik RouterOS 7.9 < 7.23.4 / 7.24.x < 7.24.2 SSH Authentication Bypass (CVE-2026-67276)

According to its self-reported version, the remote networking device is running a version of MikroTik RouterOS 7.9 prior to 7.23.4, or 7.24.x prior to 7.24.2. It is, therefore, affected by an authentication bypass vulnerability. RouterOS does not compare the complete RSA public key when matching ...

9.2CVSS0.00243EPSS
SaveExploits3References4
Rows per page
Query Builder