Lucene search
+L

590 matches found

Kitploit
Kitploit
added 2026/09/16 6:12 p.m.16 views

winboxPOC

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos de contraseñas en texto plano. Requisitos Python 3+ Este script NO se ejecutará con Python 2.x o inferior. Cómo Usar El script se usa de manera simple c...

9.1CVSS8.6AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/16 5:18 p.m.9 views

SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156

SOC L1 Threat Investigation: MikroTik RouterOS Multiple Exposed Services Analyst: Jonatan Alexander Guerrero Gomez | Role Target: SOC L1 / Jr. Cybersecurity Analyst Status: Investigation Closed | Severity: High Executive Summary Proactive threat hunting exercise indentifying a public-facing...

9CVSS8.6AI score0.07431EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 5:01 p.m.13 views

Mikrotrick_POC

Validador de Confusión de Módulo SSH para RouterOS CVE-2026-67276 Un validador conductual automatizado diseñado para detectar la vulnerabilidad de omisión de autenticación de clave pública SSH en MikroTik RouterOS CVE-2026-67276. El script comprueba si una falla de validación incompleta en el...

9.2CVSS7.6AI score0.00243EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/16 3:16 p.m.9 views

routeros-CVE-2018-14847-bytheway

By the Way By the Way es un exploit que permite obtener una shell de root en dispositivos Mikrotik que ejecutan versiones de RouterOS: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 El exploit aprovecha la vulnerabilidad de path traversal CVE-2018-14847 para extraer la...

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24
NVD
NVD
added 2026/09/16 2:17 p.m.6 views

CVE-2026-56719

MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows unauthenticated attackers to read beyond the end of the request buffer by supplying a crafted uniPwdLen field value in a minimal SMB1 SessionSetupAndX frame. The out-of-bounds read...

6.5CVSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 1:12 p.m.8 views

CVE-2026-89028

MikroTik RouterOS versions before 7.24 are affected by a heap memory corruption vulnerability in the userspace SMB daemon. The root cause is an integer underflow triggered by a crafted uniPwdLen field in the SMB1 SessionSetupAndX handler, which causes an oversized copy length to be used when copy...

8.2CVSS6.2AI score
SaveExploits0References2
EUVD
EUVD
added 2026/09/16 1:12 p.m.4 views

EUVD-2026-80702

MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the userspace SMB daemon that allows remote attackers to corrupt adjacent heap memory by supplying a crafted uniPwdLen value in the SMB1 SessionSetupAndX handler. An attacker can send a malformed SMB1 request with a...

8.2CVSS6.2AI score
SaveExploits0References2
CVE
CVE
added 2026/09/16 1:07 p.m.13 views

CVE-2026-56719

MikroTik RouterOS versions prior to 7.24 are affected by an out-of-bounds read in the userspace SMB daemon . The flaw is triggered by a crafted uniPwdLen field in a minimal SMB1 SessionSetupAndX frame, and the read occurs in the SessionSetupAndX handler before any credential validation , meaning ...

6.5CVSS6AI score
SaveExploits0References2
EUVD
EUVD
added 2026/09/16 1:07 p.m.7 views

EUVD-2026-80701

MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows unauthenticated attackers to read beyond the end of the request buffer by supplying a crafted uniPwdLen field value in a minimal SMB1 SessionSetupAndX frame. The out-of-bounds read...

6.5CVSS6AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/16 1:07 p.m.6 views

CVE-2026-56719 MikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndX

MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows unauthenticated attackers to read beyond the end of the request buffer by supplying a crafted uniPwdLen field value in a minimal SMB1 SessionSetupAndX frame. The out-of-bounds read...

6.5CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/16 12:10 p.m.8 views

CVE-2020-11881

CVE-2020-11881 Denegación de servicio remota de MikroTik SMB DoS Este informe describe CVE-2020-11881, una denegación de servicio DoS remota no autenticada para el servicio SMB de MikroTik que se ejecuta en RouterOs. La vulnerabilidad permite a un atacante bloquear el servicio SMB en ejecución y...

7.5CVSS7.7AI score0.03775EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/16 11:46 a.m.14 views

Mikrotik-router-hack

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos con contraseñas en texto plano. La vulnerabilidad ya fue corregida hace tiempo, por lo que este proyecto ha terminado y ya no recibirá soporte ni...

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/16 11:27 a.m.9 views

CVE-2024-27686

Vulnerabilidad de Denegación de Servicio en MikroTik RouterOS 📌 Descripción Este documento describe una vulnerabilidad de Denegación de Servicio DoS encontrada en ciertas versiones de MikroTik RouterOS. La vulnerabilidad se debe a un manejo insuficiente de solicitudes SMB manipuladas. Un atacante...

7.5CVSS7.9AI score0.00591EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/16 8:38 a.m.8 views

CVE-2024-54772

CVE-2024-54772 MikroTik-RouterOS Username Enum This repo contains the exploit for CVE-2024-54772 which can enumerate valid usernames using a wordlist in Mikrotik routers running RouterOS stable versions v6.43 through v7.17.2. The patch is available in v6.49.18 and v7.18. For long-term release,...

5.4CVSS6AI score0.00792EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/16 6:31 a.m.9 views

CVE-2018-14847

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos de contraseñas en texto plano. Publicación del blog https://n0p.me/winbox-bug-dissection/ Requisitos Python 3+ Este script NO se ejecutará con Python 2....

9.1CVSS8.6AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/16 1:54 a.m.9 views

MikrotikExploit

Mikrotik Exploit 扫描并导出RouterOS密码 允许你循环扫描不同端口的IPv4子网。 安装 安装python3 Ubuntu/Debian: root@kitploit: $ apt-get install python3 安装python3包管理器 Ubuntu/Debian: root@kitploit: $ apt-get install python3-pip Mac root@kitploit: $ ruby -e "$curl -fsSL...

6AI score
SaveExploits0References2
NVD
NVD
added 2026/09/14 7:17 p.m.7 views

CVE-2026-89021

MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image extraction that allows attackers to write files outside the container root by supplying a crafted container image with symlinks pointing to arbitrary paths. Attackers can exploit...

6.9CVSS0.00244EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/14 7:17 p.m.6 views

CVE-2026-89020

MikroTik RouterOS before 7.23.4 long-term and 7.24.2 stable contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 507 bytes or more to the /tool fetch comman...

5.3CVSS0.00243EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/14 6:06 p.m.34 views

CVE-2026-89021 MikroTik RouterOS Path Traversal via Container OCI/tar Image Extraction

MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image extraction that allows attackers to write files outside the container root by supplying a crafted container image with symlinks pointing to arbitrary paths. Attackers can exploit...

6.9CVSS0.00244EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/14 6:06 p.m.9 views

EUVD-2026-77757

MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image extraction that allows attackers to write files outside the container root by supplying a crafted container image with symlinks pointing to arbitrary paths. Attackers can exploit...

6.9CVSS5.9AI score0.00244EPSS
SaveExploits0References2
Rows per page
Query Builder