Lucene search
+L

580 matches found

Kitploit
Kitploit
added 2026/09/16 8:38 a.m.6 views

CVE-2024-54772

CVE-2024-54772 MikroTik-RouterOS Username Enum This repo contains the exploit for CVE-2024-54772 which can enumerate valid usernames using a wordlist in Mikrotik routers running RouterOS stable versions v6.43 through v7.17.2. The patch is available in v6.49.18 and v7.18. For long-term release,...

5.4CVSS6AI score0.00792EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/16 6:31 a.m.8 views

CVE-2018-14847

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Blogpost https://n0p.me/winbox-bug-dissection/ Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script...

9.1CVSS8.6AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/16 1:54 a.m.9 views

MikrotikExploit

Mikrotik Exploit Scan and Export RouterOS Password allow you to scan subnet of IPv4 in loop with different port. Installation install python3 Ubuntu/Debian: root@kitploit: $ apt-get install python3 install python3 Python package manager Ubuntu/Debian: root@kitploit: $ apt-get install python3-pip...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 5:50 p.m.14 views

winboxPOC

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script is simple used with simple arguments in the...

9.1CVSS8.6AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/15 5:04 p.m.9 views

routeros-CVE-2018-14847-bytheway

By the Way By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 The exploit leverages the path traversal vulnerability CVE-2018-14847 to extract the admin password and create an...

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/15 12:08 p.m.7 views

CVE-2020-11881

CVE-2020-11881 MikroTik SMB Remote Denial of Service DoS This report describes CVE-2020-11881, an unauthenticated remote DoS for MikroTik's SMB service running on RouterOs. The vulnerability allows an attacker to crash the running SMB service and was responsible disclosed to securitymikrotik.com ...

7.5CVSS7.7AI score0.03775EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/15 11:58 a.m.14 views

Mikrotik-router-hack

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and updat...

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/15 9:14 a.m.8 views

CVE-2024-27686

MikroTik RouterOS Denial of Service Vulnerability 📌 Description This document describes a Denial of Service DoS vulnerability found in certain versions of MikroTik RouterOS. The vulnerability is due to insufficient handling of crafted SMB requests. A remote attacker could exploit this issue by...

7.5CVSS7.9AI score0.00591EPSS
SaveExploits7
Cvelist
Cvelist
added 2026/09/14 6:06 p.m.31 views

CVE-2026-89021 MikroTik RouterOS Path Traversal via Container OCI/tar Image Extraction

MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image extraction that allows attackers to write files outside the container root by supplying a crafted container image with symlinks pointing to arbitrary paths. Attackers can exploit...

6.9CVSS0.00244EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/14 6:06 p.m.9 views

EUVD-2026-77757

MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image extraction that allows attackers to write files outside the container root by supplying a crafted container image with symlinks pointing to arbitrary paths. Attackers can exploit...

6.9CVSS5.9AI score0.00244EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/14 6:06 p.m.12 views

CVE-2026-89021

MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package's OCI/tar image extraction . The root cause is unsanitized tar member path extraction during container import via /container/add, allowing an attacker to supply a crafted image with symlinks pointing ...

6.9CVSS5.9AI score0.00244EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/14 6:02 p.m.7 views

EUVD-2026-77756

MikroTik RouterOS before 7.23.4 long-term and 7.24.2 stable contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 507 bytes or more to the /tool fetch comman...

5.3CVSS6.1AI score0.00243EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/14 6:02 p.m.8 views

CVE-2026-89020

MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) is affected by a stack-based buffer overflow in the mtget binary's TFTP RRQ builder function. An authenticated user with read-only group membership can issue a /tool fetch command with a crafted tftp:// URL path of 507 bytes or more ...

5.3CVSS6.1AI score0.00243EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 4:45 p.m.11 views

CVE-2018-5951

CVE-2018-5951: MikroTik RouterOS Denial of Service Vulnerability Vulnerability Summary A vulnerability in MikroTik RouterOS allows an unauthenticated remote attacker to force a router to reboot. This is done by sending a packet of the size of 1 byte to RouterOS's IPv6 address using IP proto 97. A...

7.5CVSS7.4AI score0.04308EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 1:16 p.m.5 views

CVE-2026-67276

CVE-2026-67276 Donate...

9.2CVSS7.8AI score0.00243EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/14 10:49 a.m.13 views

VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS

Pentest Tools — /network Repository of scripts for auditing and penetration testing of networks. Use only on devices with formal authorization. CVE-2018-14847 — MikroTik Winbox Credential Extractor Description Exploits the unauthenticated file read vulnerability in the MikroTik RouterOS Winbox...

9.1CVSS8.7AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/14 7:25 a.m.10 views

exploit-mikrotik-2026

CVE-2026-67276 - MikroTrik SSH Authentication Bypass Exploit MikroTik RouterOS SSH Public Key Authentication Bypass - No Private Key Required A proof-of-concept exploit for CVE-2026-67276 MikroTrick, a critical authentication bypass vulnerability in MikroTik RouterOS SSH implementation that allow...

9.2CVSS7.8AI score0.00243EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/13 10:59 p.m.10 views

mikrotrick-poc

MikroTrick lab PoC — CVE-2026-67276 RouterOS SSH public-key auth bypass Lab use only. Run exclusively against RouterOS instances you own. Attacking devices you do not own is a crime CFAA, Polish art. 267, equivalents. Background CERT PL 2026-09-05 disclosed six RouterOS vulnerabilities, actively...

9.2CVSS7.7AI score0.00243EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 10:06 p.m.3 views

Jozini-network-scanner

Jozini Network Scanner Built on 2026-09-05 at KwaQondile Library, Jozini KZN using Termux on Android What I Built scanner.py - Port scanner with banner grabbing 20 ports + auto report saving cvecheck.py - Maps RouterOS version to known CVEs final.py - HTTP confirmation of target report.txt -...

10CVSS8.3AI score0.04362EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 4:57 p.m.10 views

FOISted

root@kitploit: | / \ |/ | | | | | | | | | || | | | | | | | || | | || | \ | / / | | | | || || | | || / | | || /|/ \|,| FOISted: a MikroTik remote jailbreak Description FOISted is an exploit for two post-authentication vulnerabilities in MikroTik's RouterOS. It can be used to remotely jailbreak...

6.7AI score
SaveExploits0References1
Rows per page
Query Builder