Lucene search
+L

592 matches found

Kitploit
Kitploit
added 2026/09/17 8:11 p.m.8 views

CVE-2018-14847

🐞 MikroTik CVE-2018-14847 Unauthenticated path traversal in MikroTik's Winbox protocol leaking admin credentials from /flash/rw/store/user.dat 📑 Table of Contents Overview Affected Versions Vulnerability 📂 Winbox Protocol Path Traversal Password Decryption Developer Backdoor Exploit References 📋...

9.1CVSS8.6AI score0.96087EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/09/17 5:30 p.m.16 views

winboxPOC

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script is simple used with simple arguments in the...

9.1CVSS8.6AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/17 4:17 p.m.9 views

routeros-CVE-2018-14847-bytheway

By the Way By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 The exploit leverages the path traversal vulnerability CVE-2018-14847 to extract the admin password and create an...

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/17 3:36 p.m.9 views

CVE-2020-11881

CVE-2020-11881 MikroTik SMB Remote Denial of Service DoS This report describes CVE-2020-11881, an unauthenticated remote DoS for MikroTik's SMB service running on RouterOs. The vulnerability allows an attacker to crash the running SMB service and was responsible disclosed to securitymikrotik.com ...

7.5CVSS7.7AI score0.03775EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/17 3:29 p.m.9 views

cve-2026-86060

CVE-2026-86060 — MikroTik RouterOS SSH Pre-Authentication Privilege Escalation to Full Administrative Control Field| Value ---|--- CVE| CVE-2026-86060 Product| MikroTik RouterOS SSH service Affected versions| RouterOS 6.x and 7.0.0 – 7.23.3 inclusive Fixed versions| RouterOS 7.23.4 and later...

9.8CVSS8.4AI score0.01057EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/17 10:17 a.m.9 views

CVE-2024-27686

MikroTik RouterOS Denial of Service Vulnerability 📌 Description This document describes a Denial of Service DoS vulnerability found in certain versions of MikroTik RouterOS. The vulnerability is due to insufficient handling of crafted SMB requests. A remote attacker could exploit this issue by...

7.5CVSS7.9AI score0.00591EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/17 9:49 a.m.8 views

CVE-2024-54772

CVE-2024-54772 MikroTik-RouterOS Username Enum This repo contains the exploit for CVE-2024-54772 which can enumerate valid usernames using a wordlist in Mikrotik routers running RouterOS stable versions v6.43 through v7.17.2. The patch is available in v6.49.18 and v7.18. For long-term release,...

5.4CVSS6AI score0.00792EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/17 9:30 a.m.15 views

Mikrotik-router-hack

WinboxExploit これは、重大なWinBox脆弱性CVE-2018-14847の概念実証であり、平文パスワードの任意ファイル読み取りを可能にします。 この脆弱性はとっくに修正されているため、このプロジェクトは終了し、今後サポートや更新は行われません。代わりにフォークして自分で更新してください。 ブログ記事 https://n0p.me/winbox-bug-dissection/ 必要条件 Python 3+ このスクリプトはPython 2.x以下では動作しません。 使用方法 このスクリプトは、コマンドラインで単純な引数を使用して簡単に使えます。 WinBox TCP/IP...

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/17 8:57 a.m.9 views

CVE-2018-14847

WinboxExploit これは、クリティカルなWinBoxの脆弱性(CVE-2018-14847)の概念実証であり、プレーンテキストのパスワードの任意のファイル読み取りを可能にします。 ブログ記事 https://n0p.me/winbox-bug-dissection/ 必要条件 Python 3+ このスクリプトはPython 2.x以下では動作しません。 使用方法 このスクリプトは、コマンドラインでシンプルな引数を使って簡単に使用できます。 WinBox TCP/IP 脆弱性を悪用してパスワードを読み取ります。 root@kitploit: python3...

9.1CVSS8.6AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/17 4:15 a.m.11 views

MikroTik-RouterOS-6.49.18-Exploit-Kit

MikroTik-RouterOS-6.49.18-Exploit-Kit 📋 Project Summary of MikroTik RouterOS 6.49.18 Exploit Kit 🎯 Overview A professional and comprehensive project was created to exploit MikroTik RouterOS 6.49.18 devices, including all required components with a complete Arabic interface and detailed...

9.1CVSS8.2AI score0.01379EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 2:23 a.m.9 views

MikrotikExploit

Exploit de Mikrotik Escanea y exporta contraseñas de RouterOS Te permite escanear subredes IPv4 en bucle con diferentes puertos. Instalación instalar python3 Ubuntu/Debian: root@kitploit: $ apt-get install python3 instalar el administrador de paquetes de Python para python3 Ubuntu/Debian:...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 5:18 p.m.9 views

SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156

SOC L1 Threat Investigation: MikroTik RouterOS Multiple Exposed Services Analyst: Jonatan Alexander Guerrero Gomez | Role Target: SOC L1 / Jr. Cybersecurity Analyst Status: Investigation Closed | Severity: High Executive Summary Proactive threat hunting exercise indentifying a public-facing...

9CVSS8.6AI score0.07431EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 5:01 p.m.15 views

Mikrotrick_POC

RouterOS SSH Modulus-Confusion Validator CVE-2026-67276 An automated behavioral validator designed to detect the SSH public key authentication bypass vulnerability in MikroTik RouterOS CVE-2026-67276. The script tests whether an SSH service incomplete-validation flaw allows authentication by...

9.2CVSS7.6AI score0.00243EPSS
SaveExploits3
NVD
NVD
added 2026/09/16 2:17 p.m.4 views

CVE-2026-89028

MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the userspace SMB daemon that allows remote attackers to corrupt adjacent heap memory by supplying a crafted uniPwdLen value in the SMB1 SessionSetupAndX handler. An attacker can send a malformed SMB1 request with a...

8.2CVSS0.00557EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/16 2:17 p.m.8 views

CVE-2026-56719

MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows unauthenticated attackers to read beyond the end of the request buffer by supplying a crafted uniPwdLen field value in a minimal SMB1 SessionSetupAndX frame. The out-of-bounds read...

6.5CVSS0.00376EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 1:12 p.m.12 views

CVE-2026-89028

MikroTik RouterOS versions before 7.24 are affected by a heap memory corruption vulnerability in the userspace SMB daemon. The root cause is an integer underflow triggered by a crafted uniPwdLen field in the SMB1 SessionSetupAndX handler, which causes an oversized copy length to be used when copy...

8.2CVSS6.2AI score0.00557EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/16 1:12 p.m.5 views

EUVD-2026-80702

MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the userspace SMB daemon that allows remote attackers to corrupt adjacent heap memory by supplying a crafted uniPwdLen value in the SMB1 SessionSetupAndX handler. An attacker can send a malformed SMB1 request with a...

8.2CVSS6.2AI score0.00557EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/16 1:12 p.m.31 views

CVE-2026-89028 MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndX

MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the userspace SMB daemon that allows remote attackers to corrupt adjacent heap memory by supplying a crafted uniPwdLen value in the SMB1 SessionSetupAndX handler. An attacker can send a malformed SMB1 request with a...

8.2CVSS0.00557EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 1:07 p.m.16 views

CVE-2026-56719

MikroTik RouterOS versions prior to 7.24 are affected by an out-of-bounds read in the userspace SMB daemon . The flaw is triggered by a crafted uniPwdLen field in a minimal SMB1 SessionSetupAndX frame, and the read occurs in the SessionSetupAndX handler before any credential validation , meaning ...

6.5CVSS6AI score0.00376EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/16 1:07 p.m.29 views

CVE-2026-56719 MikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndX

MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows unauthenticated attackers to read beyond the end of the request buffer by supplying a crafted uniPwdLen field value in a minimal SMB1 SessionSetupAndX frame. The out-of-bounds read...

6.5CVSS0.00376EPSS
SaveExploits0References2
Rows per page
Query Builder