CVE-2025-32433

Security research on Erlang/OTP SSH CVE-2025-32433 Python exploit Proof-of-Concept CVE-2025-32433 Unauthenticated Remote Code Execution in Erlang/OTP SSH. I also have a banner grabbing Nuclei template and a Nuclei RCE check. The Suricata and Zeek IDS logs are in order based on a succesful Paramik...

CVE-2025-9967

Exploit: Unauthenticated OTP Password Reset Browser Console PoC no authentication required root@kitploit: async = async function getNonceAndAjaxUrl if window.resetpassobj return nonce: resetpassobj.ajaxnonce, ajaxUrl: resetpassobj.ajaxurl ; const home = await...

CVE-2025-32433-available-for-windows

CVE-2025-32433 Información sobre la vulnerabilidad: https://nvd.nist.gov/vuln/detail/CVE-2025-32433 POC root@kitploit: kdev :: /erlang/CVE-2025-32433 ‹main› » python3 cve-2025-32433.py -h usage: cve-2025-32433.py -h -d --host HOST --port PORT Exploit for CVE-2025-32433 Erlang OTP SSH server...

CVE-2026-76578

CVE-2026-76578 — FreeIPA Anonymous Admin Takeover Product: FreeIPA 4.9.x – 4.13.3 Severity: Critical CVSS 9.8 Fixed: FreeIPA 4.13.4 / 389-ds-base 3.2.0-10.el102 RHSA-2026:64785 Legal Notice This proof-of-concept was developed and executed exclusively within an isolated, privately owned lab...

CVE-2017-12635_36

Lab7-CVE-2017-12635-12636 I. SYSTEM ANALYSIS Identifying Attack Surface Starting with what is running in the environment. I list all active containers: docker ps Victim exposes a single port:5984 ⇒ I curl directly into it to probe for more information: curl -i http://192.168.3.137:5984/ Analyzing...

CVE-2025-63700

CVE-2025-63700 Omisión de Autenticación OAuth en Clerk-js 5.88.0 Producto Afectado Proveedor : Clerk Inc. clerk.dev / clerk.com Producto : Clerk-js @clerk/clerk-js Versión Afectada : 5.88.0 Impacto : Omisión de Autenticación OAuth CWE-290 : Omisión de Autenticación por Suplantación Autor del Erro...

CVE-2025-10658

Exploit: SupportCandy Guest OTP Brute Force → Account Takeover 1 Initiate OTP login flow browser Open: root@kitploit: /support/ Select guest / OTP login Enter target email e.g. [email protected] Submit 2 Extract required values from the OTP form In DevTools → Network →...

SocialEngineering

SOCIAL ENGINEER 🎯🕵️‍♂️ A powerful social engineering toolkit that automates phishing, OTP/email bombing, fake mail and more — built with ❤️ by @karthithehacker ⚠️ For educational use only. Do not use this tool against anyone without explicit permission. 📌 Features 🎯 Phishing Attacks – Simulate fake...

CVE-2025-32433

CVE-2025-32433 Introducción En este documento se presenta una investigación de la vulnerabilidad CVE-2025-32433 , que afecta a la implementación del servidor SSH integrado en la plataforma Erlang/OTP. Esta vulnerabilidad consiste en la posibilidad de ejecución remota de código arbitrario Remote...

CVE-2026-77771 miniOrange 2FA (Free & Pro) - 2FA Bypass via Session-Scoped OTP Lockout

The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not scope its second-factor attempt limit to the account being attacked, keying it instead to an identifier the client supplies and can change at will, allowing an attacker who already knows a...

EUVD-2026-75264

The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not scope its second-factor attempt limit to the account being attacked, keying it instead to an identifier the client supplies and can change at will, allowing an attacker who already knows a...

CVE-2026-77771 miniOrange 2FA (Free & Pro) - 2FA Bypass via Session-Scoped OTP Lockout

The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not scope its second-factor attempt limit to the account being attacked, keying it instead to an identifier the client supplies and can change at will, allowing an attacker who already knows a...

CVE-2026-77771

CVE-2026-77771 affects the miniOrange 2FA WordPress plugin (Free versions before 6.3.1 and Pro versions before 19.3). The plugin's second-factor attempt limit is keyed to a client-supplied identifier rather than the target account, allowing an attacker who already knows a victim's password to byp...

CVE-2026-7671

CVE-2026-7671 - Tornet Scooter OTP Brute Force Summary Improper restriction of excessive authentication attempts CWE-307 in Tornet Scooter Mobile App 4.75 on Android. Details The /TwoFactor endpoint does not implement rate limiting or lockout. A 4-digit OTP 0000-9999 can be brute-forced remotely...

CVE-2025-56224

CVE-2025-56224 OTP verification Bypass Description an attacker can impersonate another user mobile number and use this vulnerability to verify the number without knowing the OTP code. CVSS Score: 8.1 High Attack Type Remote Authenticated Affected Versions Versions before 8.6.8 Discovered By: Yaza...

PT-2026-89292

The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not scope its second-factor attempt limit to the account being attacked, keying it instead to an identifier the client supplies and can change at will, allowing an attacker who already knows a...

CVE-2025-4094-POC

WordPress Plugin Digits OTP Bypass CVE-2025-4094 Overview This script is an exploit for the WordPress Plugin Digits versions -p -i OPTIONS Arguments -u, --url: Required Target URL e.g., https://example.com/wp-admin/admin-ajax.php -p, --phone: Required Target phone number digits only -i,...

CVE-2025-32433

CVE-2025-32433 A critical vulnerability in Erlang/OTP SSH server allows unauthenticated remote code execution RCE. The flaw exists in the SSH protocol message handling mechanism, enabling attackers to execute arbitrary commands without requiring authentication credentials. Impact Critical severit...

2FA-Bypass-using-a-Brute-Force-Attack-CVE-2025-60424

2FA Bypass Using a Brute Force Attack Overview The Nagios Fusion application version 2024R1.2 and 2024R2 is vulnerable to a Brute-Force attack on its Two-Factor Authentication 2FA mechanism. Specifically, the 2FA implementation does not adequately enforce rate-limiting or account lockout...

CVE-2026-73276

A flaw was found in the Erlang/OTP inets httpd server. This vulnerability allows a remote attacker to perform HTTP Request Smuggling due to the server silently dropping HTTP headers that contain whitespace between the header field-name and the colon. When deployed behind a reverse proxy that...