CVE-2025-52357

CVE-2025-52357 : Security Advisory: XSS in FD602GW-DX-R410 Router Admin Console Proof of Concept and Security Advisory for Reflected XSS vulnerability in the FD602GW-DX-R410 fiber router’s admin console firmware V2.2.14. Includes details, impact, and mitigation guidance. Overview A Cross-Site...

CVE-2025-25706

CVE-2025-25706 Description Item: root@kitploit: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Vulnerability Type: Remote Code...

CVE-2025-25705

CVE-2025-25705 Description Item: root@kitploit: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Vulnerability Type: Remote Code...

Uptime-Kuma < v1.23.0 - Improper Access Control

Uptime-Kuma before v1.23.0 is vulnerable to an information disclosure issue due to missing authorization on the /api/badge/1/ping/24 endpoint. An unauthenticated attacker can access this endpoint to leak ping statistics, such as average ping and ping history, for existing monitors without needing...

CVE-2023-35078

CVE-2023-35078 This script ethically checks for the presence of cve-2023-35078 via requesting the /ping endpoint from the Ivanti EPMM API. /ping simply responds with the VSP version, rather than attemping to pull device or admin data. Usage: ./CVE-2023-35078 This script assumes https connections...

CVE-2022-23093

CVE-2022-23093 FreeBSD Stack-Based Overflow Informations The shellcode that is used by default is FreeBSD/x86-64 - execve - 28 bytes from Gitsnik change it and put your own one for starting Details of Vulnerability The ping utility, used to solicit an ICMP ECHORESPONSE from a host or gateway, is...

bro-shellshock

ShellShock Detector for Bro This script detects successful exploitation of the Bash vulnerability with CVE-2014-6271 nicknamed "ShellShock". It's more comprehensive than most of the detections around in that it's watching for behavior from the attacked host that might indicate successful compromi...

CVE-2025-26466-msf

CVE-2025-26466 Metasploit module OpenSSH versions 9.5p1 to 9.9p1 is vulnerable to a memory and CPU exhaustion DoS Attack by sending repeated SSH2MSGPING packets type 192. This occurs before authentication, and can result in server lockup due to poor queue/buffer handling. More information about...

CVE-2026-61517

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as root by injecting into the IpAddr parameter. The parameter is interpolated directly into a...

CVE-2026-61517

Netis NX10 firmware versions V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler . An authenticated administrator can inject into the IpAddr parameter, which is interpolated directly into a shell command executed via system() . Input validation...

CVE-2026-61517 Netis NX10 OS Command Injection via Ping Diagnostic Handler

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as root by injecting into the IpAddr parameter. The parameter is interpolated directly into a...

EUVD-2026-72808

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as root by injecting into the IpAddr parameter. The parameter is interpolated directly into a...

trippy

Trippy combines the functionality of traceroute and ping and is designed to assist with the analysis of networking issues. Quick Start See the guide...

CVE-2026-30784-rustdesk-poc

CVE-2026-30784-rustdesk-poc CVE-2026-30784: RustDesk hbbs Traffic Amplification PoC & PCAP Analysis Key Findings Key Finding: Enforcing key-based authentication -k does not prevent this amplification attack, because the amplification response is triggered during the unauthenticated initial...

CVE-2023-51467-EXPLOIT

CVE-2023-51467 - Apache OFBiz Authentication Bypass This flaw enables attackers to bypass authentication, leading to a Server-Side Request Forgery SSRF exploit. When sending a web request to the specific path /webtools/control/ping?USERNAME&PASSWORD=test&requirePasswordChange=Y, the server respon...

ldapsdk

UnboundID LDAP SDK for Java Download the Latest Release of the LDAP SDK Here The UnboundID LDAP SDK for Java is a fast, powerful, user-friendly, and completely free and open source Java library for communicating with LDAP directory servers. It offers better performance, better ease of use, and mo...

VulnCheck KEV: CVE-2023-37569

This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system. Successful exploitation of this vulnerability could allow the attacker ...

CVE-2025-26466

CVE-2025-26466 poc for CVE-2025-26466 made by Fikret Can Gurbuz USAGE root@kitploit: python3 poc.py -i -p These are the steps: 1. TCP connect to port 2. recieve server banner SSH-2.0-OpenSSHX.Xp1 3. send your client banner SSH-2.0-YourClient\r\n 4. send wrapsshpacketbuildkexinit 5. recieve server...

CVE-2020-17456

Description On August 21, 2020, seown SLC 130 router was exposed to have an authentication rce vulnerability. The vulnerability number is cve-2020-17456. The vulnerability is due to the ping command injection in the router's Web service diagnosis function. Combined with several groups of hard cod...

CVE-2019-11224

Modero AMX Code Execution CVE-2019-11224 This repo contains a few sources about CVE-2019–11224 https://link.medium.com/zukA0oCnV8 because I noticed that the link no longer works on the official NIST website. Modero AMX devices are essentially touch panel devices for meeting rooms, they can be...