CVE-2026-73570

CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview Field| Value ---|--- CVE| CVE-2026-73570 CVSS 3.1| 8.9 HIGH — AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L CWE|...

CVE-2025-6543_CitrixNetScaler_PoC

CVE-2025-6543CitrixNetScalerPoC Multi-host, multi-port scanner and auditor for CVE-2025-6543-affected NetScaler devices. Supports SNMP and SSH enumeration with optional CSV reporting and exploit stubs. 🔐 GitHub Repository Description CVE-2025-6543 Enhanced Checker Multi-host, multi-port scanner a...

SNMP-Brute

SNMP Brute SNMP brute force, enumeration, CISCO config downloader and password cracking script. Listens for any responses to the brute force community strings, effectively minimising wait time. Requirements metasploit snmpwalk snmpstat john the ripper Usage python snmp-brute.py -t IP Options...

snmpvlan

snmpvlan CVE ID: CVE-2014-3341. Cisco Bug ID: CSCup85616. NexusTaco is a snmp scanner that can be used both for internal testing and external testing to assess Cisco Nexus switches 5000 and 6000 family. There are many snmp scanners and brute forcers this was made for just completeness.It has the...

CVE-2026-115678

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing...

CVE-2026-115678

Arm Keil MDK-Middleware versions 8.0.0-8.3.0 may be subject to a pre-authentication out-of-bounds read vulnerability during SNMP processing . The root cause is associated with a Signed to Unsigned Conversion Error (CWE-195) . No specific details regarding practical consequences, exploitation stat...

CVE-2026-115678

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing...

EUVD-2026-109919

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing...

cisco-SNMP-enumeration

Cisc0wn - Cisco SNMP Script Cisco SNMP enumeration, brute force, config downloader and password cracking script. Tested and designed to work against Cisco IOS Switches and Routers. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniel Compton, daniel dot compton ...

OSCP

OSCP OSCP Study Guide Table of Contents Enumeration and Recon Web Enumeration Nikto scanning: nikto -h http://10.10.10.1 Directory busting with different tools: DIRB dirb http://10.10.10.1 Gobuster gobuster dir -u http://10.129.155.74:3000 -w...

cacti

Cacti Overview Cacti is an open-source network monitoring and graphing platform built on RRDtool. It provides a scalable framework to collect, store, and visualize time-series data from network devices, servers, and applications. Core capabilities include: Automated device discovery Local and...

CVE-2026-73570

CVE-2026-73570 PoC - SMTP Command Injection Tester A custom, low-level Python proof-of-concept PoC script for testing SMTP command injection vulnerabilities CVE-2026-73570. This tool sends a malformed RCPT TO address containing shell-style command substitution e.g., $command to determine if the...

Exploits

Exploits Original CVEs, exploit PoCs and security advisories by @kmkz · boffsec-services.com · @kmkzsecurity 2026 File| Target| Type| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| Advisory 3-CVE chain| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghelli...

CVE-2026-73570

🔴 CVE-2026-73570 — high-severity unauthenticated RCE ⚠️ Unauthenticated OS Command Injection → Remote Code Execution Zimbra Collaboration Suite · SNMP Notification Processing 🧠 Overview CVE-2026-73570 is a high-severity OS command injection vulnerability affecting specific configurations of Zimbra...

CiscoSpectreTakeover

CiscoSpectreTakeover A PoC chain exploit using the recent Cisco SMP exploit CVE-2017-6736 to chain into Spectre CVE-2017-5753 and CVE-2017-5715 Credits Cisco RCE Exploit submodule by artkond: https://github.com/artkond/cisco-snmp-rce JS Spectre Chrome POC by ascendr:...

CVE-2026-73570

CVE-2026-73570 — Zimbra zimbra-snmp Unauthenticated OS Command Injection PoC Proof-of-concept exploit for CVE-2026-73570 , an unauthenticated OS command injection CWE-78, CVSS 8.9 in Zimbra Collaboration Suite Disclaimer: This PoC is intended only for authorized security testing , defensive...

CVE-2026-116232

A weakness has been identified in Oray Pugongying X5 Pro 7.6.1. This affects the function snmpset of the component SNMP Handler. Executing a manipulation of the argument info.community can lead to crlf injection. It is possible to launch the attack remotely. The exploit has been made available to...

CVE-2026-116232 Oray Pugongying X5 Pro SNMP snmp_set crlf injection

A weakness has been identified in Oray Pugongying X5 Pro 7.6.1. This affects the function snmpset of the component SNMP Handler. Executing a manipulation of the argument info.community can lead to crlf injection. It is possible to launch the attack remotely. The exploit has been made available to...

CVE-2026-116232

A CRLF injection vulnerability exists in the SNMP Handler component of Oray Pugongying X5 Pro 7.6.1 . The issue specifically affects the snmp_set function, where a manipulation of the info.community argument allows for remote exploitation. Public exploit code is available for this vulnerability. ...

EUVD-2026-109655

A weakness has been identified in Oray Pugongying X5 Pro 7.6.1. This affects the function snmpset of the component SNMP Handler. Executing a manipulation of the argument info.community can lead to crlf injection. It is possible to launch the attack remotely. The exploit has been made available to...