CVE-2020-13937

Apache Kylin API Unbefugter Zugriff Schwachstelle（CVE-2020-13937 Fofa:title="Kylin" Verwendung Hilfe: python3 cve-2020-13937.py --help Einzeltest: python3 cve-2020-13937.py -u http://127.0.0.1 Massentest: python3 cve-2020-13937.py -f target.txt...

CVE-2018-15473

CVE-2018-15473 Versione aggiornata di questo repo https://github.com/Sait-Nuri/CVE-2018-15473/tree/main Reso funzionante con paramiko versione 3.4.0 Come eseguire root@kitploit: Clone this repo git clone https://github.com/yZ1337/CVE-2018-15473.git Install libraries pip3 install -r requirements.t...

fortipwn

fortipwn Script di enumerazione Forti CVE-2022-40684 scritto in Rust. Carica una chiave pubblica SSH in authorizedkeys, consentendo a un attaccante di connettersi via SSH a un server che esegue FortiOS come admin. Utilizzo root@kitploit: $ ./fortipwn Compilazione root@kitploit: $ git clone...

cve-2022-23131

cve-2022-23131 FOFA app="ZABBIX-监控系统" && body="saml" Esecuzione python cve-2022-23131.py https://www.example.com Admin Usa l'exploit per generare una signedsession, sostituisci il cookie, poi clicca su Sign in with Single Sign-On SAML Il default è Admin Rispetta i limiti: le conseguenze sono a tu...

CVE-2024-51030

CVE-2024-51030 Descrizione Una vulnerabilità di SQL injection in manageclient.php e viewcab.php di Sourcecodester Cab Management System 1.0 consente a un attaccante remoto di eseguire comandi SQL arbitrari tramite il parametro id, portando ad accessi non autorizzati e potenziale compromissione di...

grafana-exploit-CVE-2021-43798

grafana-exploit-CVE-2021-43798 परिचय यह एक्सप्लॉइट किस लिए उपयोग किया जाता है? Grafana अनधिकृत आर्बिट्रेरी फ़ाइल रीड भेद्यता CVE-2021-43798 के लिए उपयोग किया जाता है डायरेक्ट्री ट्रैवर्सल का उपयोग करके स्थानीय फ़ाइलों तक पहुंच की अनुमति देता है यह एक्सप्लॉइट किन Grafana संस्करणों के लिए काम करेगा...

EUVD-2026-67293

Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote attacker to enable administrative services that should be restricted. Successful exploitation may permit unauthorized access to the device...

CVE-2024-1709-ConnectWise-ScreenConnect-Authentication-Bypass

ConnectWise ScreenConnect: Authentifizierungsumgehung Einführung Dieses Projekt zielt darauf ab, eine Authentifizierungsumgehung-Schwachstelle in ConnectWise ScreenConnect auszunutzen. Es stellt ein Skript zur Verfügung, um den Exploit zu demonstrieren. Bitte stellen Sie sicher, dass Sie über die...

CVE-2026-76179

An improper protection of authentication tokens vulnerability exists in certain Ebyte gateway products. Authentication tokens used by the web management interface are insufficiently protected during client-side session handling, which may allow an attacker with access to exposed session informati...

CVE-2026-75813

Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to access or modify sensitive device settings. This could result in full compromise of device functionality...

PT-2026-83121

Name of the Vulnerable Software and Affected Versions CP Plus CP-XR-DE21-S affected versions not specified Description The CP Plus CP-XR-DE21-S Router contains hardcoded HTTP Digest authentication credentials within its firmware. These credentials are identical across all devices running the...

PT-2026-83283

Name of the Vulnerable Software and Affected Versions Hermes Agent version 0.16.0 Description An improper path restriction exists that allows attackers who can influence ingested message content to overwrite the credential store. This occurs by bypassing sensitive-path guards that failed to exclu...

The vulnerability of the nltk.corpus.reader component in the NLTK library for symbolic and statistical processing of natural language allows a hacker to gain unauthorized access to protected information.

The vulnerability of the nltk.corpus.reader component in the NLTK library for symbolic and statistical processing of natural language is related to improper external management of file names or file paths. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protecte...

pwnfb50

pwnfb50 Trasferisci la proprietà di qualsiasi smart lock FB50 a te stesso CVE-2019-13143 Video PoC Utilizzo root@kitploit: $ python3 pwnfb50.py id mac Dove id è il tuo ID utente e mac è l'indirizzo MAC della tua serratura...

CVE-2026-75813

The Ebyte NE2-D11 device is affected by a missing authorization flaw in certain configuration endpoints. The root cause is a lack of proper server-side authorization checks , which allows unauthenticated, remote attackers to access or modify sensitive device settings. The impact is rated HIGH (CV...

CVE-2026-75813 Ebyte NE2-D11 Missing Authorization

Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to access or modify sensitive device settings. This could result in full compromise of device functionality...

CVE-2026-73809

A cleartext transmission vulnerability in Ebyte gateway products (including the NE2-D11) affects the web management interface , which does not adequately enforce transport-layer encryption . An attacker with network access could intercept authentication or session data, leading to disclosure of s...

CVE-2026-73809 Ebyte NA111-M Cleartext Transmission of Sensitive Information

A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication o...

scan_CVE-2020-29583

Scanner für Zyxel-Produkte, die aufgrund eines undokumentierten Benutzerkontos verwundbar sind CVE-2020-29583 Details zur Schwachstelle: https://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html Ich bin mir aber nicht sicher, ob ein Login mit zyfwp über die Web-Oberfläche...

CVE-2021-34824

CVE-2021-34824 पुनरुत्पादन एक पुराने Istio बग का पुनरुत्पादन स्क्रिप्ट्स और मेनिफेस्ट्स का यह सेट एक पुराने Istio सुरक्षा मुद्दे का अन्वेषण करने में सहायता करेगा, जिसने दुर्भावनापूर्ण Istio उपयोगकर्ताओं को उन Kubernetes secrets तक पहुँचने की अनुमति दी, जिन तक उनकी पहुँच नहीं होनी चाहिए थी। यह...