30 matches found
CISA-KEV
CISA-KEV Executive Summary This repository provides automated tracking and analysis of both CISA's KEV and VulnCheck KEV catalogs, cross-referenced with Nuclei security templates and public proof-of-concept exploits. By integrating VulnCheck KEV, coverage expands from 1,557 to 4,720 total unique...
CVE-2026-20079
CVE-2026-20079 Cisco Secure FMC PoC Python proof of concept for the publicly documented Cisco Secure Firewall Management Center authentication-bypass-to-root-RCE chain in CVE-2026-20079. This is not a new vulnerability or independently developed exploit chain. It is a clean-room implementation of...
cve-2025-55182
CVE-2025-55182: Exploitation Artifacts An export of a small subset of the VulnCheck Initial Access Intelligence artifacts for the CVE-2025-55182 React2Shell vulnerability. Some of the teams observations on these artifacts can be read in the blog post. Index ./inmem-webshell - An in-memory webshel...
CVE-2022-44877
use go-exploit module when module mode off root@kitploit: go get github.com/vulncheck-oss/go-exploit when moduile mode on root@kitploit: go mod init example.com/myapp go get github.com/vulncheck-oss/go-exploit build root@kitploit: go build -o cve-2022-44877 main.go...
vulncheck_CVE-2024-50602
vulncheckCVE-2024-50602...
VulnCheck KEV: CVE-2026-66441
Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...
VulnCheck KEV: CVE-2026-66443
Unauthenticated Sensitive Data Exposure in REST API Log = 1.7.1 versions...
VulnCheck KEV: CVE-2026-18556
Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1...
VulnCheck KEV: CVE-2026-57624
Unauthenticated Remote Code Execution RCE in Blocksy Companion Pro = 2.1.46 versions...
VulnCheck KEV: CVE-2026-10735
Multiple Shapedsmart-post-show-pro WordPress plugin before 4.0.2, Real Testimonials Pro WordPress plugin before 3.2.5, Product Slider for WooCommerce Pro WordPress plugin before 3.5.3 Pro smart-post-show-pro WordPress plugin before 4.0.2, Real Testimonials Pro WordPress plugin before 3.2.5, Produ...
VulnCheck KEV: CVE-2026-49060
Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege Escalation. This issue affects Hippoo Mobile App for WooCommerce: from n/a through 1.9.4...
RondoDox Botnet Exploits Critical 2018 Vulnerability to Hijack ASUS Routers
Cybersecurity firm VulnCheck reveals hackers are using a critical 2018 vulnerability to bypass authentication and hack over a million ASUS routers...
VulnCheck KEV: CVE-2026-42208
LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An...
VulnCheck KEV: CVE-2026-4047
A vulnerability is present in Qinglong due to improperly matching case sensitive paths used by middleware authenticaion but the underlying Express.js framework treats paths case insensitively...
VulnCheck KEV: CVE-2023-36899
ASP.NET Elevation of Privilege Vulnerability...
Ongoing Attacks Exploiting Critical RCE Vulnerability in Legacy D-Link DSL Routers
A newly discovered critical security flaw in legacy D-Link DSL gateway routers has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-0625 CVSS score: 9.3, concerns a case of command injection in the "dnscfg.cgi" endpoint that arises as a result of improper...
CVE-2024-13991 Huijietong Cloud Video Platform fileDownload Arbitrary File Read
Huijietong Cloud Video Platform contains a path traversal vulnerability that allows an unauthenticated attacker can supply arbitrary file paths to the fullPath parameter of the /fileDownload?action=downloadBackupFile endpoint and retrieve files from the server filesystem. VulnCheck has observed...
15,000 Jenkins Servers at Risk from RCE Vulnerability (CVE-2025-53652)
A new report by VulnCheck exposes a critical command injection flaw CVE-2025-53652 in the Jenkins Git Parameter plugin.…...
