38 matches found
vulncheck_CVE-2024-50602
vulncheckCVE-2024-50602...
CVE-2026-20079
CVE-2026-20079 Cisco Secure FMC PoC Python proof of concept for the publicly documented Cisco Secure Firewall Management Center authentication-bypass-to-root-RCE chain in CVE-2026-20079. This is not a new vulnerability or independently developed exploit chain. It is a clean-room implementation of...
cve-2025-55182
CVE-2025-55182: Artefactos de Explotación Una exportación de un pequeño subconjunto de los artefactos de VulnCheck Initial Access Intelligence para la vulnerabilidad CVE-2025-55182 React2Shell. Algunas de las observaciones del equipo sobre estos artefactos se pueden leer en la publicación del blo...
CISA-KEV
CISA-KEV Executive Summary This repository provides automated tracking and analysis of both CISA's KEV and VulnCheck KEV catalogs, cross-referenced with Nuclei security templates and public proof-of-concept exploits. By integrating VulnCheck KEV, coverage expands from 1,557 to 4,720 total unique...
CVE-2022-44877
usa el módulo go-exploit cuando el modo de módulo está desactivado go get github.com/vulncheck-oss/go-exploit cuando el modo de módulo está activado go mod init example.com/myapp go get github.com/vulncheck-oss/go-exploit construcción go build -o cve-2022-44877 main.go...
nuclei-templates v10.4.9
Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...
VulnCheck KEV: CVE-2026-5430
WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution...
VulnCheck KEV: CVE-2026-66582
Unauthenticated Cross Site Scripting XSS in TranslatePress = 3.3.2 versions...
GO-2026-6125 grepai Uses a Broken or Risky Cryptographic Algorithm in github.com/yoanbernabeu/grepai
grepai Uses a Broken or Risky Cryptographic Algorithm in github.com/yoanbernabeu/grepai...
VulnCheck KEV: CVE-2026-66629
Unauthenticated Cross Site Scripting XSS in Kirki = 6.2.3 versions...
VulnCheck KEV: CVE-2026-73343
Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...
VulnCheck KEV: CVE-2026-66443
Unauthenticated Sensitive Data Exposure in REST API Log = 1.7.1 versions...
VulnCheck KEV: CVE-2026-66441
Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...
Incorrect Implementation of Authentication Algorithm
Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm via the webhook process. An attacker can trigger scheduled jobs without authentication by...
VulnCheck KEV: CVE-2026-18556
Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1...
VulnCheck KEV: CVE-2026-57624
Unauthenticated Remote Code Execution RCE in Blocksy Companion Pro = 2.1.46 versions...
VulnCheck KEV: CVE-2026-10735
ShapedPlugin Pro was compromised by adversaries to supply a backdoored version of the WordPress plugin...
VulnCheck KEV: CVE-2026-49060
Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege Escalation. This issue affects Hippoo Mobile App for WooCommerce: from n/a through 1.9.4...
RondoDox Botnet Exploits Critical 2018 Vulnerability to Hijack ASUS Routers
Cybersecurity firm VulnCheck reveals hackers are using a critical 2018 vulnerability to bypass authentication and hack over a million ASUS routers...
VulnCheck KEV: CVE-2026-42208
BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized access to the proxy and the credentials it manages...