29 matches found
watchTowr-vs-Fortiweb-AuthBypass
watchTowr-vs-Fortiweb-AuthBypass FortiWeb प्रमाणीकरण बायपास के लिए डिटेक्शन आर्टिफैक्ट जनरेटर तकनीकी विवरण के लिए हमारा ब्लॉग पोस्ट देखें डिटेक्शन इन एक्शन root@kitploit: python watchTowr-vs-Fortiweb-AuthBypass.py 192.168.1.99 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | ...
watchTowr-vs-Check-Point-CVE-2026-50751
CVE-2026-50751 مولّد أدلة اكتشاف Detection Artefact Generator لتجاوز التحقق من الشهادة في بروتوكول IKEv1 لخدمة Check Point للوصول عن بُعد Remote Access VPN. https://github.com/user-attachments/assets/1280c545-364e-42d1-94ac-5b2cd850d14e انظر مقالة مدونتنا للتفاصيل التقنية. الاكتشاف في العمل...
watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882
watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Oracle E-Business Suite CVE-2025-61882 के लिए डिटेक्शन आर्टिफैक्ट जनरेटर तकनीकी विवरण के लिए हमारा ब्लॉग पोस्ट देखें डिटेक्शन का प्रदर्शन root@kitploit: python3 watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882.py --command 'bash -i &...
CVE-2024-27130
CVE-2024-27130 @watchTowr가 취약한 QNAP 장치에서 스택 오버플로 취약점을 이용하여 RCE를 얻기 위해 개발한 Proof of Concept입니다. 보안 연구를 위해 watchTowr Labs 팀을 팔로우하세요 https://labs.watchtowr.com/ https://twitter.com/watchtowrcyber...
CVE-2024-55591
FortiGate CVE-2024-55591 1Scan neueste Version https://github.com/0x7556/1Scan Betroffene Versionen root@kitploit: FortiOS 7.0.0 bis 7.0.16 FortiProxy 7.0.0 bis 7.0.19 FortiProxy 7.2.0 bis 7.2.12 POC Einzelprüfung root@kitploit: ./poc 10.10.1.1 ./poc http://10.10.1.1 1Scan Batch root@kitploit:...
Mitel-MiCollab-Auth-Bypass_CVE-2024-41713
CVE-2024-41713 Mitel MiCollab Authentifizierungsumgehung zu beliebigem Dateilesen Siehe unseren Blogbeitrag für technische Details root@kitploit: / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / / watchtowr-vs-MiCollab2024-12-05.py...
CVE-2024-24919
CVE-2024-24919 CVE-2024-24919 की खोज के लिए Nuclei Template. CheckPoint SSLVPN में एक पथ ट्रावर्सल कमज़ोरी। वैसे. बढ़िया लेख, यही प्रेरणा थी इस सरल टेम्पलेट को रात 2:00 बजे लिखने की। संसाधन: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/...
watchTowr-vs-FortiWeb-CVE-2025-25257
watchTowr-vs-FortiWeb-CVE-2025-25257 Erkennungs-Artefakt-Generator für FortiWeb CVE-2025-25257 Weitere technische Details finden Sie in unserem Blogbeitrag https://github.com/user-attachments/assets/e59f2b3b-2b9b-469f-b4a8-2b7df2ede194 Erkennung in Aktion root@kitploit: python...
Citrix-Virtual-Apps-XEN-Exploit
CVE-2024-xxxx Citrix Virtual Apps and Desktops XEN Esecuzione di codice remoto non autenticata Consulta il nostro post sul blog per i dettagli tecnici https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 PoC in azione root@kitploit: python exploit-citrix-xen.py --target...
Ivanti Connect Secure - XXE
Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. id: CVE-2024-22024 info: name: Ivanti Connect Secure - XXE author: watchTowr severity: high description: | Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. impact: | Successful exploitation of this...
watchtowr-vs-telnetd-CVE-2026-32746
watchtowr-vs-telnetd-CVE-2026-32746 telnetd CVE-2026-32746 के लिए डिटेक्शन आर्टिफैक्ट जनरेटर। तकनीकी विवरण के लिए हमारा ब्लॉग पोस्ट देखें। कार्रवाई में डिटेक्शन root@kitploit: python watchtowr-vs-telnetd-CVE-2026-32746.py --rhost 127.0.0.1 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | |...
SmarterMail Auth Bypass Exploited in the Wild Two Days After Patch Release
A new security flaw in SmarterTools SmarterMail email software has come under active exploitation in the wild, two days after the release of a patch. The vulnerability, which currently does not have a CVE identifier, is tracked by watchTowr Labs as WT-2026-0001. It was patched by SmarterTools on...
PT-2025-35314
Name of the Vulnerable Software and Affected Versions: Sitecore Experience Manager XM versions 9.0 through 9.3, 10.0 through 10.4 Sitecore Experience Platform XP versions 9.0 through 9.3, 10.0 through 10.4 Description: This issue involves the use of externally-controlled input to select classes o...
Exploit for Unrestricted Upload of File with Dangerous Type in Cleo Harmony
CVE-2024-50623 Cleo Unrestricted file upload and download PoC...
Exploit for Path Traversal in Mitel Micollab
CVE-2024-41713 Mitel MiCollab Authentication Bypass to Arbitr...
About Remote Code Execution – FortiManager “FortiJump” (CVE-2024-47575) vulnerability
About Remote Code Execution - FortiManager "FortiJump" CVE-2024-47575 vulnerability. FortiManager is a centralized solution for configuring, enforcing policies, updating, and monitoring Fortinet network devices. The vulnerability was released on October 23. A missing authentication for critical...
Exploit for Deserialization of Untrusted Data in Veeam Veeam_Backup_\&_Replication
CVE-2024-40711 Exploit for Veeam backup and Replication Pre-A...
Exploit for OS Command Injection in Php
CVE-2024-4577 A Proof of Concept developed by @watchTowrhtt...