32 matches found
watchTowr-vs-Fortiweb-AuthBypass
watchTowr-vs-Fortiweb-AuthBypass Detection Artifact Generator for FortiWeb Authentication Bypass See our blog post for technical details Detection in Action root@kitploit: python watchTowr-vs-Fortiweb-AuthBypass.py 192.168.1.99 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | |...
watchTowr-vs-FortiWeb-CVE-2025-25257
watchTowr-vs-FortiWeb-CVE-2025-25257 Generador de Artefactos de Detección para FortiWeb CVE-2025-25257 Consulte nuestra entrada de blog para detalles técnicos https://github.com/user-attachments/assets/e59f2b3b-2b9b-469f-b4a8-2b7df2ede194 Detección en Acción root@kitploit: python...
CVE-2024-27130
CVE-2024-27130 A Proof of Concept developed by @watchTowr to exploit stack overflow vulnerability to obtain RCE on a vulnerable QNAP device. Follow the watchTowr Labs Team for our Security Research https://labs.watchtowr.com/ https://twitter.com/watchtowrcyber...
Mitel-MiCollab-Auth-Bypass_CVE-2024-41713
CVE-2024-41713 Mitel MiCollab Authentication Bypass to Arbitrary File Read See our blog post for technical details root@kitploit: / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / / watchtowr-vs-MiCollab2024-12-05.py Mitel MiCollab...
watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882
watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Detection Artifact Generator for Oracle E-Business Suite CVE-2025-61882 See our blog post for technical details Detection in Action root@kitploit: python3 watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882.py --command 'bash -i &...
CVE-2024-24919
CVE-2024-24919 Nuclei Template to discover CVE-2024-24919. A path traversal vulnerability in CheckPoint SSLVPN. BTW. Great article, that was my inspiration to write this simple template at 2:00 AM. Resource: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/...
watchtowr-vs-telnetd-CVE-2026-32746
watchtowr-vs-telnetd-CVE-2026-32746 Detection Artifact Generator for telnetd CVE-2026-32746. See our blog post for technical details. Detection in Action root@kitploit: python watchtowr-vs-telnetd-CVE-2026-32746.py --rhost 127.0.0.1 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y...
watchTowr-vs-Check-Point-CVE-2026-50751
CVE-2026-50751 A Check Point Remote Access VPN IKEv1 certificate-authentication bypass Detection Artefact Generator. https://github.com/user-attachments/assets/1280c545-364e-42d1-94ac-5b2cd850d14e See our blog post for technical details. Detection in Action root@kitploit: $ python3...
Ivanti Connect Secure - XXE
Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. id: CVE-2024-22024 info: name: Ivanti Connect Secure - XXE author: watchTowr severity: high description: | Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. impact: | Successful exploitation of this...
CVE-2024-55591
FortiGate CVE-2024-55591 Última versión de 1Scan https://github.com/0x7556/1Scan Versiones afectadas root@kitploit: FortiOS 7.0.0 hasta 7.0.16 FortiProxy 7.0.0 hasta 7.0.19 FortiProxy 7.2.0 hasta 7.2.12 Detección individual con POC root@kitploit: ./poc 10.10.1.1 ./poc http://10.10.1.1 Lote con...
htb-labs-connected
HTB: Connected - Staff Pick English | Español 📋 Table of Contents 1. Enumeration 2. Exploitation - CVE-2025-57819 3. Reverse Shell 4. Privilege Escalation 5. Flags 6. Repository Structure 7. Scripts and Tools Used 8. Attack Summary 9. Resources and Credits 10. Additional Notes 1. Enumeration 1.1...
Citrix-Virtual-Apps-XEN-Exploit
CVE-2024-xxxx Citrix Virtual Apps and Desktops XEN Unauthenticated Remote Code execution See our blog post for technical details https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 PoC in Action root@kitploit: python exploit-citrix-xen.py --target 192.168.1.120 --port ...
CVE-2026-41940-cpanel-0day
Usage root@kitploit: python 0day.py -f test.txt --external-only --show-all -t 10 -o testcvereport.csv Source & reference https://labs.watchtowr.com/the-internet-is-falling-down-falling-down-falling-down-cpanel-whm-authentication-bypass-cve-2026-41940/ PLEASE DO NOT EXPLOIT, ONLY FIX PURPOSES, THI...
cPanel-WHM-AuthBypass-Session-Checker
CVE-2026-41940 Session Validation Tool A companion tool for the watchTowr CVE-2026-41940 authentication bypass exploit. After running the main exploit against a cPanel/WHM target, this script validates whether the injected session actually grants authenticated access by testing multiple endpoints...
SmarterMail Auth Bypass Exploited in the Wild Two Days After Patch Release
A new security flaw in SmarterTools SmarterMail email software has come under active exploitation in the wild, two days after the release of a patch. The vulnerability, which currently does not have a CVE identifier, is tracked by watchTowr Labs as WT-2026-0001. It was patched by SmarterTools on...
PT-2025-35314
Name of the Vulnerable Software and Affected Versions: Sitecore Experience Manager XM versions 9.0 through 9.3, 10.0 through 10.4 Sitecore Experience Platform XP versions 9.0 through 9.3, 10.0 through 10.4 Description: This issue involves the use of externally-controlled input to select classes o...
Exploit for Unrestricted Upload of File with Dangerous Type in Cleo Harmony
CVE-2024-50623 Cleo Unrestricted file upload and download PoC...
Exploit for Path Traversal in Mitel Micollab
CVE-2024-41713 Mitel MiCollab Authentication Bypass to Arbitr...
About Remote Code Execution – FortiManager “FortiJump” (CVE-2024-47575) vulnerability
About Remote Code Execution - FortiManager "FortiJump" CVE-2024-47575 vulnerability. FortiManager is a centralized solution for configuring, enforcing policies, updating, and monitoring Fortinet network devices. The vulnerability was released on October 23. A missing authentication for critical...