Cisco SSM On-Prem <= 8-202206 - Password Reset Account Takeover

A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process...

SnitchDNS

!CAUTION 此仓库已不再维护，请访问 https://github.com/sadreck/SnitchDNS 获取最新版本。 SnitchDNS SnitchDNS 是一个由数据库驱动的 DNS 服务器，带有 Web 界面，使用 Python 和 Twisted 编写。所有配置更改立即可见，无需重启任何系统服务，从而简化了 DNS 管理。 其主要功能之一是记录所有 DNS 查询，从而发现网络流量端点；同时，它支持通过电子邮件、Web Push、Slack 和 Teams 发送通知，因此可用于实现蜜罐令牌（Canary Tokens）。红队成员也可使用 SnitchDNS...

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198 is a critical vulnerability in the Cisco IOS XE software Web UI feature that allows unauthenticated remote attackers to create accounts with privilege level 15 on affected systems, thereby gaining full control of the device. The vulnerability primarily stems from...

Exihibitor-RCE

Exhibitor-RCE Exhibitor Web Ui 1.7.1 RCE, CVE-2019-5029 Paso 1: $ git clone https://github.com/thehunt1s0n/Exihibitor-RCE/ Paso 2: $ cd Exihibitor-RCE/ Paso 3 opcional: Es posible que necesites editar la carga útil de datos json en el script. Para ello, simplemente captura la solicitud usando Bur...

cve-2022-33891

CVE-2022-33891 Apache Spark Shell 命令注入漏洞 一个用于利用 Apache Spark Shell 命令注入漏洞的 Python POC。我看到其他一些 POC，但看起来非常可疑。这一个干净又简单。 我并未发现此漏洞/利用方法。我只是想为社区制作一个安全的 POC ^.^ CVE 最初由 Databricks 的 Kostya Kortchinsky 发现。 更新于 2022年9月7日：哟，现在有了一个 Metasploit 模块！由 h00die-gr3y 制作，并且已经 合并！ 受影响版本 Apache Spark 版本 3.0.3 及更早版本、版本...

CVE-2026-40179-PoC

CVE-2026-40179 — XSS almacenado en Prometheus a través de remotewrite Una prueba de concepto mínima y con pocas dependencias para CVE-2026-40179 GHSA-vffh-x6r8-xx99: cross-site scripting almacenado en la interfaz web de Prometheus, entregado a través de un endpoint remotewrite sin autenticación. ...

CVE-2026-12749

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2026-12750

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

EUVD-2026-78868

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2026-12749

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting (XSS) . An authenticated user can embed arbitrary JavaScript code in the Web UI, altering its intended functionality and potentially leading to credentials disclosure within a trusted session. The CVSS 3.1 score is...

EUVD-2026-78867

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2026-12750

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting (XSS) . An authenticated user can embed arbitrary JavaScript in the Web UI, altering intended functionality and potentially leading to credentials disclosure within a trusted session . The CVSS 3.1 score is 6.4 (ME...

patch-CVE-2026-19843

Parche: CVE-2026-19843 Detalles de la vulnerabilidad CVE : CVE-2026-19843 Producto : Cisco IOS XE Descripción : Escalada de privilegios a través de la interfaz web Gravedad : Alta Estado del parche: DESPLEGADO...

CVE-2018-6961

CVE-2018-6961 Python3 利用程序 VMware NSX SD-WAN Edge by VeloCloud 在 3.1.0 版本之前存在一个命令注入漏洞，位于本地 Web UI 组件中。该组件默认禁用，不应在不受信任的网络上启用。VMware 的 VeloCloud 将在未来版本中从产品中移除该服务。成功利用此问题可能导致远程代码执行。 链接 CVE 详情 https://nvd.nist.gov/vuln/detail/CVE-2018-6961 原始 Python2 利用程序 https://www.exploit-db.com/exploits/44959/...

Cartero

Cartero Cartero ahora es una CLI en Go con una base de datos de espacio de trabajo incrustada y sin configuración, en lugar del antiguo runtime dependiente de MongoDB. La implementación actual proporciona: una experiencia de terminal pulida impulsada por Cobra y Lip Gloss una interfaz web de...

CVE-2023-20198

🔍 Cisco IOS XE Web UI 漏洞扫描器 - CVE-2023-20198 🚨 🚫 严重风险 | CVSS: 10.0 | 📅 更新于：2023年10月17日 概述： 一款快速且强大的扫描器，用于检测 Cisco IOS XE 软件 Web UI 中的严重漏洞。保护您的系统免受未经授权的级别15访问，以免控制权受到威胁！ 🌟 特性： 📌 发现针对系统级命令的潜在植入。 ⚡ 快速多线程扫描。 📁 生成简洁日志，便于分析。 📌 背景： 受影响范围 : 启用了 Web UI 的 Cisco IOS XE 软件。 当前威胁 : 正在被积极利用。请警惕 "ciscotacadmin"...

CVE-2019-5029

CVE-2019-5029 This is a Python script PoC for CVE-2019-5029. It is a RCE for Exhibitor Web UI 1.7.1. How to use Clone this repo git clone https://github.com/yZ1337/CVE-2019-5029.git Execute as follows python3 CVE-2019-5029.py Make sure the request inside the script is the same as the request of t...

chusa

chusa: 注射 Chusa - 注射 is an open source penetration testing tool based on SQLmap that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a...

CVE-2026-63766_exploit

CVE-2026-63766 — Inyección de comandos del sistema operativo sin autenticación en GPT-SoVITS Ejecución remota de código sin autenticación en la interfaz web de Gradio de GPT-SoVITS webui.py. Las utilidades de procesamiento de audio openasr, openslice, opendenoise, openuvr5 interpolan los valores ...

CVE-2023-20198-Scanner

Escáner de Cisco IOS XE CVE-2023-20198 Un script envoltorio en Python para escanear dispositivos Cisco IOS XE en busca de la Vulnerabilidad de Autenticación en la Interfaz Web CVE-2023-20198 utilizando un payload específico de curl. Características Escanea múltiples objetivos desde un archivo o...