Lucene search
+L

9 matches found

Kitploit
Kitploit
added 2026/09/08 12:04 p.m.5 views

CVE-2026-39636-vulnerability-exp

1. Burp Suite must be opened before running here !! And the default Burp Suite port must be 8080. If it is different, you can change it yourself. 2. Download the required libraries root@kitploit: pip install websockets==16.0 -i https://pypi.tuna.tsinghua.edu.cn/simple 3. Just run it directly...

8.2CVSS5.8AI score0.03396EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2026/05/14 12:00 a.m.108 views

📄 ePati Antikor NGFW 2.0.1301 Authentication Bypass

ePati Antikor NGFW version 2.0.1301 suffers from an authentication bypass vulnerability. Exploit Title: ePati Antikor NGFW 2.0.1301 - Authentication Bypass Date: 2026-04-13 Exploit Author: SADIK ERTÜRK Vendor Homepage: https://www.epati.com.tr/ Software Link: https://www.epati.com.tr/antikor-ngfw...

9.8CVSS5.8AI score0.02194EPSS
SaveExploits2
Snyk
Snyk
added 2025/08/12 12:13 a.m.4 views

Missing Origin Validation in WebSockets

Overview Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets via the CheckOrigin function in the api/terminal.go file. An attacker can execute arbitrary commands on the target system by tricking an authenticated user into visiting a malicious web page that...

8.8CVSS7.5AI score0.00553EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/05/26 11:57 a.m.346 views

Exploit for Authentication Bypass Using an Alternate Path or Channel in Fortinet Fortiproxy

--port 443 --ssl Then use the prompt: FortiOS get sys...

9.8CVSS9.8AI score0.98259EPSS
SaveExploits10
RedhatCVE
RedhatCVE
added 2025/05/22 5:01 p.m.27 views

CVE-2020-25094

LogRhythm Platform Manager 7.4.9 allows Command Injection. To exploit this, an attacker can inject arbitrary program names and arguments into a WebSocket. These are forwarded to any remote server with a LogRhythm Smart Response agent installed. By default, the commands are run with LocalSystem...

10CVSS7.3AI score0.03149EPSS
SaveExploits1
Packet Storm
Packet Storm
added 2025/05/19 12:00 a.m.97 views

📄 Remote Keyboard Desktop 1.0.1 Remote Code Execution

Remote Keyboard Desktop version 1.0.1 suffers from a remote code execution vulnerability. Exploit Title: Remote Keyboard Desktop 1.0.1 Remote Code Execution Date: 05/17/2025 Exploit Author: Chokri Hammedi Vendor Homepage: https://remotecontrolio.web.app/ Software Link:...

8.3AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
added 2025/02/07 12:00 a.m.354 views

ABB Cylon FLXeon 9.3.4 (wsConnect.js) WebSocket Command Spawning PoC

Summary BACnet® Smart Building Controllers. ABB's BACnet portfolio features a series of BACnet® IP and BACnet MS/TP field controllers for ASPECT® and INTEGRA™ building management solutions. ABB BACnet controllers are designed for intelligent control of HVAC equipment such as central plant, boiler...

9.4CVSS7.4AI score0.00922EPSS
SaveExploits4
GithubExploit
GithubExploit
added 2025/01/21 9:41 a.m.798 views

Exploit for Server-Side Request Forgery in Havocframework Havoc

CVE-2024-41570 | Havoc C2 SSRF with RCE | Automated Reverse Sh...

9.8CVSS7.1AI score0.02909EPSS
SaveExploits6
GithubExploit
GithubExploit
added 2020/01/07 11:31 a.m.12 views

Fast8690-exploit

Sagemcom Fast 3890 exploit This exploit uses the Cable Haunt...

7.3AI score
SaveExploits0
Rows per page
Query Builder