Lucene search
+L

5447802 matches found

NVD
NVD
added 2026/08/29 10:16 p.m.1 views

CVE-2026-82422

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/empdel.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may...

6.5CVSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/29 10:15 p.m.2 views

CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

5.5CVSS
SaveExploits0References6
CVE
CVE
added 2026/08/29 10:15 p.m.2 views

CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

5.5CVSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/29 9:45 p.m.3 views

CVE-2026-82422 itsourcecode Sales and Inventory System emp_del.php sql injection

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/empdel.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may...

6.5CVSS
SaveExploits0References6
CVE
CVE
added 2026/08/29 9:45 p.m.3 views

CVE-2026-82422

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/empdel.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may...

6.5CVSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/29 9:41 p.m.8 views

cloudrasp-log4j2

CloudArmor · ランタイムアプリケーション自己防御モジュール - Log4j2 バージョン 简体中文 このプロジェクトは、Log4j2 CVE-2021-44228 を防御するために特別に構築された CloudArmor のローカルバージョンです。このプロジェクトを実行するためにネットワーク接続は必要ありません。 本番環境にデプロイする前に必ずテストを行ってください。...

10CVSS7AI score0.99999EPSS
SaveExploits364References1
Kitploit
Kitploit
added 2026/08/29 9:41 p.m.3 views

CVE-2022-22639

詳細 ブログ参照: https://www.trendmicro.com/enus/research/22/d/macos-suhelper-root-privilege-escalation-vulnerability-a-deep-di.html CVE-2022-22639 の悪用 1. 次のコマンドでコンパイル: clang exploit.m -o /tmp/exploit -framework Foundation -fobjc-arc -fobjc-link-runtime...

7.8CVSS7.1AI score0.08191EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/29 9:40 p.m.3 views

iovyroot

iovyroot CVE-2015-1805脆弱性に基づくルートツール 32ビットと64ビットをサポートしますが、絶対カーネルアドレスが必要です(offsets.cを参照) pocはidler1984によって作成されました https://github.com/idl3r/testcode...

7.2CVSS6.9AI score0.01395EPSS
SaveExploits3References2
Kitploit
Kitploit
added 2026/08/29 9:39 p.m.2 views

CVE-2021-40373

CVE-playsms 在 playsms 1.4.3 中存在一个漏洞,可能允许潜在攻击者执行远程代码。 如何复现 RCE(shell): https://playsms.org/ docker pull playsms/playsms:1.4.3 docker run -d -p 80:80 playsms/playsms 使用 admin:admin 登录 http://127.0.0.1/index.php?app=main&inc=coremainconfig&op=mainconfigtabs-information-page 在攻击者机器上托管恶意 bash 文件 使用 wg...

9.8CVSS8.8AI score0.04735EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/29 9:39 p.m.5 views

CVE-2021-3281

CVE-2021-3281 django.utils.archive.pyのlineno:171、Class TarArchiveにディレクトリトラバーサルの脆弱性があります。 関数呼び出しos.path.jointopath, nameはパラメータ"name"をチェックしていません。もし誰かがWindowsプラットフォームでこのユーティリティを使用すると、ディレクトリトラバーサルのリスクがあります。POCは以下です: root@kitploit: from django.utils import archive archive.extract'test.tar','.'...

5.3CVSS6.1AI score0.07605EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/29 9:39 p.m.2 views

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 익스플로잇 도구, 이 도구를 사용하여 FortiGate SSL-VPN의 취약점을 확인할 수 있습니다. 이 취약점은 다음 버전에 영향을 미칩니다: • FortiOS 6.0 - 6.0.0 6.0.4 • FortiOS 5.6 - 5.6.3 5.6.7 • FortiOS 5.4 - 5.4.6 5.4.12 https://www.fortinet.com/blog/business-and-technology/fortios-ssl-vulnerability 주요 업데이트 0.7...

9.8CVSS7.3AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/08/29 9:38 p.m.5 views

Mobile-Security-Framework-MobSF

Mobile Security Framework MobSF 移动安全框架(MobSF)是一个针对 Android、iOS 和 Windows Mobile 移动应用的安全研究平台。MobSF 可用于多种场景,如移动应用安全、渗透测试、恶意软件分析和隐私分析。静态分析器支持常见的移动应用二进制文件,如 APK、IPA、APPX 和源代码。同时,动态分析器支持 Android 和 iOS 应用,并提供了一个交互式检测测试、运行时数据和网络流量分析的平台。MobSF 通过 REST API 和 CLI 工具与您的 DevSecOps 或 CI/CD 流水线无缝集成,轻松增强您的安全工作流程...

5.9AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/08/29 9:38 p.m.4 views

CVE-2023-34362

CVE-2023-34362 CVE-2023-34362およびMOVEit Transferに影響するPOC 技術的分析 脆弱性の技術的根本原因分析は、弊社ブログに掲載されています: https://www.horizon3.ai/moveit-transfer-cve-2023-34362-deep-dive-and-indicators-of-compromise/ 概要 このPOCは、SQLインジェクションを悪用してsysadmin APIアクセストークンを取得し、そのアクセスを使用してデシリアライゼーション呼び出しを悪用し、リモートコード実行を達成します。...

9.8CVSS7.4AI score0.99934EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/08/29 9:37 p.m.3 views

CVE

CVE STAR Labs 团队为各种 CVE 编写的概念验证漏洞利用脚本集合,这些 CVE 由他们发现或由他人发现。 CVE-2026-53264 目标:Linux 内核 版本:CentOS 9 内核版本 5.14.0-721 漏洞利用编写者:Lee Jia Jie CVE-2025-29824 目标:Windows 通用日志文件系统驱动程序 版本:Windows 11 23H2 漏洞利用编写者:Ong How Chong CVE-2024-26230 目标:Windows 电话服务器 版本:Windows 11 23H2 漏洞利用编写者:Đào Tuấn Linh...

7.8CVSS6.9AI score0.24111EPSS
SaveExploits11References11
Kitploit
Kitploit
added 2026/08/29 9:36 p.m.52 views

gpg_reaper

GPG Reaper TL;DR: Obtain/Steal/Restore GPG Private Keys from gpg-agent cache/memory This POC demonstrates method for obtaining GPG private keys from gpg-agent memory under Windows. Normally this should be possible only within 10 minutes time frame --default-cache-ttl value. Unfortunately...

5.7AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/29 9:36 p.m.4 views

gpg_reaper

GPG Reaper TL;DR: gpg-agent 캐시/메모리에서 GPG 개인 키 얻기/도용/복원 이 POC는 Windows에서 gpg-agent 메모리로부터 GPG 개인 키를 얻는 방법을 보여줍니다. 일반적으로 이는 10분 이내--default-cache-ttl 값에만 가능해야 합니다. 불행히도 housekeeping 함수캐시 정리를 담당는 GPG를 사용하는 경우에만 실행됩니다타이머가 없음. 따라서 일반적인 GPG 사용 사례예: 파일에 서명한 다음 GUI를 닫고 다른 작업 수행에서도 비밀번호는 여전히 gpg-agent 메모리...

5.8AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/29 9:36 p.m.3 views

proxylogscan

proxylogscan このツールは、Microsoft Exchange Server の脆弱性をスキャンし、攻撃者が認証をバイパスして管理者になりすますことを可能にするものです CVE-2021-26855。 このバグを、認証後の任意ファイル書き込み脆弱性である別のバグと連鎖させてコード実行を達成します CVE-2021-27065。 その結果、認証されていない攻撃者が Microsoft Exchange Server 上で任意のコマンドを実行できるようになります。 この脆弱性は以下のバージョンに影響します Exchange 2013 バージョン Go 1.13+ が必要です。...

9.8CVSS7.3AI score0.99996EPSS
SaveExploits67References1
Kitploit
Kitploit
added 2026/08/29 9:36 p.m.4 views

fortigate-belsen-leak

╔═════════════════════════════════════════════════════════════════════════════╗ ║ ███████╗ ██████╗ ██████╗ ████████╗██╗ ██████╗ █████╗ ████████╗███████╗ ║ ║ ██╔════╝██╔═══██╗██╔══██╗╚══██╔══╝██║██╔════╝ ██╔══██╗╚══██╔══╝██╔════╝ ║ ║ █████╗ ██║ ██║██████╔╝ ██║ ██║██║ ███╗███████║ ██║ █████╗ ║ ║...

9.8CVSS7.3AI score0.99984EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/08/29 9:36 p.m.3 views

r00kie-kr00kie

r00kie-kr00kie 면책 조항 이것은 CVE-2019-15126 kr00k 취약점에 대한 PoC 익스플로잇입니다. 이 프로젝트는 오직 교육 목적으로만 제공되며, 법 위반이나 개인 이익을 위해 사용될 수 없습니다. 이 프로젝트의 저자는 자료로 인해 발생할 수 있는 모든 피해에 대해 책임을 지지 않습니다. 요구 사항 이 스크립트를 사용하려면 프레임 인젝션이 가능한 액티브 모니터 모드를 지원하는 WiFi 카드가 필요합니다. 코드를 개발하고 테스트하는 데 사용한 Atheros AR9280 칩IEEE 802.11n을 권장합니다....

3.1CVSS6.8AI score0.07314EPSS
SaveExploits7References2
Kitploit
Kitploit
added 2026/08/29 9:36 p.m.2340 views

r00kie-kr00kie

r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...

3.1CVSS6.9AI score0.07314EPSS
SaveExploits7References2
Rows per page
Query Builder