Lucene search
+L

269468 matches found

Kitploit
Kitploit
added 2026/09/11 12:50 a.m.5 views

CVE-2019-1698

TRAN CONG DANH - SVTT - Mentor: LUU VAN LAN - CVE-2019-1698 - Day Started: 30/07/2024 Check the diff code betwween ver has vuln and ver of code with fix vuln: Code reference 1: https://plugins.trac.wordpress.org/changeset/3040809/notificationx/trunk/includes/Core/Rest/Analytics.php Code reference...

4.9CVSS5.8AI score0.03122EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/11 12:31 a.m.9 views

EUVD-2026-75760

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system...

4.3CVSS0.00224EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/11 12:31 a.m.6 views

EUVD-2026-75758

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions...

8.1CVSS0.0021EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/11 12:31 a.m.6 views

EUVD-2026-75777

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute flows and obtain sensitive information due to insufficient session expiration of API keys after user deactivation...

8.1CVSS0.00307EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 12:31 a.m.5 views

Exploit-CVE-2011-2523

README : VSFTP 2.3.4 漏洞利用 此 Python 脚本旨在利用 VSFTP 2.3.4 版本中存在的后门漏洞。该漏洞利用程序可对运行此特定 VSFTP 版本的系统进行未授权访问。 用法 要使用此漏洞利用脚本,请按照以下步骤操作: 克隆仓库:将包含漏洞利用脚本的仓库克隆到本地计算机。 安装依赖:确保你已安装所需的依赖项。此脚本使用 pwn 库。你可以使用 pip 安装: bash pip install pwntools 运行脚本:以目标机器的 IP 地址作为参数执行脚本。如果端口号与默认端口 21 不同,你还可以提供端口号。 bash python exploit.p...

10CVSS7.6AI score0.96184EPSS
SaveExploits50
Kitploit
Kitploit
added 2026/09/11 12:14 a.m.6 views

DVRFaultNET

DVRFaultNET .NET console application that exploits DVR CVE-2018-9995 vulnerability Usage Once launched, you will be prompted to enter the URL of the DVR camera. The program add ?opt=user&cmd=list to the URL and sends a request containing "Cookie:uid=admin" header then server return a JSON string...

9.8CVSS8.2AI score0.82608EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/11 12:09 a.m.4 views

CVE-2025-5548

🛡️ CVE-2025-5548 – FreeFloat FTP Server Buffer Overflow Exploit 📌 Overview This repository documents the discovery and exploitation of a stack-based buffer overflow vulnerability in the FreeFloat FTP Server application. The vulnerability resides in the handling of the USER command, where unsafe...

9.8CVSS7.5AI score0.14985EPSS
SaveExploits14
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.8 views

PT-2026-90300

In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extraction The bio-based drivers don't necessarily check the alignment split, and stacking block drivers don't always handle a misalignment detected after submitting the bio. Validate use...

0.00189EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.9 views

PT-2026-89778

A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user...

8.8CVSS0.00177EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.9 views

PT-2026-90510

ZoneMinder is a free, open source closed-circuit television software application. Versions prior to 1.36.39, 1.38.4, and 1.39.11 allow an authenticated low-privileged user with coarse Events=View and/or Snapshots=View permissions to directly fetch media for events belonging to monitors they are n...

6.5CVSS0.00201EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/11 12:00 a.m.12 views

CVE-2026-79362

CVE-2026-79362 is a Remote Code Execution (RCE) vulnerability in Woltlab Suite Core (WCF) , affecting versions 6.1.0 through < 6.1.23 and 6.2.0 through

0.00166EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.6 views

PT-2026-90466

In the Linux kernel, the following vulnerability has been resolved: tracing/user events: Clear copied tracing state before fork duplication dup task struct copies user event mm from the parent into the child, without grabbing a reference to it. user event mm dup should replace it, but it leaves...

0.002EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.7 views

PT-2026-90523

A deployment mode intended to expose only read access to a bundled packet-analysis component's interface denies a list of write-capable routes by pattern, but the pattern omits routes that modify tags attached to stored session records, and the proxy configuration otherwise permits the request...

5.3CVSS0.00207EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-88031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file...

8.1CVSS0.00261EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 11:56 p.m.8 views

CVE-2021-32789

💣 CVE-2021-32789 WordPress WooCommerce 用户转储利用工具 转储管理员用户 root@kitploit: woo -u http://example.com 转储所有用户 root@kitploit: woo -u http://example.com -dump...

7.5CVSS7.4AI score0.17227EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 11:52 p.m.8 views

CVE-2024-4898-Poc

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 1-click WP Staging & Migration = 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation...

9.8CVSS5.9AI score0.04156EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 11:44 p.m.7 views

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated...

8.8CVSS7.1AI score0.49166EPSS
SaveExploits29References1
Kitploit
Kitploit
added 2026/09/10 11:36 p.m.12 views

CVE-2021-46398

CVE-2021-46398 - Lalie ARNOUD, Gaspard ANDRIEU In this repository, you will find a proof of concept of the exploitation of the CVE-2021-46398 flaw through a docker compose, as well as an analysis of the impacts of this flaw on information systems. root@kitploit: Exploit Title: FileBrowser 2.17.2 ...

8.8CVSS7.8AI score0.06663EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/10 11:32 p.m.6 views

CVE-2022-38577-Processmaker

This repository has be archived and moved to: https://github.com/sornram9254/CVE-BBP-VDP ProcessMaker - User Profile Privilege Escalation CVE-2022-38577 ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to...

8.8CVSS7.7AI score0.01615EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/10 11:31 p.m.6 views

CVE-2023-31445-Unprivileged-Information-Disclosure

CVE-2023-31445-Unprivileged-Information-Disclosure Repository contains description for CVE-2023-31445 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-31445 Vendor: Cassia Networks Product: Access Controller Version: Cassia-AC-2.1.1.2203171453 Vulnerability:...

5.3CVSS6AI score0.01146EPSS
SaveExploits1
Rows per page
Query Builder