Lucene search
+L

129320 matches found

Kitploit
Kitploit
added 2026/09/16 10:29 a.m.9 views

CVE-2025-4322-Exploit

CVE-2025-4322 - Cambio de contraseña no verificado CWE-620 Exploit: Descargar aquí Detalles ID de CVE : CVE-2025-4322 Publicado : 05/20/2025 Impacto : Crítico CVSS : 9.8 Parche disponible: Aún no hay parche oficial Impacto Vulnerabilidad de gravedad crítica que permite a los atacantes...

9.8CVSS8.7AI score0.15524EPSS
SaveExploits3
RedHat Linux
RedHat Linux
added 2026/09/16 10:08 a.m.7 views

gstreamer-plugins-base: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow

A flaw was found in GStreamer. This vulnerability, a stack-based buffer overflow, occurs during the parsing of OGG files due to improper validation of user-supplied data length. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file,...

7.8CVSS8AI score0.00238EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/16 9:58 a.m.10 views

CVE-2023-25136

CVE-2023-25136 OpenSSH 9.1 Vulnerability Mass Scanning and Exploitation Vulnerability Details OpenSSH is software that implements the SSH protocol, commonly used to securely connect to Linux or Windows machines for remote administration. The CVE-2023-25136 security vulnerability introduced in...

6.5CVSS7.5AI score0.89685EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/16 9:52 a.m.7 views

clone_and_pwn

Headers Exploit Title: Clone and Pwn Date: June 4th, 2018 Exploit Author: Alejandro Caceres Vendor Homepage: https://git-scm.com/ Software Link: https://git-scm.com/downloads Version: arbitrary code is executed on git client versions In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15....

7.8CVSS7.8AI score0.48752EPSS
SaveExploits10References5
Kitploit
Kitploit
added 2026/09/16 9:40 a.m.12 views

Python-CVE-2020-25213

Python-CVE-2020-25213 Exploit interactivo en Python para la vulnerabilidad de WP File Manager. El plugin File Manager wp-file-manager anterior a la versión 6.9 de WordPress permite a atacantes remotos subir y ejecutar código PHP arbitrario porque renombra un archivo de conector de ejemplo de...

10CVSS8.7AI score0.97328EPSS
SaveExploits16
RedHat Linux
RedHat Linux
added 2026/09/16 9:29 a.m.10 views

postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments

A type confusion vulnerability in PostgreSQL allows any user to execute arbitrary code as the database's operating system user by calling functions with mishandled "internal" data type arguments...

8.8CVSS8.2AI score0.00423EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/16 9:29 a.m.6 views

postgresql: PostgreSQL: Arbitrary code execution via type confusion in pg_restore_attribute_stats()

A flaw was found in PostgreSQL. An object creator can exploit a type confusion vulnerability in the pgrestoreattributestats function. This flaw occurs due to the conflation of range and multirange values, allowing the attacker to execute arbitrary code as the operating system user running the...

8.8CVSS8AI score0.00414EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/16 9:29 a.m.11 views

postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists

A flaw was found in PostgreSQL pgdump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating...

8.8CVSS8.3AI score0.00427EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/16 7:02 a.m.8 views

Remediate-AdobeAcrobat-CVE-2026-34621

Intune Proactive Remediation – Aplicación de versión de Adobe Acrobat/Reader CVE-2026-34621 Este repositorio contiene scripts de Proactive Remediation de Microsoft Intune para reducir la exposición a vulnerabilidades de Adobe Acrobat/Reader mediante: 1. Aplicar una versión mínima parcheada detect...

8.6CVSS8AI score0.02183EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/16 2:09 a.m.16 views

CVE-2023-40031

CVE-2023-40031 Análisis y reproducción de la vulnerabilidad de desbordamiento de búfer en el montón de Notepad++ CVE-2023-40031 Resumen de la vulnerabilidad Notepad++ es un conocido editor de código abierto para Windows que admite múltiples lenguajes de programación. Recientemente, investigadores...

7.8CVSS7.5AI score0.00517EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 2:09 a.m.12 views

CVE-2022-24934

CVE-2022-24934 Resumen de la vulnerabilidad El programa de actualización de WPS Office, wpsupdate.exe, lee una dirección de servidor de actualización personalizada del registro HKEYCURRENTUSER, descarga un programa de actualización personalizado y lo ejecuta, lo que provoca la ejecución de código...

9.8CVSS8.6AI score0.2047EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2026/09/16 1:48 a.m.13 views

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.8CVSS6.9AI score0.00755EPSS
SaveExploits0References12
RedHat Linux
RedHat Linux
added 2026/09/16 1:48 a.m.15 views

kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation

A flaw was found in the Linux kernel's userfaultfd mechanism. A local attacker with userfaultfd access could register on shadow stack Virtual Memory Areas VMAs. By discarding a page and injecting a page with chosen return addresses, an attacker could achieve arbitrary code execution. This...

6.3AI score0.00209EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/16 1:12 a.m.8 views

CVE-2025-55349

CVE-2025-55349 — Ejecución de código arbitrario en pm2 mediante postinstall Descubridor : Golden Ticket Labs Proveedor : Unitech pm2 Fecha de asignación : 20 de agosto de 2025 MITRE Descripción Un problema en el componente lib/API/Modules/NPM.js de Unitech PM2 v5.4.2 permite la ejecución de códig...

6AI score
SaveExploits1
RedHat Linux
RedHat Linux
added 2026/09/16 1:06 a.m.16 views

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

6.8CVSS7.2AI score0.00271EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/16 1:06 a.m.12 views

kernel: ipv6: fix possible UAF in icmpv6_rcv()

A flaw was found in the Linux kernel's IPv6 Internet Protocol version 6 implementation. This vulnerability, a Use-After-Free UAF error, occurs due to incorrect caching of network packet addresses before a memory operation. An attacker could potentially exploit this flaw to cause memory corruption...

9.8CVSS8.3AI score0.00528EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/16 1:06 a.m.12 views

Log4shell

Informe de análisis Log4Shell de Igloo Corporation, Won Chi-hyun Log4shell CVE-2021-44228 Log4j es un registro gratuito y de código abierto de la Apache Software Foundation, basado en Java y aplicable a todas las aplicaciones. Registra los logs de diversos servicios basados en Java y proporciona...

10CVSS7.6AI score0.99999EPSS
SaveExploits375References2
EUVD
EUVD
added 2026/09/16 12:31 a.m.9 views

EUVD-2026-80049

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

7.8CVSS6.5AI score0.0021EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/16 12:31 a.m.8 views

EUVD-2026-80033

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in ntoolstcpdumpstartset.cgi caused by an unsized sprintf call when processing form values. An attacker can submit crafted input to this cgi endpoint to overflow the stack buffer and potentially execute arbitrary code...

8.8CVSS6.7AI score0.00676EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/16 12:00 a.m.4 views

EUVD-2026-80932

An issue in Sogou Sogou Input Method 16.3.0.3498 fixed in 16.3.0.3498 allows a remote attacker to execute arbitrary code via the bizhelper.exe component...

6.5AI score0.00926EPSS
SaveExploits0References2
Rows per page
Query Builder