Lucene search
+L

12703 matches found

Kitploit
Kitploit
added 2026/09/10 6:09 p.m.7 views

CVE-2024-21006_jar

CVE-2024-21006jar Exploit code reference: https://github.com/momika233/CVE-2024-21006 Here, the source code has been compiled into a JAR package for ease of use. The lib directory contains dependency files. If you wish to modify the source code, you can compile it yourself. Usage root@kitploit:...

7.5CVSS7AI score0.07854EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/10 2:54 p.m.8 views

ShellPop

ShellPop Acerca de ShellPop se trata de generar shells. Con esta herramienta puedes crear comandos de shell reversa o bind de manera fácil y sofisticada para ayudarte durante las pruebas de penetración. ¡No pierdas más tiempo con archivos .txt almacenando tus shells reversas! Instalación Se...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 1:46 p.m.6 views

CVE-2026-21017-LDAP-Anonymous-Bind-Privilege-Escalation

CVE-2026-21017 – LDAP Anonymous Bind Privilege Escalation Program Code Python ldap3 sim root@kitploit: ldapanonsim.py - LDAP server allowing anonymous bind with write access from ldap3 import Server, Connection, ALL Simulated: real server would be misconfigured server =...

5.5CVSS6AI score0.00093EPSS
SaveExploits0
NVD
NVD
added 2026/09/10 9:17 a.m.5 views

CVE-2026-88264

A flaw was found in crun. When the container configuration does not give /dev a dedicated mount, terminal setup can redirect /dev/console onto an attacker-controlled path, including via the read-only-rootfs bind-mount fallback. Affected versions are crun 1.29.1 and earlier. Default configurations...

5.6CVSS0.00117EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 9:05 a.m.12 views

postshell

PostShell PostShell es un shell de post-explotación que incluye tanto un shell bind como un shell de conexión inversa. Crea un TTY completamente interactivo que permite el control de trabajos. El tamaño del stub es de aproximadamente 14 kb y se puede compilar en cualquier sistema similar a Unix...

6AI score
SaveExploits0
CVE
CVE
added 2026/09/10 8:57 a.m.15 views

CVE-2026-88265

crun (a container runtime) is affected by a flaw where, after pivot_root , reopening /dev/null for stdio can follow a symlink and attach a host file to container stdio, allowing the container to change that file's ownership (chown). This effectively permits a host bind-mount write and chown from ...

5.6CVSS0.00119EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/10 8:40 a.m.7 views

EUVD-2026-75327

A flaw was found in crun. When the container configuration does not give /dev a dedicated mount, terminal setup can redirect /dev/console onto an attacker-controlled path, including via the read-only-rootfs bind-mount fallback. Affected versions are crun 1.29.1 and earlier. Default configurations...

5.6CVSS0.00117EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/10 8:40 a.m.14 views

CVE-2026-88264

crun , a container runtime, is affected by a /dev/console symlink-follow flaw (CVE-2026-88264). When the container configuration does not assign a dedicated mount to /dev, terminal setup can redirect /dev/console onto an attacker-controlled path, including via the read-only-rootfs bind-mount fall...

5.6CVSS0.00117EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/09/10 8:40 a.m.8 views

CVE-2026-88264

A flaw was found in crun. When the container configuration does not give /dev a dedicated mount, terminal setup can redirect /dev/console onto an attacker-controlled path, including via the read-only-rootfs bind-mount fallback. Affected versions are crun 1.29.1 and earlier. Default configurations...

5.6CVSS0.00117EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/10 7:57 a.m.8 views

BIND-9-Cache-Poisoning-PoC---CVE-2025-40778

BIND 9 Cache Poisoning PoC - CVE-2025-40778 Conceptual Overview This vulnerability allows an attacker to corrupt the DNS cache of a BIND Resolver, forcing legitimate users to be redirected to malicious IP addresses without their knowledge. The core logic of the attack: The attack relies on...

8.6CVSS6.9AI score0.00665EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 5:43 a.m.5 views

CVE-2025-9074

CVE-2025-9074 – Full Docker Escape on Windows & macOS Docker Desktop 📌 Description Docker Desktop exposes the internal Docker Engine API at http://192.168.65.7:2375 to any running container — with no authentication and no access control. Because the engine itself can mount the host filesystem, a...

9.3CVSS8.1AI score0.01629EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/10 1:45 a.m.7 views

copy-fail-mitigation-with-bpftrace

copy-fail-mitigation-with-bpftrace CVE-2026-31431, AKA Copy Fail, can be mitigated in one-line with bpftrace, no kpatch building, no cargo building English Version | 中文版本 Idea To exploit Copy Fail, you need to bind socket AFALG and use algorithm authencesn , which most applications don't use a lo...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits242References3
Kitploit
Kitploit
added 2026/09/10 1:30 a.m.4 views

pkwner

root@kitploit: ██████╗ ██╗ ██╗██╗ ██╗███╗ ██╗███████╗██████╗ ██╔══██╗██║ ██╔╝██║ ██║████╗ ██║██╔════╝██╔══██╗ ██████╔╝█████╔╝ ██║ █╗ ██║██╔██╗ ██║█████╗ ██████╔╝ ██╔═══╝ ██╔═██╗ ██║███╗██║██║╚██╗██║██╔══╝ ██╔══██╗ ██║ ██║ ██╗╚███╔███╔╝██║ ╚████║███████╗██║ ██║ ╚═╝ ╚═╝ ╚═╝ ╚══╝╚══╝ ╚═╝...

7.8CVSS7.1AI score0.94921EPSS
SaveExploits154
Kitploit
Kitploit
added 2026/09/10 1:04 a.m.9 views

badblood

Bad Blood Bad Blood is an exploit for CVE-2021-20038, a stack-based buffer overflow in the httpd binary of SMA-100 series systems using firmware versions 10.2.1.x. I've written a lot of the technical details here: AttackerKB CVE-2021-20038 The exploit, as written, will open up a telnet bind shell...

9.8CVSS8.4AI score0.99912EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/10 12:46 a.m.11 views

docker-socket-risk-demos

docker-socket-risk-demos Companion repo for the video: Stop Mounting docker.sock — Run Trivy Without Giving Away Root Access — inspired by CVE-2026-33634 https://www.youtube.com/watch?v=xLTYzfPY3xI This repo contains the sample web app and Claude Code prompt used in the video to demonstrate: 1. W...

9.4CVSS8.5AI score0.59164EPSS
SaveExploits2
OSV
OSV
added 2026/09/09 11:51 p.m.7 views

GHSA-VV4J-M4VR-F3G6 ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces

Summary On the Home Assistant add-on, the dashboard serves a trusted ingress site that skips authentication because the supervisor authenticates the request upstream. That site was binding 0.0.0.0. The add-on runs in host network mode for mDNS, so binding all interfaces also bound the host's LAN...

8.8CVSS6.1AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/09/09 11:51 p.m.10 views

ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces

Summary On the Home Assistant add-on, the dashboard serves a trusted ingress site that skips authentication because the supervisor authenticates the request upstream. That site was binding 0.0.0.0. The add-on runs in host network mode for mDNS, so binding all interfaces also bound the host's LAN...

SaveExploits0References4Affected Software1
Kitploit
Kitploit
added 2026/09/09 3:42 p.m.8 views

hacktivity-vulns-exploits-lab

Vulnerabilities, Exploits, and Remote Access Payloads — lab writeup My walkthrough and analysis of the Hacktivity Cyber Security Labs sheet "Vulnerabilities, Exploits, and Remote Access Payloads" Ethical Hacking and Penetration Testing course, Leeds Beckett University. It covers how software...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 12:22 p.m.7 views

CVE-2026-3888-snap-confine-systemd-tmpfiles-LPE

CVE-2026-3888 — snap-confine / systemd-tmpfiles Local Privilege Escalation Local privilege escalation from unprivileged user to full root on Ubuntu Desktop 24.04+ by exploiting a TOCTOU race condition between snap-confine and systemd-tmpfiles. Two variants are provided: SUID and Capabilities. CVS...

7.8CVSS7.9AI score0.00383EPSS
SaveExploits7
NVD
NVD
added 2026/09/09 12:17 p.m.5 views

CVE-2026-87806

Parse Server versions = 9.0.0 9.10.1-alpha.7 contain an authentication bypass in the built-in LDAP authentication adapter. The adapter forwarded the client-supplied password to the directory without verifying that a password had been supplied, and treated any non-error response from the directory...

9.1CVSS0.00289EPSS
SaveExploits0References2
Rows per page
Query Builder