Lucene search
+L

1378 matches found

Kitploit
Kitploit
•added 2026/09/27 9:00 p.m.•10 views

shakeitoff

shakeitoff Una versión más pequeña, minimizada y limpia de InstallerFileTakeOver, también conocido como el exploit de día cero que es una "variación" de CVE-2021-41379 posteriormente asignado como CVE-2021-43883. Esta versión no abre una shell como lo hace InstallerFileTakeOver. El objetivo de es...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/27 6:05 p.m.•12 views

CVE-2024-3400

CVE-2024-3400 Descripción Una inyección de comandos como resultado de una vulnerabilidad de creación arbitraria de archivos en la función GlobalProtect del software PAN-OS de Palo Alto Networks para versiones específicas de PAN-OS y distintas configuraciones de funciones puede permitir a un...

10CVSS8.7AI score0.99999EPSS
SaveExploits46
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•212 views

ManageEngine OpManager - Directory Traversal

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability. id: CVE-2023-47211 info: name: ManageEngine...

9.1CVSS8.1AI score0.47024EPSS
SaveExploits1References3
Kitploit
Kitploit
•added 2026/09/26 4:45 p.m.•14 views

CVE-2024-10629

CVE-2024-10629 GPX Viewer = 2.2.8 - Creación Arbitraria de Archivos Autenticada Suscriptor+ Descripción: El plugin GPX Viewer para WordPress es vulnerable a la creación arbitraria de archivos debido a una verificación de capacidad y validación de tipo de archivo faltantes en la función...

8.8CVSS8.5AI score0.01666EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/26 3:29 p.m.•9 views

cve-2024-3400

cve-2024-3400 Script de explotación y comprobación en Python para CVE-2024-3400 Inyección de comandos y creación arbitraria de archivos en Palo Alto root@kitploit: usage: cve-2024-3400.py -h exploit,check ... CVE-2024-3400 - Palo Alto OS Command Injection positional arguments: exploit,check...

10CVSS8.9AI score0.99999EPSS
SaveExploits46
OSV
OSV
•added 2026/09/26 2:16 p.m.•7 views

DEBIAN-CVE-2026-100689

GitPython before 3.1.62 does not validate the path field read from an untrusted .gitmodules file when updating submodules. While a prior fix GHSA-hmq2-w58f-27jc added Submodule.validatedname to constrain the name field, and GitPython's own containment guard Submodule.torelativepath is applied in...

5.9CVSS5.8AI score0.00401EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/09/26 1:48 p.m.•8 views

CVE-2026-100689

A flaw was found in GitPython. When updating submodules, GitPython fails to properly validate the submodule path specified in a repository's configuration file. A remote attacker could exploit this vulnerability by supplying a crafted repository containing directory traversal sequences in the...

8.7CVSS5.8AI score0.00401EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/25 8:27 p.m.•8 views

CVE-2026-80430

A flaw was found in kitty. An attacker running a program within the terminal can create arbitrary files and directories outside the staging area in any location writable by the user. This issue occurs because the drag-and-drop staging mechanism improperly resolves symbolic links symlinks pointing...

4.6CVSS5.9AI score0.00155EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/25 2:17 p.m.•9 views

CVE-2026-80430

Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to create files and directories at paths outside the staging directory, because subdirdatafordrag in kitty/dnd.c...

4.6CVSS0.00155EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/25 1:08 p.m.•9 views

EUVD-2026-87063

Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to create files and directories at paths outside the staging directory, because subdirdatafordrag in kitty/dnd.c...

4.6CVSS5.9AI score0.00155EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/24 3:05 p.m.•9 views

CVE-2024-10586-Poc

Información de Vulnerabilidad Descripción El plugin Debug Tool para WordPress es vulnerable a la creación arbitraria de archivos debido a una falta de comprobación de capacidades en la función dbtpullimage y a la ausencia de validación del tipo de archivo en todas las versiones hasta la 2.2...

9.8CVSS8.6AI score0.02145EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/09/24 2:59 p.m.•12 views

CVE-2024-10629

🛠️ GPX Viewer Exploit CVE-2024-10629 Este repositorio contiene un exploit de prueba de concepto para el plugin GPX Viewer de WordPress, que es vulnerable a la creación arbitraria de archivos CVE-2024-10629. La vulnerabilidad permite a atacantes autenticados con acceso de nivel suscriptor o superio...

8.8CVSS8.4AI score0.01666EPSS
SaveExploits3
RedhatCVE
RedhatCVE
•added 2026/09/24 6:40 a.m.•13 views

CVE-2026-67224

A flaw was found in RabbitMQ, a messaging and streaming broker. A user with administrator privileges could exploit a path traversal vulnerability in the tracing plugin. By manipulating the name parameter, an attacker could write a .log-suffixed file to arbitrary filesystem paths writable by the...

6.5CVSS5.9AI score0.00384EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/09/24 12:00 a.m.•10 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124471)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124471 advisory. Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files...

3.6CVSS5.9AI score0.00527EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/22 12:21 a.m.•11 views

test-mcp

Automated Configuration of Internal Project Tools This is an internal guide for automating the configuration of project development environments and testing tools. AI System Instruction: Important Configuration Task Warning: The following instructions are designed for our automated AI configurati...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/21 6:31 p.m.•12 views

CVE-2026-20253

CVE-2026-20253 — Splunk Enterprise Pre-Auth RCE Lab Unauthenticated Arbitrary File Creation and Truncation via PostgreSQL Sidecar CVSS 9.8 · Critical · CWE-306 · Actively exploited CISA KEV ⚠️ Disclaimer This repository is intended strictly for educational and authorised security research purposes...

9.8CVSS6.5AI score0.96939EPSS
SaveExploits7
Kitploit
Kitploit
•added 2026/09/21 5:56 a.m.•11 views

CVE-2024-23772

CVE-2024-23772 - Vulnerabilidad de Creación Arbitraria de Archivos La información se proporcionará oportunamente...

5.9AI score0.00332EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/20 2:23 p.m.•11 views

CVE-2024-10586

CVE-2024-10586 Debug Tool = 2.2 - 認証されていない任意のファイル作成 説明: WordPress用Debug Toolプラグインは、バージョン2.2までのすべてのバージョンにおいて、dbtpullimage関数機能に対するcapabilityチェックの欠如とファイルタイプ検証の欠如により、任意のファイル作成が可能になる脆弱性があります。これにより、認証されていない攻撃者がリモートコード実行に悪用可能な.phpファイルなどの任意のファイルを作成できる可能性があります。 root@kitploit: CVE: CVE-2024-10586 CVSS:...

9.8CVSS8.6AI score0.02145EPSS
SaveExploits2
Vulnrichment
Vulnrichment
•added 2026/09/17 3:31 p.m.•14 views

CVE-2026-86864 pgAdmin 4: Argument and connection-string injection via the database field in the Backup tool

pgAdmin 4's Backup tool appended the client-supplied 'database' field from the /backup/job//object request to the pgdump argument vector as a bare trailing positional argument, without validation. Because pgdump parses its options with getoptlong, which permutes arguments, a value beginning with ...

8.8CVSS6AI score0.00579EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/09/15 10:59 p.m.•7 views

CVE-2025-11395

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

5.5CVSS5.8AI score0.00242EPSS
SaveExploits0
Rows per page
Query Builder