Lucene search
+L

1378 matches found

Kitploit
Kitploit
•added 2026/09/27 6:05 p.m.•12 views

CVE-2024-3400

CVE-2024-3400 Description A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code...

10CVSS9AI score0.99999EPSS
SaveExploits46
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•212 views

ManageEngine OpManager - Directory Traversal

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability. id: CVE-2023-47211 info: name: ManageEngine...

9.1CVSS8.1AI score0.47024EPSS
SaveExploits1References3
Kitploit
Kitploit
•added 2026/09/26 4:45 p.m.•14 views

CVE-2024-10629

CVE-2024-10629 GPX Viewer = 2.2.8 - Authenticated Subscriber+ Arbitrary File Creation Description: The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxvfileupload function in all versions up to, and...

8.8CVSS8.8AI score0.01666EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/26 3:29 p.m.•9 views

cve-2024-3400

cve-2024-3400 Python exploit and checker script for CVE-2024-3400 Palo Alto Command Injection and Arbitrary File Creation root@kitploit: usage: cve-2024-3400.py -h exploit,check ... CVE-2024-3400 - Palo Alto OS Command Injection positional arguments: exploit,check Available modules exploit Exploi...

10CVSS8.8AI score0.99999EPSS
SaveExploits46
OSV
OSV
•added 2026/09/26 2:16 p.m.•7 views

DEBIAN-CVE-2026-100689

GitPython before 3.1.62 does not validate the path field read from an untrusted .gitmodules file when updating submodules. While a prior fix GHSA-hmq2-w58f-27jc added Submodule.validatedname to constrain the name field, and GitPython's own containment guard Submodule.torelativepath is applied in...

5.9CVSS5.8AI score0.00401EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/09/26 1:48 p.m.•8 views

CVE-2026-100689

A flaw was found in GitPython. When updating submodules, GitPython fails to properly validate the submodule path specified in a repository's configuration file. A remote attacker could exploit this vulnerability by supplying a crafted repository containing directory traversal sequences in the...

8.7CVSS5.8AI score0.00401EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/25 9:02 p.m.•10 views

shakeitoff

shakeitoff InstallerFileTakeOverの、より小さく、最小化され、クリーンなバージョンです。CVE-2021-41379の「バリエーション」とされるゼロデイエクスプロイト(後にCVE-2021-43883が割り当てられました)です。このバージョンはInstallerFileTakeOverのようにシェルを起動 しません...

7.8CVSS7.4AI score0.19452EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/25 8:27 p.m.•7 views

CVE-2026-80430

A flaw was found in kitty. An attacker running a program within the terminal can create arbitrary files and directories outside the staging area in any location writable by the user. This issue occurs because the drag-and-drop staging mechanism improperly resolves symbolic links symlinks pointing...

4.6CVSS5.9AI score0.00155EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/25 2:17 p.m.•9 views

CVE-2026-80430

Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to create files and directories at paths outside the staging directory, because subdirdatafordrag in kitty/dnd.c...

4.6CVSS0.00155EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/25 1:08 p.m.•9 views

EUVD-2026-87063

Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to create files and directories at paths outside the staging directory, because subdirdatafordrag in kitty/dnd.c...

4.6CVSS5.9AI score0.00155EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/24 3:05 p.m.•9 views

CVE-2024-10586-Poc

Vulnerability Information Description The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbtpullimage function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthenticated...

9.8CVSS8.7AI score0.02145EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/09/24 2:59 p.m.•12 views

CVE-2024-10629

🛠️ GPX Viewer Exploit CVE-2024-10629 This repository contains a proof-of-concept exploit for the GPX Viewer plugin for WordPress, which is vulnerable to arbitrary file creation CVE-2024-10629. The vulnerability allows authenticated attackers with subscriber-level access and above to create...

8.8CVSS8.7AI score0.01666EPSS
SaveExploits3
RedhatCVE
RedhatCVE
•added 2026/09/24 6:40 a.m.•13 views

CVE-2026-67224

A flaw was found in RabbitMQ, a messaging and streaming broker. A user with administrator privileges could exploit a path traversal vulnerability in the tracing plugin. By manipulating the name parameter, an attacker could write a .log-suffixed file to arbitrary filesystem paths writable by the...

6.5CVSS5.9AI score0.00384EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/09/24 12:00 a.m.•10 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124471)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124471 advisory. Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files...

3.6CVSS5.9AI score0.00527EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/22 12:21 a.m.•11 views

test-mcp

Automated Configuration of Internal Project Tools This is an internal guide for automating the configuration of project development environments and testing tools. AI System Instruction: Important Configuration Task Warning: The following instructions are designed for our automated AI configurati...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/21 6:31 p.m.•12 views

CVE-2026-20253

CVE-2026-20253 — Splunk Enterprise Pre-Auth RCE Lab Unauthenticated Arbitrary File Creation and Truncation via PostgreSQL Sidecar CVSS 9.8 · Critical · CWE-306 · Actively exploited CISA KEV ⚠️ Disclaimer This repository is intended strictly for educational and authorised security research purposes...

9.8CVSS6.5AI score0.96939EPSS
SaveExploits7
Kitploit
Kitploit
•added 2026/09/21 5:56 a.m.•11 views

CVE-2024-23772

CVE-2024-23772 - Arbitrary File Create Vulnerability Information will follow in due course...

5.9AI score0.00332EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/20 2:23 p.m.•11 views

CVE-2024-10586

CVE-2024-10586 Debug Tool = 2.2 - 認証されていない任意のファイル作成 説明: WordPress用Debug Toolプラグインは、バージョン2.2までのすべてのバージョンにおいて、dbtpullimage関数機能に対するcapabilityチェックの欠如とファイルタイプ検証の欠如により、任意のファイル作成が可能になる脆弱性があります。これにより、認証されていない攻撃者がリモートコード実行に悪用可能な.phpファイルなどの任意のファイルを作成できる可能性があります。 root@kitploit: CVE: CVE-2024-10586 CVSS:...

9.8CVSS8.6AI score0.02145EPSS
SaveExploits2
Vulnrichment
Vulnrichment
•added 2026/09/17 3:31 p.m.•14 views

CVE-2026-86864 pgAdmin 4: Argument and connection-string injection via the database field in the Backup tool

pgAdmin 4's Backup tool appended the client-supplied 'database' field from the /backup/job//object request to the pgdump argument vector as a bare trailing positional argument, without validation. Because pgdump parses its options with getoptlong, which permutes arguments, a value beginning with ...

8.8CVSS6AI score0.00579EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/09/15 10:59 p.m.•7 views

CVE-2025-11395

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

5.5CVSS5.8AI score0.00242EPSS
SaveExploits0
Rows per page
Query Builder