86340 matches found
CVE-2026-89729
creationtimestamp| type| source ---|---|--- 2026-09-11 20:51:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117254381616693208...
CVE-2026-53952
creationtimestamp| type| source ---|---|--- 2026-09-11 20:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvbgfge4mw24 2026-09-11 22:02:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvbkyb4rc62w 2026-09-11 22:07:55+00:00| seen|...
CVE-2026-89725
creationtimestamp| type| source ---|---|--- 2026-09-11 20:37:56+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117254329189868799...
CVE-2026-79395
creationtimestamp| type| source ---|---|--- 2026-09-11 20:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvbftl3fce2f 2026-09-11 22:02:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvbkypda632v 2026-09-11 22:07:47+00:00| seen|...
CVE-2026-4480-exploit-poc
Usage: For anonymos login: python3 exploit.py --lhost --lport -t -N it is for anonymous login Login via credentials: python3 exploit.py --lhost --lport -t -u -p root@kitploit: ! Error: the following arguments are required: -s/--sharename Note: if user is anonymous and no password, then just add -...
CVE-2026-89702
creationtimestamp| type| source ---|---|--- 2026-09-11 20:24:45+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117254277344122641...
CVE-2026-89712
creationtimestamp| type| source ---|---|--- 2026-09-11 20:10:50+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117254222625837784...
CVE-2026-62135
Unauthenticated Broken Access Control in Booktics = 1.0.24 versions...
CVE-2026-62103
Unauthenticated PHP Object Injection in Everest Forms = 3.6.0 versions...
CVE-2026-85612
creationtimestamp| type| source ---|---|--- 2026-09-11 19:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102066 2026-09-12 00:00:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102066...
CVE-2026-79294
creationtimestamp| type| source ---|---|--- 2026-09-11 19:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102071 2026-09-12 00:00:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102071...
CVE-2026-62105
creationtimestamp| type| source ---|---|--- 2026-09-11 18:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvbaarbvd42j 2026-09-11 20:08:28+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvbemw4pqi22...
CVE-2026-62103
creationtimestamp| type| source ---|---|--- 2026-09-11 18:40:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvb7owcdmg2n 2026-09-11 20:08:19+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvbemoaql32y...
CVE-2026-82617
creationtimestamp| type| source ---|---|--- 2026-09-11 18:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvb7otpkeu2j 2026-09-11 20:08:03+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvbem5vg752f...
ResetNightmare
ResetNightmare 用于 ResetNightmare CVE-2026-27912 的概念验证（POC）工具。 ResetNightmare 是 Kerberos 更改密码协议中的一个验证缺陷，允许在不知道当前密码的情况下重置任何目标用户/计算机帐户的密码。 该攻击需要一个未打补丁的域控制器，并且能够在你控制的任何帐户上写入 userPrincipalName UPN。 或者，拥有在任何 OU 中创建新用户/计算机权限的攻击者也可以利用此漏洞，因为创建用户/计算机后，攻击者将获得对其的 GenericWrite 权限。 攻击流程 此脚本自动化整个攻击流程，并在执行后自行清理。...
CVE-2026-50656
CVE-2026-50656, CVE-2026-69414 捐赠 通过 PayPal 支持本项目的维护，或扫描下方二维码。 ⚡ 简单用法 仅在安全且获得授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离的实验环境 获得授权的渗透测试环境 示例设置与用法： root@kitploit: Follow dri project 注意： 从其他项目克隆时，你必须运行 curl -fsSL https://gist.githubusercontent.com/HORKimhab/24c89ee9a86a42aac88381334f8bfe48/raw | bash -s -- ...
cpanel2shell-scanner
cpanel2shell-scanner CVE-2026-41940 として追跡されている cPanel/WHM 認証バイパス用の高精度スキャナです。公開されている概念実証や検出にありがちな偽陰性を発生させず、またアカウントロックアウトや root IP 許可リスト機構（ナイーブなスキャンを妨害する）を引き起こさずに脆弱なホストを識別します。 このツールには、cpdavd（ポート 2079 平文/2080 TLS）上の同一系統の CalDAV...
CVE-2026-62132
CVE-2026-62132 is a Broken Access Control vulnerability affecting the Masteriyo – LMS WordPress plugin in versions ≤ 3.4.0 . The flaw allows users with the Subscriber role to bypass access controls, resulting in a low integrity impact (CVSS 3.1 score: 5.3 MEDIUM ). The vulnerability was discovere...
CVE-2026-62106
SMS Alert Order Notifications WordPress plugin (versions ≤ 3.9.9 ) is affected by a Subscriber-level privilege escalation vulnerability. The CNA-assigned CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privileged (Subscriber) user can achieve hi...
