Lucene search
+L

9013 matches found

Kitploit
Kitploit
•added 2026/09/28 7:33 p.m.•15 views

CVE-2022-40146_Exploit_Jar

Apache Batik SSRF to RCE Jar Exploit Component link https://github.com/apache/xmlgraphics-batik Blog https://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading Usage Modify the line 11 in...

7.5CVSS7.5AI score0.07431EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/09/28 6:52 p.m.•14 views

AI-SPM

Orbyx AI SPM - AI Security Posture Management AI security posture management AI-SPM is a comprehensive approach to maintaining the security and integrity of artificial intelligence AI and machine learning ML systems. It involves continuous monitoring, assessment, and improvement of the security...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 6:13 p.m.•65 views

nodejsscan

nodejsscan Static security code scanner SAST for Node.js applications powered by libsast and semgrep. Made with in India...

5.4AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/28 5:15 p.m.•16 views

ServerSecurityAudit

🛡️ Windows Server Security Audit NIS2 Alignment 📋 Overview A modular PowerShell-based engine designed to perform deep security hygiene audits on Windows Server systems. It delivers actionable risk scoring mapped to NIS2 Directive Article 21 , MITRE ATT &CK, and CIS Controls v8 , generating...

6.1AI score
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/28 5:10 p.m.•4 views

CVE-2026-101898 Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls

Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup does not consistently apply proxy settings and caller-supplied DNS lookup policy. An HTTPS request uses httpVersion: 2 with explicit config.proxy or environment-derived proxy...

7CVSS5.8AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/28 12:37 p.m.•12 views

tailsnitch

Tailsnitch A security auditor for Tailscale configurations. Tailsnitch scans your tailnet for 57 misconfigurations, overly permissive access controls, and security best practice violations. Quick Start root@kitploit: 1. Set your Tailscale API credentials export TSAPIKEY="tskey-api-..." 2. Run aud...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 12:37 p.m.•16 views

kismet

https://www.kismetwireless.net The Kismet docs can be most easily found and read at the Kismet website The docs repository is at: root@kitploit: $ git clone https://www.kismetwireless.net/git/kismet-docs.git and mirrored on Github at: root@kitploit: $ git clone...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 12:31 p.m.•10 views

CVE-2021-40444

Microsoft MSHTML Remote Code Execution Vulnerability CVE-2021-40444 How to disable ActiveX controls on an individual system ? 1. To disable installing ActiveX controls in Internet Explorer in all zones, paste the following into a text file and save it with the .reg file extension: Windows Registr...

8.8CVSS7.2AI score0.9745EPSS
SaveExploits38
Kitploit
Kitploit
•added 2026/09/28 12:28 p.m.•10 views

zerobox

Zerobox Python SDK Python SDK for zerobox. Sandbox any command with file, network, and credential controls. root@kitploit: pip install zerobox Installing the wheel drops the zerobox CLI into your environment's bin/ and exposes a Python SDK. For CLI usage, secrets concepts, the full flag reference...

6.2AI score
SaveExploits0References6
NVD
NVD
•added 2026/09/28 12:17 p.m.•7 views

CVE-2026-101053

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUTFILE of the file /tmp/wpasupplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls. The attack may be launched remotely. The exploit...

7.5CVSS
SaveExploits0References6
NVD
NVD
•added 2026/09/28 12:17 p.m.•8 views

CVE-2026-101054

A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function getfile of the file /tmp/wpasupplicant.conf of the component TCP Service. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The exploit is publicly available...

6.9CVSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/28 11:45 a.m.•6 views

EUVD-2026-88225

A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function getfile of the file /tmp/wpasupplicant.conf of the component TCP Service. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The exploit is publicly available...

6.9CVSS5.4AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/09/28 11:30 a.m.•8 views

EUVD-2026-88221

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUTFILE of the file /tmp/wpasupplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls. The attack may be launched remotely. The exploit...

7.5CVSS6.7AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/28 7:02 a.m.•10 views

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager 3 Remote Code Execution without authentication 3.15.0 found by Rico Tencent Security Yunding Lab and @voidfyoo Detailed analysis english: https://chybeta.github.io/2019/02/18/Nexus-Repository-Manager-3-RCE-%E5%88%86%E6%9E%90-%E3%80%90CVE-2019-7238%E3%80%91/...

9.8CVSS8.8AI score0.77146EPSS
SaveExploits4References1
Kitploit
Kitploit
•added 2026/09/28 4:59 a.m.•8 views

CVE-2021-40444

EXP Ladon CVE-2021-40444 Office Vulnerability Exploitation Vulnerability Overview On September 8th Beijing time, NSFOCUS CERT monitored that Microsoft released a security advisory disclosing the Microsoft MSHTML remote code execution vulnerability. Attackers can craft malicious ActiveX controls f...

8.8CVSS7.9AI score0.9745EPSS
SaveExploits38
Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•104 views

ZKTeco BioTime <= 9.0.1 - Privilege Escalation

BioTime default employee credentials password 123456 allow login. Sessions are not role-validated, enabling privilege escalation to perform admin actions and enumerate backup files. id: CVE-2023-38952 info: name: ZKTeco BioTime = 9.0.1 - Privilege Escalation author: riteshs4hu severity: high...

9.8CVSS7.7AI score0.03257EPSS
SaveExploits2References3
Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•35 views

Sitecore CMS - Cross-Site Scripting

Sitecore CMS contains a cross-site scripting vulnerability via the "special way" of displaying XML Controls directly, which allows for a Cross Site Scripting Attack. id: CVE-2014-100004 info: name: Sitecore CMS - Cross-Site Scripting author: DhiyaneshDK severity: medium description: | Sitecore CM...

4.3CVSS5.7AI score0.02016EPSS
SaveExploits1References3
Kitploit
Kitploit
•added 2026/09/28 12:50 a.m.•14 views

Docker-Security

Docker Security Este es el OWASP Docker Top 10. Es un trabajo en curso. Acerca de este documento Este documento describe los 10 puntos de seguridad más importantes para construir un entorno containerizado seguro. Puedes usarlo como una hoja de especificaciones si empiezas desde cero, o bien...

5.9AI score
SaveExploits0
EUVD
EUVD
•added 2026/09/28 12:30 a.m.•10 views

EUVD-2026-88047

A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been published and may be...

6.5CVSS6AI score0.00457EPSS
SaveExploits0References11
NVD
NVD
•added 2026/09/27 11:16 p.m.•9 views

CVE-2026-100883

A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been published and may be...

6.5CVSS0.00457EPSS
SaveExploits0References10
Rows per page
Query Builder