Lucene search
+L

13012 matches found

BDU FSTEC
BDU FSTEC
added 2026/09/12 11:41 a.m.39 views

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

8.5CVSS6.1AI score
SaveExploits0Affected Software1
Kitploit
Kitploit
added 2026/09/12 5:39 a.m.5 views

CVE-2019-11932

CVE-2019-11932 WhatsApp 漏洞利用 PoC 中的双释放 bug。 注意:确保在 exploit.c 中设置监听器 IP 以获取 shell nc -lvp 1337 或任意端口。 然后编译。 make 或者 gcc -o exploit egiflib.c exploit.c 然后运行 ./exploit 并将内容保存到 .gif 并发送给受害者。 来源 https://awakened1712.github.io/hacking/hacking-whatsapp-gif-rce/. 概念验证视频...

8.8CVSS8.1AI score0.4453EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/12 3:40 a.m.5 views

CVE-2020-11932

CVE-2020-11932 WhatsApp 漏洞利用 PoC 中的 Double-Free 漏洞。 注意:务必在 exploit.c 中设置监听 IP 以获取 shell nc -lvp 1337 或其他端口。 然后编译。 make 或 gcc -o exploit egiflib.c exploit.c 然后运行 ./exploit 并将内容保存为 .gif 然后发送给受害者。 来源 https://awakened1712.github.io/hacking/hacking-whatsapp-gif-rce/. 演示视频...

2.3CVSS5.7AI score0.00597EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/12 3:03 a.m.9 views

winrar-cve-2023-38831-poc-gen

CVE-2023-38831 漏洞利用生成器 此工具是一个 Python 脚本,利用 RAR 文件格式中的一个漏洞(CVE-2023-38831),在用户打开诱饵文件时执行恶意命令。该漏洞影响 6.23 之前版本的 WinRAR,例如 6.22、6.21、6.20 或更早版本。 环境要求 Python 或 python3 使用方法 使用此工具有两种方式: 要生成概念验证(PoC)漏洞利用,使用参数 poc 运行脚本: python .\cve-2023-38831-exp-gen.py poc 这将创建一个名为 CVE-2023-38831-poc.rar 的文件,其中包含一个名为...

7.8CVSS7AI score0.97894EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/12 1:50 a.m.8 views

CVE-2021-22204

CVE-2021-22204 - Exiftool Remote Code Execution Description Recently, the researcher wcbowling found a vulnerability in the Exiftool tool, that enabled a malicious actor to perform a Remote code Execution attack. This vulnerability was found in the Gitlab bug bounty program, where they use this...

7.8CVSS7.5AI score0.99981EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/09/11 11:42 p.m.7 views

CVE-2026-8461-PoC

CVE-2026-8461 概念验证 !WARNING 此概念验证完全由AI生成。 用法: root@kitploit: python exploitcve20268461.py --baseline --frames 25 -o baseline.avi 未打补丁的ffmpeg版本在处理baseline.avi时会崩溃。...

8.8CVSS7.1AI score0.01572EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/11 7:22 p.m.7 views

CVE-2023-20052

CVE-2023-20052 CVE-2023-20052,ClamAV 的 DMG 文件解析器中的信息泄露漏洞 用法 创建恶意 DMG 文件 root@kitploit: git clone https://github.com/nokn0wthing/CVE-2023-20052.git cd CVE-2023-20052 sudo docker build -t cve-2023-20052 . sudo docker run -v $pwd:/exploit -it cve-2023-20052 bash genisoimage -D -V "exploit" -no-pad -...

5.3CVSS7.5AI score0.07003EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/11 3:16 p.m.7 views

CVE-2024-22532

CVE-2024-22532 描述 XnSoft XnView Classic 2.51.5 和 NConvert 7.163 容易受到通过特制 .xwd 文件导致的堆缓冲区溢出漏洞的影响 厂商 XnSoft 受影响产品 XnView Classic 2.51.5 NConvert 7.163 影响 拒绝服务 远程代码执行 PoC 拒绝服务 使用的命令行 nconvert.exe -out pzl -in xwd -o .\tmp.pzl .\pocdos.xwd root@kitploit: Path validation summary Response Time ms Locati...

6.5CVSS7.3AI score0.01126EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/11 7:52 a.m.6 views

CVE-2021-22204

受影响版本 7.44 12.23 复现步骤 root@kitploit: $ bash craftadjvuexploit.sh 'cal' $ ./exiftool delicate.jpg 截图 参考 NVD-CVE-2021-22204...

7.8CVSS7.5AI score0.99981EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/09/11 5:31 a.m.5 views

CVE-2019-13288-POC

CVE-2019-13288 概念验证(PoC) xpdf/install/bin/pdftotext ./poc.pdf 在 Xpdf 4.01.01 中,Parser.cc 中的 Parser::getObj 函数可能通过特制文件导致无限递归。远程攻击者可利用此漏洞发起拒绝服务(DoS)攻击。这与 CVE-2018-16646 类似。...

5.5CVSS6.3AI score0.04556EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 12:07 a.m.6 views

CVE-2026-26832

CVE-2026-26832: node-tesseract-ocr 中的操作系统命令注入 摘要 node-tesseract-ocr 至版本 2.2.1 允许在 src/index.js 的 recognize 中进行操作系统命令注入。该包构建一个 shell 命令字符串并使用 childprocess.exec 执行它。由于输入路径仅用双引号包裹,攻击者可以通过精心构造的文件路径注入 shell 语法。 受影响产品 产品| 受影响版本| 修复版本 ---|---|--- node-tesseract-ocr| 所有 2.2.1 及之前版本| 截至 2026-03-24 无可用修复...

9.8CVSS8.2AI score0.01706EPSS
SaveExploits3References2
Kitploit
Kitploit
added 2026/09/10 11:34 p.m.7 views

CVE-2019-12735

CVE-2019-12735 Este CVE fue corregido después de neovim 0.3.6 y vim 8.1.1365 POC root@kitploit: vim demo1.txt Shell remota 1. Crea el archivo de texto malicioso: root@kitploit: gcc makedemo3.c -o makedemo3 ./makedemo3 2. Compila el cliente en otra sesión: root@kitploit: nc -vlp 9999 3. Abre el...

9.3CVSS7.9AI score0.18964EPSS
SaveExploits5References1
RedHat Linux
RedHat Linux
added 2026/09/10 1:18 p.m.8 views

vim: Vim: Denial of Service via crafted spell file

A flaw was found in Vim, an open-source command-line text editor. A remote attacker could exploit this vulnerability by convincing a user to load a specially crafted spell file. This malicious file can trigger a stack out-of-bounds write, which corrupts the editor's memory and causes it to crash...

5.5CVSS0.0012EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/10 7:38 a.m.6 views

vim: Vim: Denial of Service via crafted spell file

A flaw was found in Vim, an open-source command-line text editor. A remote attacker could exploit this vulnerability by convincing a user to load a specially crafted spell file. This malicious file can trigger a stack out-of-bounds write, which corrupts the editor's memory and causes it to crash...

5.5CVSS0.0012EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/10 1:39 a.m.9 views

CVE-2024-42845-Exploit

CVE-2024-42845: Ejecución Remota de Código RCE en Invesalius 3.1 Detalles del Exploit Título del Exploit : Invesalius 3.1 - Ejecución Remota de Código RCE Descubierto por : Alessio Romano sfoffo, Riccardo Degli Esposti partywave Autor del Exploit : Alessio Romano sfoffo, Riccardo Degli Esposti...

8CVSS7.5AI score0.02744EPSS
SaveExploits5References3
Kitploit
Kitploit
added 2026/09/09 2:09 p.m.7 views

CVE-2026-20841

No se ha verificado la precisión de este método de activación del PoC, y debe considerarse solo como informativo/de referencia. CVE-2026-20841 - RCE en notepad.exe de Windows Condición de explotación: Probado en: Versión del Bloc de notas 11.2510.14.0 Paso 1: Guardar archivo Paso 2: Abrir archivo...

7.8CVSS8AI score0.11848EPSS
SaveExploits9
NVD
NVD
added 2026/09/09 10:22 a.m.5 views

CVE-2026-86776

KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a malicious KDBX file declaring excessive header field lengths to trigger allocation of gigabytes of memory, causing the application to consu...

4.6CVSS0.00118EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/09 10:12 a.m.6 views

CVE-2022-36752

CVE-2022-36752 的描述 png2webp v1.0.4 被发现在函数 w2p 中存在越界写入漏洞。在将格式反向转换回 png 时,该漏洞可通过特制的 webp 文件加以利用。 复现 要复现该漏洞,请下载存在漏洞的 png2webp(v1.0.4)版本并编译该项目: root@kitploit: git clone https://github.com/landfillbaby/png2webp.git cd png2webp git checkout 0c7119109cde91127a263bf0af252e5e730f7fba git submodule update...

5.5CVSS6.3AI score0.00437EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/09/09 1:24 a.m.8 views

CVE-2026-87570

A flaw was found in SiteIsolation in Google Chrome. A remote attacker, who has already compromised the renderer process, could leverage social engineering and a crafted file to bypass the browser's site isolation feature. This bypass could allow the attacker to access information or resources fro...

8.8CVSS0.00226EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/09 1:17 a.m.6 views

DEBIAN-CVE-2026-87570

Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted file. Chromium security severity: Medium...

8.8CVSS0.00226EPSS
SaveExploits0References1
Rows per page
Query Builder