Lucene search
+L

6653 matches found

Kitploit
Kitploit
•added 2026/09/29 3:29 p.m.•134 views

tsunami-security-scanner

Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...

6.2AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/29 11:32 a.m.•12 views

patch-CVE-2026-09881

Parche: CVE-2026-09881 Detalles de la Vulnerabilidad CVE : CVE-2026-09881 Producto : Atlassian Confluence Descripción : Inyección de plantillas RCE Gravedad : Alta Estado del Parche: DESPLEGADO Campo| Valor ---|--- Fecha del Parche| 2026-04-01 Estado| desplegado Desplegado En| Producción Validado...

6AI score
SaveExploits1
Kitploit
Kitploit
•added 2026/09/29 11:32 a.m.•15 views

patch-CVE-2026-06555

Parche: CVE-2026-06555 Detalles de la vulnerabilidad CVE : CVE-2026-06555 Producto : SonicWall SMA Descripción : Path traversal Gravedad : Alta Estado del parche: DESPLEGADO Campo| Valor ---|--- Fecha del parche| 2026-02-25 Estado| desplegado Desplegado en| Producción Validado por| Equipo SecOps...

6AI score
SaveExploits1
Kitploit
Kitploit
•added 2026/09/29 10:49 a.m.•11 views

cve-2026-41200-stig-manager-oidc-reflected-xss

CVE-2026-41200 — PoC de XSS Reflejado en STIG Manager OIDC Prueba de concepto de la vulnerabilidad de Cross-Site Scripting XSS reflejado en STIG Manager versiones 1.5.10 hasta 1.6.7. Resumen de la vulnerabilidad Existe una vulnerabilidad de XSS reflejado en el código de manejo de errores de...

8.5CVSS6.1AI score0.00623EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/29 9:57 a.m.•14 views

cve-2025-50428

CVE-2025-50428 - Inyección de Comandos en RaspAP Una prueba de concepto PoC para CVE-2025-50428, una vulnerabilidad de inyección de comandos en RaspAP raspap-webgui 3.2.9 y versiones anteriores. ID de Vulnerabilidad| CVE-2025-50428 ---|--- Severidad| Alta CVSS 3.1: 8.6 Vector CVSS|...

5.9AI score0.01626EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/29 8:08 a.m.•9 views

patch-CVE-2026-05890

Parche: CVE-2026-05890 Detalles de la vulnerabilidad CVE : CVE-2026-05890 Producto : Juniper Junos Descripción : Autenticación incorrecta Severidad : Alta Estado del Parche: DESPLEGADO Campo| Valor ---|--- Fecha del Parche| 2026-02-10 Estado| desplegado Desplegado en| Producción Validado por|...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 4:00 a.m.•12 views

patch-CVE-2026-19843

Parche: CVE-2026-19843 Detalles de la vulnerabilidad CVE : CVE-2026-19843 Producto : Cisco IOS XE Descripción : Escalada de privilegios a través de la interfaz web Gravedad : Alta Estado del parche: DESPLEGADO Campo| Valor ---|--- Fecha del parche| 2026-06-15 Estado| desplegado Desplegado en|...

8.4CVSS6AI score0.0048EPSS
SaveExploits1
Nuclei
Nuclei
•added 2026/09/29 2:09 a.m.•101 views

Swift Performance Lite < 2.3.7.2 - Local PHP File Inclusion

A vulnerability in Swift Performance Lite before version 2.3.7.2 allows unauthenticated attackers to perform local PHP file inclusion via the 'ajaxify' parameter. This can lead to arbitrary code execution on the server. id: CVE-2024-10516 info: name: Swift Performance Lite 2.3.7.2 - Local PHP Fil...

8.1CVSS8.6AI score0.06436EPSS
SaveExploits1References2
Nuclei
Nuclei
•added 2026/09/29 2:09 a.m.•36 views

Intelbras TIP 200/200 LITE/300 - Local File Inclusion

Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 are vulnerable to local file inclusion via the 'page' parameter in /cgi-bin/cgiServer.exx, allowing unauthenticated attackers to read arbitrary files such as /etc/passwd. id: CVE-2020-13886 info: name: Intelbras TIP...

5.3CVSS7.3AI score0.05198EPSS
SaveExploits2References2
Nuclei
Nuclei
•added 2026/09/29 2:09 a.m.•51 views

Hongjing e-HR 2020 - SQL Injection

A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some unknown functionality of the file /wselfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree of the component Login Interface. The manipulation of the argument...

9.8CVSS7AI score0.03735EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/09/28 10:26 p.m.•16 views

informer

Informer - Vigilancia Masiva de Telegram Actualización 10-20-2025 Seguridad : Se corrigió la vulnerabilidad de alta gravedad CVE-2022-1941 en mysql-connector-python Seguridad : Se migró de oauth2client obsoleto a google-auth Se actualizaron todas las dependencias a las versiones seguras más...

7.5CVSS7AI score0.01502EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 10:21 p.m.•13 views

CVE-2020-1938

CVE-2020-1938 Reglas de detección de Suricata CNVD-2020-10487 CVE-2020-1938 alert tcp any any - any 8009 msg:"CNVD-2020-10487 Ghostcat"; content:"javax|2e|servlet|2e|include|2e|requesturi"; content:"javax|2e|servlet|2e|include|2e|pathinfo"; content:"javax|2e|servlet|2e|include|2e|servletpath";...

9.8CVSS8AI score0.9927EPSS
SaveExploits51
Kitploit
Kitploit
•added 2026/09/28 9:15 p.m.•16 views

CVE-2024-4761

CVE-2024-4761 Exploit de alta gravedad CVE-2024-4761 Google ha publicado actualizaciones de seguridad de emergencia para abordar una vulnerabilidad de día cero de alta gravedad, registrada como CVE-2024-4761, en el navegador Chrome. La vulnerabilidad es un problema de escritura fuera de los límit...

8.8CVSS8.2AI score0.11007EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/28 4:12 p.m.•13 views

CVE-2026-50656

🚨 CVE-2026-50656 — Microsoft Defender "RoguePlanet" Elevation of Privilege Vulnerability in Microsoft Malware Protection Engine ⚠️ Educational and Defensive Security Research Only 📖 Overview CVE-2026-50656 is a high-severity Elevation of Privilege EoP vulnerability affecting the Microsoft Malware...

7.8CVSS8AI score0.00368EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/28 3:21 p.m.•12 views

CVE-2022-22978-demo

CVE-2022-22978-demo CVE-2022-22978 vulnerability demo code Exploitation Conditions Although rated as high severity, the exploitation conditions are quite stringent. Personally, I find this vulnerability rather underwhelming. 1. First, spring-security must be within the affected scope. 2. Second, ...

9.8CVSS7.5AI score0.12351EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/28 1:45 p.m.•8 views

CVE-2021-44228-DFIR-Notes

CVE-2021-44228 DFIR-Notes Driving home I got my first messages flowing in about the log4shell vulnerability. A high severity vulnerability CVE-2021-44228 impacting multiple versions of the Apache Log4j 2 utility was disclosed publicly via the project's GitHub on December 9, 2021. This...

10CVSS7.3AI score0.99999EPSS
SaveExploits375References1
Kitploit
Kitploit
•added 2026/09/28 9:50 a.m.•15 views

CVE-2026-11645

🚨 CVE-2026-11645 🚨 🌐 Google Chrome V8 Zero-Day Memory Corruption Vulnerability 🔥 Actively Exploited Zero-Day ⚡ V8 Engine Memory Corruption 🛡️ Patch Immediately 📖 Overview ⚠️ CVE-2026-11645 is a high-severity zero-day vulnerability affecting the Google Chrome V8 JavaScript engine. The flaw allows...

8.8CVSS8.4AI score0.0219EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/28 6:02 a.m.•12 views

CVE-2021-46079

CVE-2021-46079 Título del exploit: Vehicle Service Management System - 'Múltiple' carga de archivos conduce a inyección de HTML Autor del exploit: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 HIGH Referencias:...

7.2CVSS7.6AI score0.03309EPSS
SaveExploits1
Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•63 views

Give WP Plugin < 3.19.0 - Cross-Site Scripting

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2024-11921 info: name: Give WP Plugin 3.19.0 - Cross-Site Scripting author: Splint3r7...

8.2AI score0.00803EPSS
SaveExploits1References2
Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•154 views

reNgine 2.2.0 - Command Injection

reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/tools/wafdetector/?url= string. The commands are executed as root via subprocess.checkoutput. id: CVE-2023-50094 info: name: reNgine 2.2.0 - Command Injection...

8.8CVSS7.7AI score0.1354EPSS
SaveExploits2References3
Rows per page
Query Builder